0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:57:56 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:57:56 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:57:56 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c", 0x1a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:57:56 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c9413", 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:57:56 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fork()
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r1})
tkill(0x0, 0x29)

03:57:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1105.646476] loop6: detected capacity change from 0 to 40
[ 1105.650120] FAT-fs (loop6): bogus number of reserved sectors
[ 1105.650672] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1105.677787] loop2: detected capacity change from 0 to 40
[ 1105.680252] FAT-fs (loop2): bogus number of reserved sectors
[ 1105.680775] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1105.682171] syz_tun: refused to change device tx_queue_len
[ 1105.716691] syz_tun: refused to change device tx_queue_len
[ 1105.744731] loop7: detected capacity change from 0 to 40
[ 1105.758275] FAT-fs (loop7): bogus number of FAT sectors
[ 1105.759169] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1105.762090] syz_tun: refused to change device tx_queue_len
[ 1105.765180] syz_tun: refused to change device tx_queue_len
03:57:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fork()
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r1})
tkill(0x0, 0x29)

03:57:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = fork()
fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r1})
tkill(0x0, 0x29)

03:57:57 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
fork()
r0 = fork()
tkill(r0, 0x29)

03:57:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:57:57 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

03:57:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:57:57 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c9413", 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:57:57 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c9413", 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:57:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1106.932899] syz_tun: refused to change device tx_queue_len
03:57:58 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1106.943162] loop7: detected capacity change from 0 to 40
[ 1106.945111] loop6: detected capacity change from 0 to 40
[ 1106.955013] syz_tun: refused to change device tx_queue_len
[ 1106.972299] FAT-fs (loop6): bogus number of reserved sectors
[ 1106.972921] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1106.988933] loop2: detected capacity change from 0 to 40
[ 1107.003250] FAT-fs (loop2): bogus number of reserved sectors
[ 1107.003987] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1107.043122] syz_tun: refused to change device tx_queue_len
[ 1107.049879] syz_tun: refused to change device tx_queue_len
03:58:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
fork()
r0 = fork()
tkill(r0, 0x29)

03:58:11 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1120.706557] loop6: detected capacity change from 0 to 40
03:58:11 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c9413", 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:11 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:11 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

03:58:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1120.737226] syz_tun: refused to change device tx_queue_len
[ 1120.737724] FAT-fs (loop6): invalid media value (0x00)
[ 1120.738121] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1120.741653] loop7: detected capacity change from 0 to 40
[ 1120.755295] syz_tun: refused to change device tx_queue_len
[ 1120.785017] loop2: detected capacity change from 0 to 40
[ 1120.805455] syz_tun: refused to change device tx_queue_len
[ 1120.810869] FAT-fs (loop2): bogus number of reserved sectors
[ 1120.811727] FAT-fs (loop2): Can't find a valid FAT filesystem
03:58:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = fork()
tkill(r0, 0x29)

03:58:31 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1140.124787] loop7: detected capacity change from 0 to 40
03:58:31 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
tkill(r0, 0x29)

03:58:31 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

03:58:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:31 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:31 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1140.140486] syz_tun: refused to change device tx_queue_len
[ 1140.148487] syz_tun: refused to change device tx_queue_len
[ 1140.177200] loop2: detected capacity change from 0 to 40
[ 1140.179249] FAT-fs (loop2): bogus number of reserved sectors
[ 1140.179726] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1140.183444] loop6: detected capacity change from 0 to 40
[ 1140.214971] syz_tun: refused to change device tx_queue_len
[ 1140.215856] FAT-fs (loop6): invalid media value (0x00)
[ 1140.216619] FAT-fs (loop6): Can't find a valid FAT filesystem
03:58:31 executing program 0:
r0 = fork()
tkill(r0, 0x29)

03:58:31 executing program 0:
fork()
tkill(0x0, 0x29)

03:58:31 executing program 0:
fork()
tkill(0x0, 0x29)

03:58:32 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1141.024284] syz_tun: refused to change device tx_queue_len
03:58:32 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:32 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:32 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1141.146061] loop7: detected capacity change from 0 to 40
03:58:32 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:32 executing program 0:
fork()
tkill(0x0, 0x29)

[ 1141.176492] syz_tun: refused to change device tx_queue_len
[ 1141.183676] loop2: detected capacity change from 0 to 40
03:58:32 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1141.193549] FAT-fs (loop2): bogus number of reserved sectors
[ 1141.193978] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1141.203942] syz_tun: refused to change device tx_queue_len
[ 1141.215245] loop6: detected capacity change from 0 to 40
[ 1141.246338] syz_tun: refused to change device tx_queue_len
[ 1141.248618] FAT-fs (loop6): invalid media value (0x00)
[ 1141.249357] FAT-fs (loop6): Can't find a valid FAT filesystem
03:58:32 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1141.489685] syz_tun: refused to change device tx_queue_len
03:58:32 executing program 0:
r0 = fork()
tkill(r0, 0x0)

03:58:32 executing program 0:
r0 = fork()
tkill(r0, 0x0)

03:58:32 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1141.813680] cgroup: fork rejected by pids controller in /syz0
[ 1141.898349] syz_tun: refused to change device tx_queue_len
03:58:33 executing program 0:
r0 = fork()
tkill(r0, 0x0)

03:58:33 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1142.144913] loop7: detected capacity change from 0 to 40
03:58:50 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

03:58:50 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:50 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:50 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

03:58:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:50 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:50 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1159.395664] syz_tun: refused to change device tx_queue_len
03:58:50 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1159.429374] loop6: detected capacity change from 0 to 40
[ 1159.432671] FAT-fs (loop6): invalid media value (0x00)
[ 1159.433043] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1159.440374] loop2: detected capacity change from 0 to 40
[ 1159.447121] FAT-fs (loop2): bogus number of reserved sectors
[ 1159.447720] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1159.482077] loop7: detected capacity change from 0 to 40
[ 1159.484959] syz_tun: refused to change device tx_queue_len
[ 1159.492130] syz_tun: refused to change device tx_queue_len
[ 1159.505974] syz_tun: refused to change device tx_queue_len
03:58:51 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

03:58:51 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:58:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:58:51 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1160.562291] syz_tun: refused to change device tx_queue_len
[ 1160.566889] loop6: detected capacity change from 0 to 40
[ 1160.578083] FAT-fs (loop6): invalid media value (0x00)
[ 1160.579077] FAT-fs (loop6): Can't find a valid FAT filesystem
03:59:09 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

03:59:09 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:09 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1177.970253] loop2: detected capacity change from 0 to 40
[ 1177.981256] loop6: detected capacity change from 0 to 40
[ 1177.985395] FAT-fs (loop6): invalid media value (0x00)
[ 1177.985790] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1177.990132] syz_tun: refused to change device tx_queue_len
[ 1178.016852] FAT-fs (loop2): bogus number of reserved sectors
[ 1178.017798] FAT-fs (loop2): Can't find a valid FAT filesystem
03:59:09 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:09 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

03:59:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1178.042970] loop7: detected capacity change from 0 to 40
[ 1178.052401] syz_tun: refused to change device tx_queue_len
[ 1178.120458] syz_tun: refused to change device tx_queue_len
03:59:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1178.292229] loop7: detected capacity change from 0 to 40
03:59:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:09 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1178.848623] loop7: detected capacity change from 0 to 40
03:59:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:09 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

03:59:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:10 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1179.043256] loop2: detected capacity change from 0 to 40
[ 1179.047093] loop6: detected capacity change from 0 to 40
03:59:10 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1179.066631] FAT-fs (loop6): bogus number of FAT sectors
[ 1179.067168] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1179.068218] FAT-fs (loop2): bogus number of reserved sectors
[ 1179.069015] FAT-fs (loop2): Can't find a valid FAT filesystem
03:59:10 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

[ 1179.172024] syz_tun: refused to change device tx_queue_len
[ 1179.204484] syz_tun: refused to change device tx_queue_len
03:59:25 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

03:59:25 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:25 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

03:59:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:25 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:25 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1194.774092] syz_tun: refused to change device tx_queue_len
[ 1194.822063] syz_tun: refused to change device tx_queue_len
[ 1194.827554] syz_tun: refused to change device tx_queue_len
[ 1194.829732] loop7: detected capacity change from 0 to 40
[ 1194.840886] loop6: detected capacity change from 0 to 40
[ 1194.844903] loop2: detected capacity change from 0 to 40
[ 1194.852135] FAT-fs (loop6): bogus number of FAT sectors
[ 1194.852944] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1194.855806] FAT-fs (loop2): invalid media value (0x00)
[ 1194.856687] FAT-fs (loop2): Can't find a valid FAT filesystem
03:59:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:26 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

