x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)

14:51:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000001c0)=')', 0x1}])
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x294ee128)
shutdown(r2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x294ee128)
shutdown(r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r4, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r4, r4, 0x0, 0x100000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000340)=""/18, 0x12}, {&(0x7f0000000380)=""/179, 0xb3}, {&(0x7f0000000440)}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB="000000002c0000000000000000000000000000003bb6ac700342347815b50293d8586878504e5b6f1d4df01807ea834ae1e97a6632215b1772008bcc5c3195ac0b7e895f97b01f0a06ee797e3ff62b0e38ab4db9f9b9acdd7aa2579ceafdd67f4f54488d0d2dd9c30292ab26a739eb4be4d9788d0cc89106f0cb9ac6ddf67997485e8dec9aa50098c4eca21d8ee044f920d3e48b", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000065f17cbc5b53565198d29b3f97184f9194be7186826c3d0ec64717ce582ddf73cfefaa1b0ae605001eabbd2364d7777d87de5e7524d0697d91ec480efa98efbeabbf6ffad2fcd1ed5bbaef0df01ed17fee15903ff3e4b789bc"], 0x50}, 0x21)
r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x880, 0x0)
io_submit(0x0, 0x7, &(0x7f0000000840)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf1fd, r0, &(0x7f0000000000)="13d152b02cd2463bc71ddb1f2600b664b6e108b97874fe1f027dfd481971f0393573a0b1e16370", 0x27, 0x3ff}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x1ff, r2, &(0x7f0000000100)="697206dafc661cf369c6b9da7edb00233b7d302cf15375fd18cf7d903cfcd68559a41ef45610c387cd843fc0ee211ff267588cca077717d950fef5cb53d0541d95dde6e9fbf4271bac59a37d3f761ef8b7fc6c1830273f9c5925cfb9a6979e20ed8a", 0x62, 0x2, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x3, r3, &(0x7f0000000200)="ced00639e7a498e8e8dc6eb5f06d6479a0d8e8", 0x13, 0x1, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x1, r5, &(0x7f0000000280)="80e233aa87ec59bf2d", 0x9, 0x7, 0x0, 0x0, r6}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1000, r0, &(0x7f00000005c0)="2863224c9e421332f4e55c10942010de00b104885f46fa4f3b2fa3ba069d9557da9f9d681abbd2095e01165382b97947586f9c752aaffe39deb2", 0x3a, 0x40, 0x0, 0x0, r7}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0xfff, r0, &(0x7f0000000680)="4a0448faff609a5a2575a8c0e5c882a6dcd46f9eef7ab6a1ec6fac12615266bd7cbff1468a175c5e637e084a290eafbf9c4f8471a634cfb59959853ada628adc939c9268b954de0bac7d8c7d2d038d8b883c4622fae07f30d7ff2dab7deea97b47f432123001c0c0abde85c01593a7c747b94e8752fd5bd0fe84f65e2cd7b69b2109959485fed0b2f837a1de74912775da0a649994f4eaf195b509e7bfb4bdf256c3b729d8c0301567c0e768ea7ac9cba21e6ed7b993a6cec60bea75713f92ca3d6ca0f7d9e465f82a4510f23e771f0554afc536078bbda94d62", 0xda, 0x2, 0x0, 0x2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f00000007c0)="cfb6418488de84afab708cb26ead523ffd161922", 0x14, 0x10001}])
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r8, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:51:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/112, 0x70}], 0x2, &(0x7f0000001240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x20)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x8, 0xcb, 0x20, 0xff, 0x0, 0x0, 0x400, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x4, @perf_config_ext={0x0, 0x1}, 0x401, 0x5, 0x1, 0x7, 0x1ff, 0x9, 0xce1, 0x0, 0x5, 0x0, 0x3}, r2, 0x6, r3, 0x0)
finit_module(r1, &(0x7f0000001300)='\\+\'+{\x00', 0x3)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

14:51:51 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)

[ 2456.182980] loop0: detected capacity change from 0 to 40
14:51:51 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000100), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000180)={0x3ff, 0x80})
shutdown(r1, 0x0)
fcntl$setflags(r1, 0x2, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10000, 0x0)