[ 1195.061436] syz_tun: refused to change device tx_queue_len
[ 1195.120007] loop7: detected capacity change from 0 to 40
03:59:26 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1195.259408] syz_tun: refused to change device tx_queue_len
[ 1208.975906] loop2: detected capacity change from 0 to 40
03:59:40 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:40 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

03:59:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:40 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:40 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

03:59:40 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1208.988695] FAT-fs (loop2): invalid media value (0x00)
[ 1208.989065] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1208.990817] loop7: detected capacity change from 0 to 40
[ 1209.006475] loop6: detected capacity change from 0 to 40
[ 1209.012283] syz_tun: refused to change device tx_queue_len
[ 1209.019074] syz_tun: refused to change device tx_queue_len
[ 1209.022798] FAT-fs (loop6): bogus number of FAT sectors
[ 1209.023228] FAT-fs (loop6): Can't find a valid FAT filesystem
03:59:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1209.211198] loop7: detected capacity change from 0 to 40
03:59:40 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:40 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1209.896324] syz_tun: refused to change device tx_queue_len
03:59:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:41 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1209.936017] syz_tun: refused to change device tx_queue_len
[ 1209.937473] loop6: detected capacity change from 0 to 40
03:59:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:41 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:41 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1210.101064] loop2: detected capacity change from 0 to 40
[ 1210.110684] FAT-fs (loop2): invalid media value (0x00)
[ 1210.111264] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1210.142170] syz_tun: refused to change device tx_queue_len
03:59:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1210.407056] loop7: detected capacity change from 0 to 40
03:59:41 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1210.846822] syz_tun: refused to change device tx_queue_len
03:59:41 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:42 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:42 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1211.016048] loop6: detected capacity change from 0 to 40
[ 1211.078935] syz_tun: refused to change device tx_queue_len
03:59:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:59:58 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:58 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:58 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

03:59:58 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
write(r5, &(0x7f0000000080)="01", 0x292e9)

03:59:58 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1227.710267] loop6: detected capacity change from 0 to 40
[ 1227.728801] loop7: detected capacity change from 0 to 40
[ 1227.736885] syz_tun: refused to change device tx_queue_len
[ 1227.741153] syz_tun: refused to change device tx_queue_len
[ 1227.763643] loop2: detected capacity change from 0 to 40
[ 1227.768767] FAT-fs (loop2): invalid media value (0x00)
[ 1227.769152] FAT-fs (loop2): Can't find a valid FAT filesystem
03:59:58 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1227.940381] syz_tun: refused to change device tx_queue_len
03:59:59 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1228.252084] syz-executor.7: attempt to access beyond end of device
[ 1228.252084] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1228.254002] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1228.256686] syz_tun: refused to change device tx_queue_len
04:00:14 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:14 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:00:14 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:14 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:14 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1243.841285] syz_tun: refused to change device tx_queue_len
[ 1243.876340] loop2: detected capacity change from 0 to 40
[ 1243.880667] loop7: detected capacity change from 0 to 40
[ 1243.884057] loop6: detected capacity change from 0 to 40
[ 1243.884784] syz_tun: refused to change device tx_queue_len
[ 1243.893639] FAT-fs (loop2): invalid media value (0x00)
[ 1243.894325] FAT-fs (loop2): Can't find a valid FAT filesystem
04:00:16 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:16 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:16 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:16 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:00:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:16 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1245.081031] loop7: detected capacity change from 0 to 40
[ 1245.085679] syz_tun: refused to change device tx_queue_len
04:00:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1245.186679] syz_tun: refused to change device tx_queue_len
[ 1245.190348] loop6: detected capacity change from 0 to 40
[ 1245.225309] loop2: detected capacity change from 0 to 40
[ 1245.241013] FAT-fs (loop2): invalid media value (0x00)
[ 1245.241803] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1245.598131] syz-executor.7: attempt to access beyond end of device
[ 1245.598131] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1245.601060] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:00:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1245.790113] loop7: detected capacity change from 0 to 40
04:00:17 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1245.963276] loop7: detected capacity change from 0 to 40
04:00:17 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:00:17 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:00:17 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:17 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:17 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:17 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1246.095187] syz_tun: refused to change device tx_queue_len
[ 1246.105332] loop7: detected capacity change from 0 to 40
[ 1246.132233] syz_tun: refused to change device tx_queue_len
[ 1246.164313] syz_tun: refused to change device tx_queue_len
04:00:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:31 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1260.202201] loop2: detected capacity change from 0 to 40
[ 1260.207840] syz_tun: refused to change device tx_queue_len
[ 1260.209493] FAT-fs (loop2): bogus number of FAT sectors
[ 1260.209988] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1260.219816] loop6: detected capacity change from 0 to 40
04:00:31 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:00:31 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:31 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

04:00:31 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1260.234993] syz_tun: refused to change device tx_queue_len
[ 1260.282205] syz_tun: refused to change device tx_queue_len
[ 1260.315580] loop7: detected capacity change from 0 to 40
04:00:46 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:00:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:46 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:00:46 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:46 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:00:46 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:46 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

[ 1275.568908] loop6: detected capacity change from 0 to 40
[ 1275.570245] syz_tun: refused to change device tx_queue_len
[ 1275.576432] syz_tun: refused to change device tx_queue_len
04:00:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1275.639829] loop2: detected capacity change from 0 to 40
[ 1275.641010] loop7: detected capacity change from 0 to 40
[ 1275.656806] FAT-fs (loop2): bogus number of FAT sectors
[ 1275.657896] FAT-fs (loop2): Can't find a valid FAT filesystem
04:00:46 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)

[ 1275.732554] syz_tun: refused to change device tx_queue_len
[ 1275.761743] loop6: detected capacity change from 0 to 40
04:00:46 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:46 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1275.855441] syz_tun: refused to change device tx_queue_len
04:00:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1275.960504] loop7: detected capacity change from 0 to 40
[ 1276.044910] loop6: detected capacity change from 0 to 40
04:00:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:00:47 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1276.207649] syz_tun: refused to change device tx_queue_len
[ 1276.299776] loop7: detected capacity change from 0 to 40
04:00:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1276.401731] loop6: detected capacity change from 0 to 40
04:00:47 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:00:47 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1276.532840] syz_tun: refused to change device tx_queue_len
[ 1276.539462] syz_tun: refused to change device tx_queue_len
[ 1293.862595] syz_tun: refused to change device tx_queue_len
04:01:04 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:04 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:04 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:01:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:04 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:04 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:04 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1293.894446] loop6: detected capacity change from 0 to 40
[ 1293.898573] loop2: detected capacity change from 0 to 40
[ 1293.912191] loop7: detected capacity change from 0 to 40
[ 1293.941209] FAT-fs (loop2): bogus number of FAT sectors
[ 1293.942054] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1293.973077] syz_tun: refused to change device tx_queue_len
[ 1293.981769] syz_tun: refused to change device tx_queue_len
04:01:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1294.074815] loop6: detected capacity change from 0 to 40
04:01:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1294.303352] loop6: detected capacity change from 0 to 40
[ 1294.308784] loop7: detected capacity change from 0 to 40
04:01:05 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1294.648881] loop7: detected capacity change from 0 to 40
04:01:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:05 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:05 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1294.831903] loop7: detected capacity change from 0 to 40
04:01:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1294.891833] syz_tun: refused to change device tx_queue_len
04:01:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1294.953242] loop2: detected capacity change from 0 to 40
[ 1294.964622] syz_tun: refused to change device tx_queue_len
[ 1294.980930] loop0: detected capacity change from 0 to 40
[ 1294.985913] FAT-fs (loop0): bogus number of FAT sectors
[ 1294.986297] FAT-fs (loop0): Can't find a valid FAT filesystem
04:01:06 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1295.085940] loop7: detected capacity change from 0 to 40
04:01:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1295.208676] syz_tun: refused to change device tx_queue_len
[ 1295.264430] loop7: detected capacity change from 0 to 40
04:01:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:22 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:22 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:01:22 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:22 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1311.205043] loop6: detected capacity change from 0 to 40
[ 1311.209299] loop7: detected capacity change from 0 to 40
[ 1311.277332] syz_tun: refused to change device tx_queue_len
[ 1311.278291] syz_tun: refused to change device tx_queue_len
[ 1311.300980] loop2: detected capacity change from 0 to 40
[ 1311.306379] loop0: detected capacity change from 0 to 40
[ 1311.307944] syz_tun: refused to change device tx_queue_len
[ 1311.409090] syz-executor.7: attempt to access beyond end of device
[ 1311.409090] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1311.410639] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:01:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1311.573155] loop7: detected capacity change from 0 to 40
[ 1311.818944] syz-executor.6: attempt to access beyond end of device
[ 1311.818944] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1311.820832] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:01:22 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1311.912936] syz-executor.7: attempt to access beyond end of device
[ 1311.912936] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1311.914283] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:01:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:23 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:23 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1312.009424] loop6: detected capacity change from 0 to 40
04:01:23 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1312.072443] syz_tun: refused to change device tx_queue_len
[ 1312.133642] syz-executor.0: attempt to access beyond end of device
[ 1312.133642] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1312.136949] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1312.158360] loop7: detected capacity change from 0 to 40
[ 1312.162873] syz_tun: refused to change device tx_queue_len
04:01:23 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:01:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1312.364453] syz_tun: refused to change device tx_queue_len
[ 1312.391248] loop2: detected capacity change from 0 to 40
[ 1312.552441] syz-executor.6: attempt to access beyond end of device
[ 1312.552441] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1312.556383] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:01:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:41 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1330.588274] loop2: detected capacity change from 0 to 40
04:01:41 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:41 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:41 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1330.615683] loop0: detected capacity change from 0 to 40
[ 1330.617458] syz_tun: refused to change device tx_queue_len
[ 1330.621197] loop6: detected capacity change from 0 to 40
[ 1330.624376] syz_tun: refused to change device tx_queue_len
[ 1330.630508] syz_tun: refused to change device tx_queue_len
[ 1330.632262] syz_tun: refused to change device tx_queue_len
[ 1330.654041] loop7: detected capacity change from 0 to 40
[ 1331.082348] syz-executor.7: attempt to access beyond end of device
[ 1331.082348] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1331.083465] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1331.090703] syz-executor.0: attempt to access beyond end of device
[ 1331.090703] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1331.091833] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1331.407537] syz-executor.6: attempt to access beyond end of device
[ 1331.407537] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1331.408592] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:01:56 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:56 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:56 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:56 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:56 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1345.960176] syz_tun: refused to change device tx_queue_len
[ 1345.964162] syz_tun: refused to change device tx_queue_len
[ 1345.980626] loop2: detected capacity change from 0 to 40
[ 1345.981905] loop7: detected capacity change from 0 to 40
[ 1345.983139] loop6: detected capacity change from 0 to 40
[ 1345.985780] syz_tun: refused to change device tx_queue_len
[ 1346.018379] syz_tun: refused to change device tx_queue_len
04:01:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1346.304375] loop6: detected capacity change from 0 to 40
04:01:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1346.643444] loop6: detected capacity change from 0 to 40
04:01:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:57 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:58 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:58 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1346.955023] syz_tun: refused to change device tx_queue_len
04:01:58 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:58 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:01:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1347.026321] syz_tun: refused to change device tx_queue_len
04:01:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1347.070476] syz_tun: refused to change device tx_queue_len
[ 1347.089434] syz_tun: refused to change device tx_queue_len
[ 1347.093212] loop2: detected capacity change from 0 to 40
[ 1347.118155] loop6: detected capacity change from 0 to 40
04:01:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1347.371036] loop6: detected capacity change from 0 to 40
04:01:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1347.508040] loop6: detected capacity change from 0 to 40
04:01:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1347.623993] loop6: detected capacity change from 0 to 40
04:01:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:01:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1347.917597] loop6: detected capacity change from 0 to 40
[ 1347.991198] loop7: detected capacity change from 0 to 40
[ 1348.172731] syz-executor.7: attempt to access beyond end of device
[ 1348.172731] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1348.176259] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:12 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:02:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:12 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:12 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:12 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:12 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:02:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1360.986972] loop7: detected capacity change from 0 to 40
[ 1360.989795] syz_tun: refused to change device tx_queue_len
[ 1360.991111] syz_tun: refused to change device tx_queue_len
[ 1360.999470] loop2: detected capacity change from 0 to 40
[ 1361.017266] loop6: detected capacity change from 0 to 40
[ 1361.024122] syz_tun: refused to change device tx_queue_len
[ 1361.033059] syz_tun: refused to change device tx_queue_len
[ 1361.171717] syz-executor.7: attempt to access beyond end of device
[ 1361.171717] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1361.172927] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1361.312728] loop7: detected capacity change from 0 to 40
[ 1361.358983] loop2: detected capacity change from 0 to 40
[ 1361.440497] loop6: detected capacity change from 0 to 40
04:02:12 executing program 4:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:02:12 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1361.581415] syz_tun: refused to change device tx_queue_len
04:02:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1361.590030] syz_tun: refused to change device tx_queue_len
[ 1361.606359] syz-executor.7: attempt to access beyond end of device
[ 1361.606359] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1361.607909] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1361.724497] loop2: detected capacity change from 0 to 40
[ 1361.767685] loop7: detected capacity change from 0 to 40
[ 1361.789374] loop6: detected capacity change from 0 to 40
[ 1361.977680] syz-executor.7: attempt to access beyond end of device
[ 1361.977680] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1361.978778] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:27 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:02:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:27 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:27 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:02:27 executing program 4:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:02:27 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1376.570534] loop7: detected capacity change from 0 to 40
[ 1376.573694] syz_tun: refused to change device tx_queue_len
[ 1376.602272] loop2: detected capacity change from 0 to 40
[ 1376.699446] loop6: detected capacity change from 0 to 40
[ 1376.715168] syz_tun: refused to change device tx_queue_len
[ 1376.716838] syz_tun: refused to change device tx_queue_len
04:02:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1376.797033] syz-executor.7: attempt to access beyond end of device
[ 1376.797033] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1376.798133] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1376.918000] loop2: detected capacity change from 0 to 40
[ 1376.986740] loop7: detected capacity change from 0 to 40
04:02:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1377.170674] syz-executor.6: attempt to access beyond end of device
[ 1377.170674] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1377.171804] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1377.331072] loop2: detected capacity change from 0 to 40
[ 1377.391178] syz-executor.7: attempt to access beyond end of device
[ 1377.391178] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1377.393118] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:41 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1390.454232] syz_tun: refused to change device tx_queue_len
04:02:41 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:02:41 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:02:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:41 executing program 4:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:02:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:41 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1390.492122] loop7: detected capacity change from 0 to 40
[ 1390.508988] loop2: detected capacity change from 0 to 40
[ 1390.511656] syz_tun: refused to change device tx_queue_len
[ 1390.518009] syz_tun: refused to change device tx_queue_len
[ 1390.544785] loop6: detected capacity change from 0 to 40
[ 1390.624064] syz-executor.7: attempt to access beyond end of device
[ 1390.624064] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1390.626036] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1390.858893] loop7: detected capacity change from 0 to 40
[ 1390.895251] syz-executor.7: attempt to access beyond end of device
[ 1390.895251] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1390.896104] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:42 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:42 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:42 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1391.021258] syz_tun: refused to change device tx_queue_len
[ 1391.066681] loop7: detected capacity change from 0 to 40
[ 1391.069421] syz_tun: refused to change device tx_queue_len
[ 1391.110821] syz-executor.7: attempt to access beyond end of device
[ 1391.110821] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1391.111700] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:02:42 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:42 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1391.265078] loop7: detected capacity change from 0 to 40
[ 1391.281713] syz-executor.6: attempt to access beyond end of device
[ 1391.281713] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1391.282753] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1391.306263] syz_tun: refused to change device tx_queue_len
04:02:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1391.470143] syz-executor.7: attempt to access beyond end of device
[ 1391.470143] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1391.471369] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1391.546453] loop6: detected capacity change from 0 to 40
[ 1391.653173] loop2: detected capacity change from 0 to 40
[ 1391.658430] FAT-fs (loop2): Unrecognized mount option "./file0" or missing value
04:02:42 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:42 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1391.784204] syz_tun: refused to change device tx_queue_len
04:02:42 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1391.851712] loop2: detected capacity change from 0 to 40
[ 1391.890821] perf: interrupt took too long (2507 > 2500), lowering kernel.perf_event_max_sample_rate to 79000
[ 1391.905400] syz-executor.6: attempt to access beyond end of device
[ 1391.905400] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1391.906749] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1391.925739] perf: interrupt took too long (3143 > 3133), lowering kernel.perf_event_max_sample_rate to 63000
04:02:43 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1391.965333] perf: interrupt took too long (3935 > 3928), lowering kernel.perf_event_max_sample_rate to 50000
[ 1392.025767] perf: interrupt took too long (4933 > 4918), lowering kernel.perf_event_max_sample_rate to 40000
04:02:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1392.078996] syz_tun: refused to change device tx_queue_len
[ 1392.129245] loop6: detected capacity change from 0 to 40
[ 1392.156354] perf: interrupt took too long (6176 > 6166), lowering kernel.perf_event_max_sample_rate to 32000