14:51:51 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})
fcntl$notify(r1, 0x402, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000100))

14:51:51 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:51:52 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r6})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe1, 0x1f, 0x9, 0x5, 0x0, 0x3, 0x40080, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x10020, 0x0, 0x1, 0x1, 0x7, 0x4c, 0xfffe, 0x0, 0x3ff, 0x0, 0x2}, r5, 0x4, 0xffffffffffffffff, 0x3)

14:51:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r6})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe1, 0x1f, 0x9, 0x5, 0x0, 0x3, 0x40080, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x10020, 0x0, 0x1, 0x1, 0x7, 0x4c, 0xfffe, 0x0, 0x3ff, 0x0, 0x2}, r5, 0x4, 0xffffffffffffffff, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

14:51:52 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x74, 0x5f, 0xf0, 0x0, 0x5, 0x10084, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x9}, 0x4000, 0x3, 0x80, 0x0, 0x4, 0x5, 0x7, 0x0, 0xfffffff8, 0x0, 0x659}, 0x0, 0x5, r0, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:51:52 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})
fcntl$notify(r1, 0x402, 0x0)

14:51:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:51:52 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'})

[ 2456.783247] syz-executor.0: attempt to access beyond end of device
[ 2456.783247] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2456.785757] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:52:09 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4)

14:52:09 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000140))
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r1 = memfd_secret(0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:52:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r6})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe1, 0x1f, 0x9, 0x5, 0x0, 0x3, 0x40080, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x10020, 0x0, 0x1, 0x1, 0x7, 0x4c, 0xfffe, 0x0, 0x3ff, 0x0, 0x2}, r5, 0x4, 0xffffffffffffffff, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

14:52:09 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x294ee128)
shutdown(r2, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000000))

14:52:09 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)

14:52:09 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r6})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

14:52:09 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:52:09 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 2473.606079] loop0: detected capacity change from 0 to 40
14:52:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r6})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe1, 0x1f, 0x9, 0x5, 0x0, 0x3, 0x40080, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x10020, 0x0, 0x1, 0x1, 0x7, 0x4c, 0xfffe, 0x0, 0x3ff, 0x0, 0x2}, r5, 0x4, 0xffffffffffffffff, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