[ 1392.190926] syz-executor.2: attempt to access beyond end of device
[ 1392.190926] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1392.192063] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1392.275884] syz-executor.6: attempt to access beyond end of device
[ 1392.275884] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1392.277371] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:02:57 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:57 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:02:57 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:02:57 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:02:57 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1405.992690] syz_tun: refused to change device tx_queue_len
[ 1406.010255] syz_tun: refused to change device tx_queue_len
[ 1406.012349] loop6: detected capacity change from 0 to 40
[ 1406.028945] syz_tun: refused to change device tx_queue_len
[ 1406.044422] loop2: detected capacity change from 0 to 40
[ 1406.076922] loop7: detected capacity change from 0 to 40
[ 1406.085776] syz_tun: refused to change device tx_queue_len
[ 1406.118066] syz-executor.6: attempt to access beyond end of device
[ 1406.118066] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1406.119384] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1406.213916] syz-executor.2: attempt to access beyond end of device
[ 1406.213916] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1406.215410] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1406.256324] syz-executor.7: attempt to access beyond end of device
[ 1406.256324] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1406.257354] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:03:11 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:03:11 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:11 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:03:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:11 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:11 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1420.639266] syz_tun: refused to change device tx_queue_len
[ 1420.641106] loop6: detected capacity change from 0 to 40
[ 1420.642978] syz_tun: refused to change device tx_queue_len
[ 1420.655189] syz_tun: refused to change device tx_queue_len
[ 1420.656186] loop7: detected capacity change from 0 to 40
[ 1420.679950] loop2: detected capacity change from 0 to 40
04:03:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1420.718724] syz-executor.7: attempt to access beyond end of device
[ 1420.718724] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1420.719667] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:03:11 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1420.795226] syz-executor.6: attempt to access beyond end of device
[ 1420.795226] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1420.796324] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:03:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:11 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:11 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1420.908400] loop7: detected capacity change from 0 to 40
[ 1420.918555] syz_tun: refused to change device tx_queue_len
[ 1420.928451] syz-executor.2: attempt to access beyond end of device
[ 1420.928451] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1420.930919] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1420.968877] syz-executor.7: attempt to access beyond end of device
[ 1420.968877] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1420.969862] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1420.980393] syz_tun: refused to change device tx_queue_len
04:03:12 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1420.996613] loop6: detected capacity change from 0 to 40
04:03:12 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:12 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1421.141756] syz_tun: refused to change device tx_queue_len
[ 1421.150466] syz-executor.6: attempt to access beyond end of device
[ 1421.150466] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1421.151894] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1421.164974] syz_tun: refused to change device tx_queue_len
04:03:12 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1421.207209] loop2: detected capacity change from 0 to 40
04:03:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1421.318664] syz_tun: refused to change device tx_queue_len
04:03:12 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1421.420915] syz_tun: refused to change device tx_queue_len
[ 1421.445422] loop6: detected capacity change from 0 to 40
[ 1421.464110] syz-executor.2: attempt to access beyond end of device
[ 1421.464110] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1421.465406] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1421.778340] syz-executor.6: attempt to access beyond end of device
[ 1421.778340] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1421.782340] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:03:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:26 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:26 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:26 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40ee"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:26 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1435.315130] loop2: detected capacity change from 0 to 40
[ 1435.318899] loop0: detected capacity change from 0 to 40
[ 1435.320824] loop7: detected capacity change from 0 to 40
[ 1435.327393] loop6: detected capacity change from 0 to 40
[ 1435.329307] syz_tun: refused to change device tx_queue_len
[ 1435.341403] syz_tun: refused to change device tx_queue_len
[ 1435.344745] syz_tun: refused to change device tx_queue_len
04:03:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1435.458528] syz-executor.0: attempt to access beyond end of device
[ 1435.458528] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1435.459776] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1435.488053] syz-executor.7: attempt to access beyond end of device
[ 1435.488053] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1435.489440] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1435.494583] loop2: detected capacity change from 0 to 40
04:03:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1435.594155] syz-executor.6: attempt to access beyond end of device
[ 1435.594155] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1435.596213] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:03:26 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1435.737170] loop0: detected capacity change from 0 to 40
[ 1435.754854] loop7: detected capacity change from 0 to 40
[ 1435.858348] syz-executor.0: attempt to access beyond end of device
[ 1435.858348] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1435.860478] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1435.918172] syz-executor.7: attempt to access beyond end of device
[ 1435.918172] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1435.919875] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:03:40 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:40 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:03:40 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1449.409898] loop7: detected capacity change from 0 to 40
[ 1449.412816] loop6: detected capacity change from 0 to 40
[ 1449.416686] syz_tun: refused to change device tx_queue_len
[ 1449.421473] loop0: detected capacity change from 0 to 40
[ 1449.442750] syz_tun: refused to change device tx_queue_len
04:03:40 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40ee"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1449.471275] loop2: detected capacity change from 0 to 40
[ 1449.511122] syz_tun: refused to change device tx_queue_len
[ 1449.518988] syz-executor.6: attempt to access beyond end of device
[ 1449.518988] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1449.520330] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:03:40 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1449.603884] syz-executor.0: attempt to access beyond end of device
[ 1449.603884] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1449.605305] Buffer I/O error on dev loop0, logical block 10, lost async page write
04:03:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1449.670271] syz_tun: refused to change device tx_queue_len
[ 1449.671485] loop6: detected capacity change from 0 to 40
04:03:40 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:03:40 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1449.767088] syz-executor.7: attempt to access beyond end of device
[ 1449.767088] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1449.769112] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:03:40 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1449.794170] loop2: detected capacity change from 0 to 40
[ 1449.803599] syz_tun: refused to change device tx_queue_len
[ 1449.847328] syz-executor.6: attempt to access beyond end of device
[ 1449.847328] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1449.848392] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:03:40 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1449.928210] syz_tun: refused to change device tx_queue_len
04:03:41 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40ee"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1449.956738] syz_tun: refused to change device tx_queue_len
[ 1450.003590] syz_tun: refused to change device tx_queue_len
[ 1450.004819] loop7: detected capacity change from 0 to 40
[ 1450.048939] loop2: detected capacity change from 0 to 40
[ 1450.109883] syz-executor.7: attempt to access beyond end of device
[ 1450.109883] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1450.110991] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1450.114954] loop6: detected capacity change from 0 to 40
[ 1450.268404] syz-executor.6: attempt to access beyond end of device
[ 1450.268404] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1450.269532] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:03:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:54 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:54 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:54 executing program 0:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1463.766529] syz_tun: refused to change device tx_queue_len
04:03:54 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:03:54 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1463.786015] loop7: detected capacity change from 0 to 40
[ 1463.789853] syz_tun: refused to change device tx_queue_len
[ 1463.799289] loop2: detected capacity change from 0 to 40
[ 1463.804608] syz_tun: refused to change device tx_queue_len
[ 1463.808967] syz_tun: refused to change device tx_queue_len
[ 1463.832720] loop6: detected capacity change from 0 to 40
04:03:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:03:55 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:03:55 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1463.967237] syz-executor.7: attempt to access beyond end of device
[ 1463.967237] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1463.968384] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1464.021307] loop2: detected capacity change from 0 to 40
04:03:55 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1464.032762] syz_tun: refused to change device tx_queue_len
[ 1464.055135] syz_tun: refused to change device tx_queue_len
04:03:55 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:03:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1464.095054] syz-executor.6: attempt to access beyond end of device
[ 1464.095054] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1464.097098] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1464.153069] syz_tun: refused to change device tx_queue_len
04:03:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1464.170917] loop7: detected capacity change from 0 to 40
04:03:55 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1464.201009] syz_tun: refused to change device tx_queue_len
[ 1464.318476] syz-executor.7: attempt to access beyond end of device
[ 1464.318476] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1464.320272] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1478.941606] loop6: detected capacity change from 0 to 40
[ 1478.954271] syz_tun: refused to change device tx_queue_len
04:04:10 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:10 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:04:10 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:10 executing program 0:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:04:10 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:10 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1479.001993] syz-executor.6: attempt to access beyond end of device
[ 1479.001993] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1479.003252] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1479.016942] loop2: detected capacity change from 0 to 40
[ 1479.026381] syz_tun: refused to change device tx_queue_len
[ 1479.027343] syz_tun: refused to change device tx_queue_len
[ 1479.036710] loop7: detected capacity change from 0 to 40
[ 1479.051876] syz_tun: refused to change device tx_queue_len
04:04:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:10 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:10 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:04:10 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:10 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1479.212429] syz_tun: refused to change device tx_queue_len
[ 1479.226159] loop6: detected capacity change from 0 to 40
[ 1479.266474] syz_tun: refused to change device tx_queue_len
[ 1479.310375] syz_tun: refused to change device tx_queue_len
[ 1479.328177] syz-executor.7: attempt to access beyond end of device
[ 1479.328177] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1479.330152] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1479.333491] loop2: detected capacity change from 0 to 40
[ 1479.515442] syz-executor.6: attempt to access beyond end of device
[ 1479.515442] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1479.518119] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1494.468662] loop7: detected capacity change from 0 to 40
[ 1494.468926] loop2: detected capacity change from 0 to 40
04:04:25 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:25 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:25 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:25 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1494.482801] syz_tun: refused to change device tx_queue_len
[ 1494.518303] loop6: detected capacity change from 0 to 40
[ 1494.524835] loop0: detected capacity change from 0 to 40
[ 1494.568417] syz_tun: refused to change device tx_queue_len
[ 1494.570024] syz_tun: refused to change device tx_queue_len
[ 1494.572012] syz_tun: refused to change device tx_queue_len
04:04:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1494.587399] syz-executor.6: attempt to access beyond end of device
[ 1494.587399] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1494.588404] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:04:25 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1494.646409] syz-executor.7: attempt to access beyond end of device
[ 1494.646409] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1494.647836] Buffer I/O error on dev loop7, logical block 10, lost async page write
04:04:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1494.673130] loop2: detected capacity change from 0 to 40
[ 1494.710606] syz-executor.0: attempt to access beyond end of device
[ 1494.710606] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1494.712150] Buffer I/O error on dev loop0, logical block 10, lost async page write
04:04:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1494.739417] loop6: detected capacity change from 0 to 40
04:04:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1494.803877] syz-executor.6: attempt to access beyond end of device
[ 1494.803877] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1494.805035] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1494.808182] syz_tun: refused to change device tx_queue_len
[ 1494.812060] loop7: detected capacity change from 0 to 40
[ 1494.852423] loop2: detected capacity change from 0 to 40
04:04:25 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e0", 0xf)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:25 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1494.938951] syz-executor.7: attempt to access beyond end of device
[ 1494.938951] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1494.940226] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1494.942140] loop6: detected capacity change from 0 to 40
[ 1494.988291] syz-executor.6: attempt to access beyond end of device
[ 1494.988291] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1494.989475] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1494.995016] syz-executor.2: attempt to access beyond end of device
[ 1494.995016] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1494.996361] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1495.035399] syz_tun: refused to change device tx_queue_len
[ 1495.065724] syz_tun: refused to change device tx_queue_len
04:04:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

04:04:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:40 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e0", 0xf)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1509.762311] loop6: detected capacity change from 0 to 40
04:04:40 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e0", 0xf)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:40 executing program 3:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:04:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:40 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4cc"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:40 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1509.807117] loop7: detected capacity change from 0 to 40
[ 1509.860191] loop2: detected capacity change from 0 to 40
[ 1509.869969] syz_tun: refused to change device tx_queue_len
[ 1509.873026] syz-executor.6: attempt to access beyond end of device
[ 1509.873026] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1509.874591] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1509.879899] syz_tun: refused to change device tx_queue_len
[ 1509.886784] syz_tun: refused to change device tx_queue_len
[ 1509.892353] syz_tun: refused to change device tx_queue_len
[ 1509.912268] syz_tun: refused to change device tx_queue_len
04:04:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 1510.093351] loop6: detected capacity change from 0 to 40
[ 1510.218799] syz-executor.6: attempt to access beyond end of device
[ 1510.218799] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1510.220899] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1510.288086] loop7: detected capacity change from 0 to 40
[ 1510.293153] syz-executor.2: attempt to access beyond end of device
[ 1510.293153] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1510.295244] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:04:41 executing program 3:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:04:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:41 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

04:04:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:41 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4cc"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1510.517757] syz_tun: refused to change device tx_queue_len
04:04:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1510.532850] loop0: detected capacity change from 0 to 40
04:04:41 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e0", 0xf)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1510.575201] loop6: detected capacity change from 0 to 40
[ 1510.591445] syz_tun: refused to change device tx_queue_len
[ 1510.613443] syz_tun: refused to change device tx_queue_len
[ 1510.630533] perf: interrupt took too long (7802 > 7720), lowering kernel.perf_event_max_sample_rate to 25000
[ 1510.632957] loop2: detected capacity change from 0 to 40
[ 1510.636464] loop7: detected capacity change from 0 to 40
[ 1510.656122] syz_tun: refused to change device tx_queue_len
[ 1510.702478] syz-executor.6: attempt to access beyond end of device
[ 1510.702478] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1510.704169] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:04:41 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 1510.907390] syz_tun: refused to change device tx_queue_len
[ 1510.943299] syz-executor.2: attempt to access beyond end of device
[ 1510.943299] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1510.945911] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1510.959048] loop6: detected capacity change from 0 to 40
[ 1510.969610] loop7: detected capacity change from 0 to 40
[ 1511.049849] syz-executor.6: attempt to access beyond end of device
[ 1511.049849] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1511.051751] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1527.166677] loop2: detected capacity change from 0 to 40
[ 1527.167902] syz_tun: refused to change device tx_queue_len
[ 1527.169144] syz_tun: refused to change device tx_queue_len
04:04:58 executing program 3:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:04:58 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:58 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:04:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:04:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

04:04:58 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9", 0x16)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:04:58 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4cc"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1527.199349] syz_tun: refused to change device tx_queue_len
[ 1527.230827] loop7: detected capacity change from 0 to 40
[ 1527.234288] syz_tun: refused to change device tx_queue_len
[ 1527.238274] loop6: detected capacity change from 0 to 40
[ 1527.246198] syz_tun: refused to change device tx_queue_len
[ 1527.294423] syz-executor.2: attempt to access beyond end of device
[ 1527.294423] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1527.295773] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:04:58 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9", 0x16)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1527.344773] syz-executor.6: attempt to access beyond end of device
[ 1527.344773] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1527.346434] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:04:58 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1527.424617] syz_tun: refused to change device tx_queue_len
[ 1527.429763] syz_tun: refused to change device tx_queue_len
04:05:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

04:05:13 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9", 0x16)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1542.914335] loop6: detected capacity change from 0 to 40
[ 1542.914437] loop0: detected capacity change from 0 to 40
[ 1542.919988] syz_tun: refused to change device tx_queue_len
04:05:13 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:05:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:13 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:13 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1542.931722] loop7: detected capacity change from 0 to 40
[ 1542.944474] syz_tun: refused to change device tx_queue_len
[ 1542.961148] syz-executor.6: attempt to access beyond end of device
[ 1542.961148] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1542.962049] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1542.992878] loop2: detected capacity change from 0 to 40
[ 1542.996393] syz_tun: refused to change device tx_queue_len
[ 1542.997670] syz_tun: refused to change device tx_queue_len
04:05:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