14:52:09 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:09 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x8, 0x7, 0xb2, 0x80, 0x0, 0x80000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x4, 0x1}, 0x4, 0x8, 0xfffff800, 0x6, 0x52, 0x0, 0x1, 0x0, 0x7, 0x0, 0x10000}, 0xffffffffffffffff, 0xb, r0, 0x0)
perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x40, 0x67, 0x4, 0x5, 0x0, 0xffffffffffffffe5, 0xbe5f161eaecce18, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x7a2, 0x101}, 0x800, 0x1, 0x1, 0x8, 0x100, 0x4e, 0x8, 0x0, 0x7, 0x0, 0x20}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x18, 0x0, 0x1, 0x0, 0x7e4, 0x8, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0xfffffffffffffffa}, 0x18800, 0x0, 0x3b, 0x9, 0x100, 0x2, 0xcddf, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x44)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x294ee128)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000002440)=0x8)
shutdown(r3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000280)={0x0, r4, 0x200000000000000, 0x101, 0x8, 0x3})
pwritev(r2, &(0x7f00000028c0)=[{&(0x7f0000000300)="68667070ab99f9fdf42039a8e21f456108a162f93c0dcf856105422486bae0c073c3cd9daa5ddca40987651509233283d799c20cdd6ef22c8a8e28e098167df3ae21521b10892e7867b8c18e12d5107414ebf1a09ba9b31fa6292e74d82403dff49c11675c610767f839a85db84f21cb540c74f341c410e7cb1ce5ff3614d3f0e7c6072deaa929b7b6f6ce680c63e519b0cf24ad5369b31aab205353f1de9f52d8e2f62f8eb7ee8ba16c8200e40ef6e4eb89d60670315d455c2d103eee3c6bf37c602b1a757c36b9c5415054a0eb268a443c502032ff87daad63e9502cba4bbb008e88b3b9c4d3024eb966675e6838780671be753a6bc47a34ab180f7cf52d1251d75794759af0d8f75c1bd6f1799d1137c78db77aba989641993e2c471a4ee801c899d7572594462355be837fd022c67faf41bd877ecd33513397361870fa24bb21154696d388097507f7a0f5555749f1a214767d88b0ab66589d6dae32cefb4fdc026242263d96f70fe8c8a9f708cb9e53c456fa06f5230e19f179e240eff25be28caf1756eb076fb9063b1e11d1770f269989fafede8bcc9095a81701cc545c703c981f2ee67533265db91e0d2a21c5e8a41e34f2dda0df2a9340ddda04b6528bd19872d0ab1119a8d0cc0cf2ad85af484977c4dd3abb0c548a835dd83b8271c9ac63d1301bde7449ab9bd9bdadf948287b2e5dc3e6f0abb142a02726559dff2c62c0fcc2efb00f61bfd5f685485eed20ea39506440fb0675550da2d002a9c8b2f28ef2df9cd7ab3436e555336b3ff750302d8d4a9042f148a7bc8da28f3c074e4157ea011d91da98f53692c8d1b19a95f563f02d6486ab0d67122da13bbfaf6112c00f7686a5cb9f007f8df494d79cb2d53e6f12ac9e9c3a336f838ab77b8f6cf06eb4d7aaffaa742ffb9c14c4c78b1def691e0982759697999f529c057f996241a912287645448e1fa87d2875e0404d11d741d34d8d9f619b35dd22ed1ebdd64f01803b5ad6d988884b90fea558c3c77e135c83b8772effa807e1e0e2944bb6763320ed94f1b2dabd96e743f1eb51957700cc854ac7fec79d9c79790f86db3f5809e54c4e875d2eb127ae1e0b4127d532d2f25a074bdd1f9fae116278c5be183b5fb5871d063c57c9f6f8c95b47e619d3258d7aba493b9584629fa0ef6bcd8004eaf1614cdefc57b00524c61b95adc6c47bc2ae7c513cf2a8712bc0db2289f22a6afde1055ce2c6e4588bcab373873d188d7aa70cc73e0acc4799dcdc969f35