04:05:14 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1543.123262] loop6: detected capacity change from 0 to 40
[ 1543.131316] loop7: detected capacity change from 0 to 40
[ 1543.132139] syz_tun: refused to change device tx_queue_len
04:05:14 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1543.151179] syz-executor.2: attempt to access beyond end of device
[ 1543.151179] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1543.152279] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1543.216974] syz-executor.0: attempt to access beyond end of device
[ 1543.216974] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1543.218999] Buffer I/O error on dev loop0, logical block 10, lost async page write
04:05:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1543.252015] syz-executor.6: attempt to access beyond end of device
[ 1543.252015] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1543.253192] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:05:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 1543.295981] syz_tun: refused to change device tx_queue_len
04:05:14 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1543.298830] loop7: detected capacity change from 0 to 40
04:05:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1543.356830] syz_tun: refused to change device tx_queue_len
[ 1543.366105] loop2: detected capacity change from 0 to 40
04:05:14 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9", 0x16)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:14 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c", 0x1a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:14 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:05:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 1543.430370] loop6: detected capacity change from 0 to 40
[ 1543.467321] loop7: detected capacity change from 0 to 40
[ 1543.479687] syz_tun: refused to change device tx_queue_len
04:05:14 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:14 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1543.548433] syz_tun: refused to change device tx_queue_len
[ 1543.551968] syz-executor.6: attempt to access beyond end of device
[ 1543.551968] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1543.553122] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1543.584658] syz_tun: refused to change device tx_queue_len
[ 1543.605864] syz_tun: refused to change device tx_queue_len
[ 1543.615062] syz-executor.2: attempt to access beyond end of device
[ 1543.615062] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1543.616992] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:05:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:14 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1543.664622] syz_tun: refused to change device tx_queue_len
[ 1543.700891] loop6: detected capacity change from 0 to 40
[ 1543.739956] syz_tun: refused to change device tx_queue_len
04:05:14 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1543.802279] syz-executor.6: attempt to access beyond end of device
[ 1543.802279] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1543.803830] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1543.841256] syz_tun: refused to change device tx_queue_len
04:05:28 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:28 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:05:28 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:28 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c", 0x1a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:28 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:28 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1557.920399] loop6: detected capacity change from 0 to 40
[ 1557.948014] syz_tun: refused to change device tx_queue_len
[ 1557.952688] syz_tun: refused to change device tx_queue_len
[ 1557.967396] syz_tun: refused to change device tx_queue_len
[ 1557.971252] syz_tun: refused to change device tx_queue_len
[ 1558.016984] loop2: detected capacity change from 0 to 40
[ 1558.023414] syz_tun: refused to change device tx_queue_len
04:05:29 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:29 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1558.147762] loop7: detected capacity change from 0 to 40
[ 1558.185421] syz_tun: refused to change device tx_queue_len
[ 1558.202457] syz-executor.2: attempt to access beyond end of device
[ 1558.202457] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1558.203807] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1558.230307] syz-executor.7: attempt to access beyond end of device
[ 1558.230307] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1558.231365] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1558.286889] syz-executor.6: attempt to access beyond end of device
[ 1558.286889] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1558.288875] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:05:47 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c", 0x1a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:47 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:47 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:47 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:47 executing program 0:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:47 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1576.595851] syz_tun: refused to change device tx_queue_len
[ 1576.606415] loop6: detected capacity change from 0 to 40
[ 1576.658624] syz_tun: refused to change device tx_queue_len
[ 1576.660692] syz_tun: refused to change device tx_queue_len
[ 1576.663308] loop2: detected capacity change from 0 to 40
[ 1576.673425] syz_tun: refused to change device tx_queue_len
[ 1576.686110] syz_tun: refused to change device tx_queue_len
[ 1576.693569] syz_tun: refused to change device tx_queue_len
[ 1576.860317] syz-executor.6: attempt to access beyond end of device
[ 1576.860317] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1576.862682] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:05:47 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c9413", 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1576.949138] syz-executor.2: attempt to access beyond end of device
[ 1576.949138] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1576.951085] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:05:48 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1577.058939] syz_tun: refused to change device tx_queue_len
04:05:48 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:48 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:05:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:05:48 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1577.219364] syz_tun: refused to change device tx_queue_len
04:05:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1577.297383] loop2: detected capacity change from 0 to 40
[ 1577.304272] syz_tun: refused to change device tx_queue_len
[ 1577.314856] syz_tun: refused to change device tx_queue_len
04:05:48 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c9413", 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1577.460921] syz_tun: refused to change device tx_queue_len
[ 1577.479356] loop0: detected capacity change from 0 to 40
04:05:48 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1577.648168] syz_tun: refused to change device tx_queue_len
[ 1577.664162] syz-executor.2: attempt to access beyond end of device
[ 1577.664162] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1577.666379] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:05:48 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, 0x0, 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1577.849404] syz_tun: refused to change device tx_queue_len
[ 1577.876479] syz-executor.0: attempt to access beyond end of device
[ 1577.876479] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1577.878983] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1578.032493] syz_tun: refused to change device tx_queue_len
[ 1593.512642] loop6: detected capacity change from 0 to 40
[ 1593.514127] syz_tun: refused to change device tx_queue_len
[ 1593.527880] loop0: detected capacity change from 0 to 40
[ 1593.529952] loop2: detected capacity change from 0 to 40
[ 1593.541044] syz_tun: refused to change device tx_queue_len
[ 1593.554364] syz-executor.6: attempt to access beyond end of device
[ 1593.554364] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1593.555274] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1593.586972] syz_tun: refused to change device tx_queue_len
[ 1593.588390] syz_tun: refused to change device tx_queue_len
04:06:04 executing program 5:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:06:04 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:04 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c9413", 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:04 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:04 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, 0x0, 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:04 executing program 5:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1593.671073] syz-executor.2: attempt to access beyond end of device
[ 1593.671073] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1593.672276] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1593.698947] loop6: detected capacity change from 0 to 40
04:06:04 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1593.735282] syz_tun: refused to change device tx_queue_len
[ 1593.740133] syz-executor.6: attempt to access beyond end of device
[ 1593.740133] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1593.741046] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:06:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1593.804939] syz-executor.0: attempt to access beyond end of device
[ 1593.804939] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1593.806218] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1593.861628] loop6: detected capacity change from 0 to 40
04:06:04 executing program 5:
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1593.898737] loop2: detected capacity change from 0 to 40
[ 1593.902079] syz-executor.6: attempt to access beyond end of device
[ 1593.902079] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1593.903100] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1593.929459] syz_tun: refused to change device tx_queue_len
[ 1594.046239] syz-executor.2: attempt to access beyond end of device
[ 1594.046239] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1594.047421] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:06:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:20 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

04:06:20 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:20 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, 0x0, 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:20 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:20 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1609.421327] loop0: detected capacity change from 0 to 40
[ 1609.489152] loop2: detected capacity change from 0 to 40
[ 1609.494306] loop6: detected capacity change from 0 to 40
[ 1609.496356] syz_tun: refused to change device tx_queue_len
[ 1609.502126] syz_tun: refused to change device tx_queue_len
[ 1609.509122] syz_tun: refused to change device tx_queue_len
04:06:20 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1609.614449] syz-executor.0: attempt to access beyond end of device
[ 1609.614449] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1609.615978] Buffer I/O error on dev loop0, logical block 10, lost async page write
04:06:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 1609.694272] syz-executor.2: attempt to access beyond end of device
[ 1609.694272] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1609.695917] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:06:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:20 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1609.797883] loop6: detected capacity change from 0 to 40
04:06:20 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:20 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1609.840014] syz_tun: refused to change device tx_queue_len
[ 1609.884021] syz_tun: refused to change device tx_queue_len
[ 1609.912718] loop2: detected capacity change from 0 to 40
[ 1609.921046] syz_tun: refused to change device tx_queue_len
[ 1610.089341] syz-executor.2: attempt to access beyond end of device
[ 1610.089341] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1610.090852] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:06:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:36 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 1625.028535] loop2: detected capacity change from 0 to 40
04:06:36 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

04:06:36 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1625.039848] syz_tun: refused to change device tx_queue_len
04:06:36 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1625.061388] loop0: detected capacity change from 0 to 40
[ 1625.084262] syz_tun: refused to change device tx_queue_len
[ 1625.093357] syz_tun: refused to change device tx_queue_len
[ 1625.096642] loop6: detected capacity change from 0 to 40
[ 1625.149565] syz-executor.0: attempt to access beyond end of device
[ 1625.149565] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1625.151172] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1625.213860] syz-executor.2: attempt to access beyond end of device
[ 1625.213860] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1625.215070] Buffer I/O error on dev loop2, logical block 10, lost async page write
04:06:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

04:06:36 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140), 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:36 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:06:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1625.363975] loop6: detected capacity change from 0 to 40
[ 1625.370733] syz_tun: refused to change device tx_queue_len
[ 1625.389608] loop0: detected capacity change from 0 to 40
[ 1625.411732] syz_tun: refused to change device tx_queue_len
[ 1625.413615] loop2: detected capacity change from 0 to 40
[ 1625.443180] syz_tun: refused to change device tx_queue_len
04:06:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 1625.459912] syz-executor.2: attempt to access beyond end of device
[ 1625.459912] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1625.460897] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1625.495090] syz-executor.0: attempt to access beyond end of device
[ 1625.495090] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1625.496764] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1625.554758] loop6: detected capacity change from 0 to 40
04:06:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:52 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x0)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:52 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