892d640459d0f45bbdb33fa650362bd12977ed810bfc3341aa476b973980e8a164853ca613f77d8e388ef4a9e5f622add8be32c3d4dd9de1fccddb4c23c4bd42b054fe7e6a459c872a452de5ed8b71812d4a07765e68efcb016a8c80f1013b4f769669478b2730343ac618b258f2bae53f7032ff7961824883d598b3984d5b8d2d962eb3fa7ded5c81bcaaa49ad56e805d8cfbc3ec2eb2f06f8f01b3d55dccf86ea5a39d6c21f4aeecaca0bee7280d0890ff3df0422a5ac6da26ce334bcc10927ca555a9582e92e6305e204d9a379448af61add852f88f3ff8d82c7a631ac11087c13db25f8bb2fcc79ef7741fc843732b7bce3edc0cd138d486298e747b2679cb0b6c177fb8fc74f0217b041bd4e6d0621777f4474a199b174a56cfe257856c2814790a12e59428783c103d49d316de0455b2a12dbf05e5a0653030699558356de834b9689f7c9d6189c26f24bf7692812066ab1d067fd0f7adcfe4617df761f0e121b27509dc1ec69e7e51477d1e2ab895a0ebbd22becad38d621e32f155fc8f5299a944bdefa1f000fd0e94d89b6c656e6a7c409adf88915ede97c358acbe81ddc85599c5b63a3cff8ea70c98244b0bca295b159a219cb5cd8c835332de833bb1edd1e1f405185dc169c01f9d618792482aa07057f62f83aad82fd37576ed5194adfb60af264166a7f637bb8af0f4e3791b45fe3caa52aad9007039dde17fd3e102ec4419639a2ecd4f84d55a94f99f59852660bb4d81d78fc16a70e954ebba5478c4d344a1c9a13c117164901e4ae7ebc2f55b4fd83d9aa3fdec5fd2c640480236b8fd1086e93e2c30e3a4f0d271c2e88f4180a6aa49e5fa669e05c3f500bfe624bf7b12613c8337541f1b8d4e21d9dd632cafa94b86663236b8d1301e83b0f53bb3e33bb0f759c8364815549f2ebac1156d86e29eeb6fcb4d20d2511b4bc064edd4c2dc2209cebe44cc2234dad908895327be8990b8a4c97f7fa847e79be17412b48246cf5c63cd80e5750e171df36eb06632633c88edf674010e7a2b8f1ec1fc251e5eb377eb2d4f730442f5d4794d589929129f96d0685acb9588835e9a86178767f2ea96fe4a98e79846e5717f10d144169fe03dc0fd009b51e5ed109ef403de55f3a17ee0f7dd5ba20532044c682ccabc638399a1cdb6758c26a0a50c259d22800e4c9fdb92171cb5a346f2bc174113c5cf485a6f67baa45fca6a9e7d2e000ffa7d1b9a6a61ff8173ec94571737db6c0995ad7987d9063777a1f9773553e7761244d2c3c3776f808be70e23d963966973e820515c89f99fdd6e8a0d16ef7a7e0d0280ff75313b71e049e39c6c270f0bda41ad19b79da3a6491a96caba2a3cc9309aa85756231ac7fcc772a0308160cfd74110a3e9c6ecb2d7cb0aa6708d17f42422052d89eb0408d9a9e790fe883e3cbffde745d5cac512cbb00077b142a2f25fdf4cdc955e0f6764b9d38f29c3e12c21888fa0648bceeb1a76ca21226ce2b3391bb73eff29bd1f38b26d7f59c89573354b232528b827b0d118f28498fa638c79e3a4e941980572ff7c1b831e276b9b5f2b61f679dc0250fa962219d3be03852d28697727beec8ffff4c409f7025561ca47fff32a2ccb706bc7d74fac90fbaeb0ab5f4eb6984b6ac796ebe163f84843c5ea816d67c063cf5252285725101c9479fad15e7e8c6d9d90b0df4cf6a631fb25b74c65fadbd04135d54aa38391e68b1d3c7e30500cbdbe33983b70a81d56ec727b210e898ddbebf71a4a23956c35430b87386a6b1f0e010776f9c56886fa9dd6c20d74f9d60cd759f4f5a8f4eb5d0019e107b5041996e846a58a08010569607bef98f1a515ddb7af4b54b5043b786473f0e5f26ee47043f93294be90d2d3141676a4a434732bcb9a63428c4156eeb3d2e9c20f52782c2cf2c7ec6cd1f0938d9e197974519b639afa83dbb50936afd38e4ac25f4111c49b97e008a12aa4021a240d662974285a3e75ec0562fefae0ab546cc5dfeb07886d759dcc24b7d85bb7113345001c6d0ed791683bf807001ac952128a5dff7edd19729844e46e6624