04:06:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:52 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

04:06:52 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:06:52 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e0", 0xf)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1641.238607] loop2: detected capacity change from 0 to 40
[ 1641.265430] syz-executor.2: attempt to access beyond end of device
[ 1641.265430] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1641.267206] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1641.305459] syz_tun: refused to change device tx_queue_len
[ 1641.328686] loop0: detected capacity change from 0 to 40
[ 1641.333995] loop6: detected capacity change from 0 to 40
[ 1641.341666] syz_tun: refused to change device tx_queue_len
[ 1641.343318] syz_tun: refused to change device tx_queue_len
04:06:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:52 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)

04:06:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 1641.527929] syz-executor.0: attempt to access beyond end of device
[ 1641.527929] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1641.530046] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1641.562628] loop2: detected capacity change from 0 to 40
[ 1641.646907] syz-executor.2: attempt to access beyond end of device
[ 1641.646907] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1641.648567] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1641.650219] loop6: detected capacity change from 0 to 40
04:06:52 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:06:52 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x0)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:06:52 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1641.779978] loop0: detected capacity change from 0 to 40
[ 1641.807203] syz_tun: refused to change device tx_queue_len
[ 1641.879807] syz_tun: refused to change device tx_queue_len
[ 1641.972019] syz-executor.0: attempt to access beyond end of device
[ 1641.972019] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1641.974016] Buffer I/O error on dev loop0, logical block 10, lost async page write
04:07:08 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:07:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:07:08 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1657.831793] loop6: detected capacity change from 0 to 40
04:07:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

04:07:08 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x0)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:07:08 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e0", 0xf)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:08 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 1657.856769] loop2: detected capacity change from 0 to 40
[ 1657.863061] syz_tun: refused to change device tx_queue_len
[ 1657.868923] loop0: detected capacity change from 0 to 40
[ 1657.876049] syz_tun: refused to change device tx_queue_len
[ 1657.892405] syz_tun: refused to change device tx_queue_len
04:07:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

04:07:09 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)

[ 1657.967538] loop6: detected capacity change from 0 to 40
04:07:09 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e0", 0xf)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:09 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1658.089299] syz-executor.0: attempt to access beyond end of device
[ 1658.089299] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1658.091362] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1658.105262] syz_tun: refused to change device tx_queue_len
[ 1658.122262] syz-executor.2: attempt to access beyond end of device
[ 1658.122262] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1658.123901] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1658.208668] syz_tun: refused to change device tx_queue_len
04:07:24 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)

04:07:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:07:24 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r4, &(0x7f0000000080)="01", 0x292e9)

04:07:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:07:24 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:24 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9", 0x16)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:07:24 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1673.454871] loop2: detected capacity change from 0 to 40
[ 1673.457226] loop6: detected capacity change from 0 to 40
[ 1673.459175] syz_tun: refused to change device tx_queue_len
[ 1673.467100] syz_tun: refused to change device tx_queue_len
[ 1673.483776] loop0: detected capacity change from 0 to 40
[ 1673.493394] syz_tun: refused to change device tx_queue_len
04:07:24 executing program 7:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})

04:07:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1673.675906] syz-executor.2: attempt to access beyond end of device
[ 1673.675906] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1673.677669] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1673.701130] syz-executor.6: attempt to access beyond end of device
[ 1673.701130] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1673.702753] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:07:24 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(0xffffffffffffffff, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1673.789076] loop0: detected capacity change from 0 to 40
04:07:24 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9", 0x16)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/119)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:07:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

04:07:24 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:24 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:24 executing program 7:
syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r1, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80000001)

[ 1673.953099] syz_tun: refused to change device tx_queue_len
[ 1673.958465] syz_tun: refused to change device tx_queue_len
[ 1673.993919] syz_tun: refused to change device tx_queue_len
04:07:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1674.031260] loop6: detected capacity change from 0 to 40
[ 1674.081100] loop0: detected capacity change from 0 to 40
04:07:25 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1674.282857] syz-executor.6: attempt to access beyond end of device
[ 1674.282857] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1674.284711] Buffer I/O error on dev loop6, logical block 10, lost async page write
04:07:25 executing program 7:
syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000000080)={'syz_tun\x00', 0x0})
openat(r2, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r0, &(0x7f0000000180)="0142cab543f87e", 0x7)

[ 1674.295686] perf: interrupt took too long (9772 > 9752), lowering kernel.perf_event_max_sample_rate to 20000
04:07:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000040)='./file1\x00', 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

04:07:25 executing program 4:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:25 executing program 3:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
write(r0, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9", 0x16)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, &(0x7f0000000180)="0142cab543f87e", 0x7)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:07:25 executing program 1:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x4080, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="975c1aa5231d43610bbb566bbc67e05e76838d8d64d9d5ea935c941378", 0x1d)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="4d0000ff047f060904000200007c000000060000000000c0ff0800000006000000f6000000008000007f00002090b824bce8c3fbaa8404ab23815aaeb653650c702cc4bf96eb7422642d093749968bf97ff2ac1eb247a6ee407de447b47065ec8da1d1c25da0050dda6897b4c74dff40c639ed16f432a24148d628d9c0d5d26f5be17a802e173b1a354ebf9c3b54318e344d93efd8830f24c13f104ed9d1ad193359e3d9c01a3d90b8df6337d0ba65651c6f34730afdd335cc71eafc6f883c806c0290bb1c7bfea732d0edaf3c40eecdb7d6a2ca382e9d20c3caad380be0c8b1b308d6525c4b4cb4ccbef9ad"]})
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x20)
write(r2, 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x80000001)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000380)={r0, 0x8, 0x1, 0x400})
setresuid(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x15}, 0x6148, 0x0, 0x0, 0x0, 0x0, 0x97, 0x6, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000003c0)=""/174, &(0x7f0000000200)=0xae)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
write(r5, &(0x7f0000000080)="01", 0x292e9)

[ 1674.476240] syz_tun: refused to change device tx_queue_len
[ 1674.510125] syz_tun: refused to change device tx_queue_len
[ 1674.609857] syz_tun: refused to change device tx_queue_len
[ 1674.610414] loop0: detected capacity change from 0 to 40
[ 1675.556810] ==================================================================
[ 1675.557769] BUG: KASAN: use-after-free in __lock_acquire+0x42c9/0x5e70
[ 1675.558611] Read of size 8 at addr ffff888035995608 by task syz-executor/9787
[ 1675.559519] 
[ 1675.559742] CPU: 1 PID: 9787 Comm: syz-executor Not tainted 6.1.0-next-20221213 #1
[ 1675.560670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1675.561672] Call Trace:
[ 1675.562000]  <TASK>
[ 1675.562293]  dump_stack_lvl+0x8f/0xb7
[ 1675.562831]  print_report+0x175/0x478
[ 1675.563329]  ? __lock_acquire+0x42c9/0x5e70
[ 1675.563881]  kasan_report+0xc0/0x100
[ 1675.564374]  ? __lock_acquire+0x42c9/0x5e70
[ 1675.564935]  __lock_acquire+0x42c9/0x5e70
[ 1675.565472]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 1675.566070]  ? finish_task_switch.isra.0+0x22d/0x8a0
[ 1675.567084]  ? __pfx___lock_acquire+0x10/0x10
[ 1675.570780]  ? __switch_to+0x5c3/0xee0
[ 1675.571342]  ? __call_rcu_common.constprop.0+0x5a2/0x9f0
[ 1675.572109]  lock_acquire.part.0+0x11e/0x340
[ 1675.572750]  ? kmemleak_scan+0x1a0/0x1600
[ 1675.573355]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 1675.574066]  ? kmemleak_scan+0x1a0/0x1600
[ 1675.574675]  ? rcu_read_lock_sched_held+0x42/0x80
[ 1675.575376]  ? trace_lock_acquire+0x14c/0x1c0
[ 1675.576028]  ? kmemleak_scan+0x1a0/0x1600
[ 1675.576623]  ? lock_acquire+0x32/0xc0
[ 1675.577176]  ? kmemleak_scan+0x1a0/0x1600
[ 1675.577807]  _raw_spin_lock_irq+0x36/0x50
[ 1675.578429]  ? kmemleak_scan+0x1a0/0x1600
[ 1675.579066]  kmemleak_scan+0x1a0/0x1600
[ 1675.579631]  ? __pfx_kmemleak_scan+0x10/0x10
[ 1675.580209]  ? strncpy_from_user+0x107/0x500
[ 1675.580788]  kmemleak_write+0x574/0x680
[ 1675.581311]  ? __pfx_kmemleak_write+0x10/0x10
[ 1675.581909]  ? debugfs_file_get+0x1d2/0x450
[ 1675.582489]  ? __pfx_debugfs_file_get+0x10/0x10
[ 1675.583101]  ? ksys_write+0x12b/0x260
[ 1675.583607]  ? rcu_read_lock_sched_held+0x42/0x80
[ 1675.584232]  ? trace_lock_acquire+0x14c/0x1c0
[ 1675.584808]  full_proxy_write+0x121/0x190
[ 1675.585365]  vfs_write+0x358/0xe40
[ 1675.585840]  ? __pfx_full_proxy_write+0x10/0x10
[ 1675.586457]  ? __pfx_vfs_write+0x10/0x10
[ 1675.587001]  ? lock_release+0x3b6/0x750
[ 1675.587520]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 1675.588181]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1675.588874]  ? __fget_light+0x212/0x280
[ 1675.589397]  ksys_write+0x12b/0x260
[ 1675.589883]  ? __pfx_ksys_write+0x10/0x10
[ 1675.590452]  ? rcu_read_lock_sched_held+0x42/0x80
[ 1675.591079]  do_syscall_64+0x3f/0x90
[ 1675.591561]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1675.592226] RIP: 0033:0x7fbcb93105c3
[ 1675.592707] Code: 16 00 00 00 eb ae 90 b8 6e 00 00 00 eb a6 e8 44 ef 04 00 0f 1f 40 00 64 8b 04 25 18 00 00 00 85 c0 75 14 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 55 c3 0f 1f 40 00 48 83 ec 28 48 89 54 24 18
[ 1675.594941] RSP: 002b:00007ffdf748df28 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1675.595874] RAX: ffffffffffffffda RBX: 00007ffdf748e568 RCX: 00007fbcb93105c3
[ 1675.596747] RDX: 0000000000000004 RSI: 00007fbcb93c6ed9 RDI: 0000000000000003
[ 1675.597624] RBP: 0000000000000002 R08: 000000000000068a R09: 00007ffdf756f080
[ 1675.598508] R10: 00007ffdf756f090 R11: 0000000000000246 R12: 00000000fffffff6
[ 1675.599399] R13: 00007ffdf748fef1 R14: 0000000000000000 R15: 0000000000198e38
[ 1675.600299]  </TASK>
[ 1675.600611] 
[ 1675.600845] Allocated by task 101:
[ 1675.601290]  kasan_save_stack+0x22/0x50
[ 1675.601836]  kasan_set_track+0x25/0x30
[ 1675.602352]  __kasan_slab_alloc+0x5c/0x70
[ 1675.602912]  kmem_cache_alloc+0x1e1/0x410
[ 1675.603436]  __create_object+0x3d/0xc10
[ 1675.603957]  kmem_cache_alloc+0x273/0x410
[ 1675.604487]  __alloc_file+0x21/0x240
[ 1675.604964]  alloc_empty_file+0x71/0x170
[ 1675.605490]  path_openat+0xd4/0x29b0
[ 1675.605970]  do_filp_open+0x1ba/0x410
[ 1675.606489]  do_sys_openat2+0x171/0x4c0
[ 1675.607000]  __x64_sys_openat+0x143/0x200
[ 1675.607536]  do_syscall_64+0x3f/0x90
[ 1675.608002]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1675.608672] 
[ 1675.608896] Freed by task 13:
[ 1675.609295]  kasan_save_stack+0x22/0x50
[ 1675.609822]  kasan_set_track+0x25/0x30
[ 1675.610325]  kasan_save_free_info+0x2e/0x50
[ 1675.610933]  __kasan_slab_free+0x10a/0x190
[ 1675.611487]  kmem_cache_free+0xfb/0x610
[ 1675.612007]  rcu_core+0x7be/0x19c0
[ 1675.612474]  __do_softirq+0x1c7/0x8f9
[ 1675.612983] 
[ 1675.613204] Last potentially related work creation:
[ 1675.613817]  kasan_save_stack+0x22/0x50
[ 1675.614335]  __kasan_record_aux_stack+0x95/0xb0
[ 1675.614941]  __call_rcu_common.constprop.0+0x6a/0x9f0
[ 1675.615612]  kmem_cache_free+0xc1/0x610
[ 1675.616133]  rcu_core+0x7be/0x19c0
[ 1675.616605]  __do_softirq+0x1c7/0x8f9
[ 1675.617095] 
[ 1675.617318] Second to last potentially related work creation:
[ 1675.618027]  kasan_save_stack+0x22/0x50
[ 1675.618569]  __kasan_record_aux_stack+0x95/0xb0
[ 1675.619159]  __call_rcu_common.constprop.0+0x6a/0x9f0
[ 1675.619835]  __kmem_cache_free+0x95/0x410
[ 1675.620372]  ieee80211_bss_info_update+0x490/0xae0
[ 1675.620981]  ieee80211_ibss_rx_queued_mgmt+0x1892/0x2c90
[ 1675.621651]  ieee80211_iface_work+0x9cb/0xcc0
[ 1675.622231]  process_one_work+0xa0f/0x1690
[ 1675.622788]  worker_thread+0x63b/0x1260
[ 1675.623305]  kthread+0x2f1/0x3a0
[ 1675.623748]  ret_from_fork+0x2c/0x50
[ 1675.624226] 
[ 1675.624452] The buggy address belongs to the object at ffff8880359955f0
[ 1675.624452]  which belongs to the cache kmemleak_object of size 368
[ 1675.626009] The buggy address is located 24 bytes inside of
[ 1675.626009]  368-byte region [ffff8880359955f0, ffff888035995760)
[ 1675.627423] 
[ 1675.627647] The buggy address belongs to the physical page:
[ 1675.628333] page:000000007801e549 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35994
[ 1675.629482] head:000000007801e549 order:1 compound_mapcount:0 subpages_mapcount:0 compound_pincount:0
[ 1675.630607] flags: 0x100000000010200(slab|head|node=0|zone=1)
[ 1675.631343] raw: 0100000000010200 ffff88800844f780 ffffea0000377180 dead000000000002
[ 1675.632305] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[ 1675.633249] page dumped because: kasan: bad access detected
[ 1675.633937] 
[ 1675.634162] Memory state around the buggy address:
[ 1675.634778]  ffff888035995500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1675.635672]  ffff888035995580: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[ 1675.636556] >ffff888035995600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1675.637434]                       ^
[ 1675.637893]  ffff888035995680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1675.638787]  ffff888035995700: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 1675.639670] ==================================================================
[ 1675.640546] Disabling lock debugging due to kernel taint

VM DIAGNOSIS:
04:07:26  Registers:
info registers vcpu 0
RAX=0000000080000001 RBX=0000000000000001 RCX=1ffffffff0f382f8 RDX=0000000000000000
RSI=ffffffff843fe08f RDI=0000000000000001 RBP=ffff88804634f9e0 RSP=ffff88804634f8f0
R8 =ffffffff860f97da R9 =ffffffff860f97de R10=ffffed1008c69f3e R11=ffff88804634f9c8
R12=ffff88804634fa50 R13=0000000000000000 R14=ffff88804634f988 R15=ffff888008c95280
RIP=ffffffff812202be RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f925913a8c0 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe5355b2b000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe5355b29000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a9a99e3f88 CR3=00000000418d6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000696c61766e49002f XMM01=000000696e656420737365636341002f
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffffffffffff0000ffffffff0000ff00
XMM06=000000000000654c000000006801000a XMM07=00000000000000000000000000000000
XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000
XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82485e65 RDI=ffffffff87fbc5e0 RBP=ffffffff87fbc5a0 RSP=ffff888049e071e8
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001
R12=0000000000000034 R13=ffffffff87fbc5a0 R14=0000000000000010 R15=ffffffff82485e50
RIP=ffffffff82485ebd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556a6b400 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe79c11f4000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe79c11f2000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9259552ae0 CR3=0000000049820000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffff000000000000
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=000000373d524f4e494d00373d524f4a XMM05=3d5145534b534944006b7369643d4550
XMM06=3d454d414e56454400303d444955555f XMM07=59534255530037706f6f6c2f6b636f6c
XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000
XMM10=00000000200000000000000020000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000