e163c25441c63831cc67fa4e5c7bf6b52b794051b6c6fa5d432dca2d62da5ffdf021cbb5050a5643345f2d1071c390946830453fe586f90d67d3053d24862cd5a92c2bd995f365bfec6f91840fb4e30407a056c283a63448ec203d9161cf04f73742c6fabf53a7c0df02dd7045323ecf99fb2346ef15bfdcda7e21ec8437640b4fa68493ceb95a97470e03d9054ba7c7f7361ca32d8f387c047581f440147f92adb1b92e98d9178af7dcf33f9eae74e2f26debf60ed36002c754ce120579eb63d15c1dea26eb0ffdde1261022b0e0c573c36db4c6553324892f1e36b5e2b936e16f67891ee9812b75a866821641e1b65d49ab61d869821df0d54aceb5a1f739c79f5b308033901cfd7af95b217a272ec5109cc397c00b3c830c02b03465fd157807278347be3926bc80b0519d9f2d60dae9b801a6c9e55c10aca4b0e73690cd45952b2b2a6a6eac860b9fb5c6334a3c14ea3fe8a572160024f9c4fde7ab6e5df29beecbcbd5f77767ec16be115f2b6901574c0f74bcb1066f3783e4e1963892a41151d32d07cf1abd3f4c94582f06da817d7deeeffedc75c9fbe08c8418b45459eba44919d039b0fd6f96a29e92c717fac8fb86f33b26fffd19d67fb40a417d55ee205dd9b24b118b113a8841640f150d6c24110580b5c53f610a61f92fde2206eb2da8080d87ffde2f6336fadb5194640ffb988e466c43eaa2173d4f355b2a804ee132b6f21fcbcda913061f590cf462ac3b7134915fd9c66b7b736dcbba58c105f6ff6aea55af13e1cc58e01413f7cacec38581f826c00e066d729d1b24e8d1fe1e18036d9ac2c52720643167484d6266bdc0fb12483033af8fedfcbca58842410f83f5190532d6a49ebac59706c11586a10a383b7bcbaa348efcdbc74f0a7b1e02ac601a10f45c52088af12a9f7f25a865403b9c98a597ed932eeccaec617d442b174e264adb3cb3042187d258f4ce5f47dc738d24c8830148bccf9ee23a9c1738978c2da724f02ae0dac2e7e73b0d18229f4f25b008b97d3002dbb7b4c41f65b560fc9b3a2a362faeaab6a3ac5da578a550710b955847364eb73842c47c7f7fa2d5261fcf1bc1b9d6012826838a515f0e522ffd024c410a9a435dae1f3a0a248addeff5912dcaec8b9e345e813e1c3ecabd44ae0edede2228824ba94b05572247e27f1323ac68748883c48ec172328d6ff671958b8ba81fe5e61638911fdcbda74e048b3f45ab3d0ab15823eb6aa8ef14a753f045983ed964d320b2ac8ec84d19f8b87162285c5a961c8c092829e4331fa966456621a10112ffc191e7d50440c38faa9a391ea13793695226f7015bad3cd09954367fc501b0fbcce6304b90bd2b13a26af48ca4a9bf5a0beaf7e381e826ad444d34166c740fd270fb8a8b5c6eeb4fa71e406d4806019821e29246318d54955fd910f41626ac32b37b07f63949c1cf30bacc92b7ddd8ed49ff6acf456b0696104d1fcc2598299a0b6993d96881bcd8046b0e8d6d8b92dba76cc31ca62e35906ea5bac09ed55e74be0270981949d6d2badc9ded0e3169136d9d4dbf1552cad628eb570e5e7fb1d7b91fa941c113c016e891615934cb16053f133cf3cc183edbef546505b126b0687d128cbc709fde8f81a99f698a0b3244e744aa774d9bd2abe0ef31703eb9dd2337a0e20a27f24b1316f1183b58d165545709ef5a4bc211cea1e2da7cce31159025f7bf39425b3121e99e970d1463cc7682d3a745d241b7635f2e369eb123969b214ae572f1948486c765318078650f00fd006aa033c1af26ec3fb3d84aeb24fe531e440f9a6c9492cbaaa45da72a4824150c6fd6558126454c55734f93f08aa87c2c39f6d67e0292c3b7720fe70672ec81f2a4a0e19b10fc0dc473c7faad8e6e836c20d2725b9f322b98dfe0e03d7015286a602600ceaa47de5024d5135cf891562219bd3eb827e0e5f7f728c82480d9fe3caa0aa0cf65e003eaddb253cf0e63b34e5d372846f62ed170822fe23cb4e4c6fe40a8eb3b4d232d90887d9ba29d8dee324a0199957e41bf049b99e4c73d91b1f923148787f8bcb8a28cc05b3eb77b8cf829cc17e3102649d13885a9c8e27dc401625818670285222f36d5e67936ed293f526f82fc3a7fd4b15682f9474022945974d9a6013deacc3d96d2818b64d0a2e4e57ef1075149c1155e550fee4487254a1f9fbcc73d2df6f21a795f5816151a4558008370a4c8b030d227e9535a9693741fbbef0d2b56dff7ddde83f6e8e3d80c8df10fdceab81a4e21cbde0c35b05125b2626fd6f0ff0b4c8ce6179c7023802050996fd28ddaf2aae2ecb2fc3a3290b0e15f28355e483e05b41cc0e1ce9c439216128c6d977a5b12784b3de69ab5c0766b03655de754d48c3110f540a172f7479669e2b20e080fcb8d96aef4c5fb1b3be15f54646ba73d1612ea1996aef6b16b3ae438479ee14e29fbc18b6143f", 0x1000}, {&(0x7f0000001300)="be5d456ceff7aaed6e9ac5a316f8040bdd2f7f6e6943ec198c0d128ce2e21d3a6900b65982b6f1621854cd67a77c386539cdbe12454ebe468efa3e6dfbbea823f314112c5f33c9b822c96158e7a7ed48361faede916cc8e0f3eed2bdea8e8b19b3a424ad3f3e6e6df935b8ffe7be188e701506383e2bc017846439307d5f442acb1b2aef3c6f7ce167cb6f2fa98ce95254cdef469bc99bf9a34105fc0853", 0x9e}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="b35adc706d3ca113c870b2816993f777b8d4bed939ff300dc5fcaa38be08dc68f1ca2510a7f39bcb0e795c1f36fadcfe201e350b9031a61f87930917a8c0229240fc9f9e525a81b1bfe58737992d426513c493e32a88e0317a9a851eb5f4f47ed3abb103feb4", 0x66}, {&(0x7f0000002440)}, {&(0x7f0000002480)="b584727d3705ab2736c832c05ae3f615730d2b256e48769c9c395d80cce6dff4af09534ce705b8bd479516f2715f71641c83805c0a2328b58e66e6c2739e2ca18a965d2d3eac63b5278dd811c504e2e1cf4333f3519bea28fb9c4897d2cc525da30c65532f9553493c722dc3dc079b949d2afb5624063cba368f360ae58eca578a73823fe4600b32ab885f0935fc906bbc940b7e4e27b9921c474c862776db8642fe78ae5ea675ea36f364fc037a41ea24de0ea51ace3b7631403c6b3045a0f7f44f48d47c547cf20d0b82d84c05d249822840449e7e9d404f0ba9e58a43fca46faa643c644a4d74e20099e2", 0xec}, {&(0x7f0000002580)="e6cae2e9e573b8f7721f18e14c2c7c0453398400b312183b754a1dd56c42b175806aadd6d91686e92991137ec6a63a8b25bd43dcbbc322bb248e3a5f851e0364422b58b9af192a0dfbbbe145aae5ae0648cbdbddd1533fb2b636da38ff4ea40a6b312254f3ade10097ed7a760a1f39f38e9bdd1afa32f25d97ae634f624566ef87cfffa638c05277c0d8a88e70672fd09d3f59fad93878a2d5fb8534d7d8585ecb8cfb326aac6fcbe62faf5f55f93ca4c2e83cee6eadbe2983450612fe967d6d8d499f6cfe04ec2d3644aaf230c9148fda", 0xd1}, {&(0x7f0000002680)="a562644cc013fa0689bd52d983e5a4cd1c0cd8e28c8dd702330fc375e2817ef762ccac348187c968b4d49a7349d03a11179741bbbab1841462534f8a3a79c25aa2b9319231714f25a648d7b4c25c15ecf27d3828e268e5e9e4e69fd0ac7a46acf6f84c927a5b37330659af5133e6e0d51db762c10d7f0fec1e6aa53afe706dbdcc73ac0e38849c13c0456bccbb3cc059b07c0543b16baba339ae8691bfefa39f8bf8580837601f3bd0ee154e679cc6028943a98ffad10ce31c", 0xb9}, {&(0x7f0000002740)="9e90224c8e3d7910be56ee9b00d0d994ed21c0b504fd612e303ce147a77504f9e862e92871170f24f37307c02559db1e74051c30400998e6251f8e9ee5cbe8db1099aef39c9358356aa9716dce3865a82d05fdc6ddab9e1f824f", 0x5a}, {&(0x7f00000027c0)="1788a964f667e4b27d170a8d14ede0382f9f2e31778dfd458a853e51c8d34f902aaf20b54749e870be0c2cf2ae158017dc9439af1988687470f4a7c371aebb55ece8cea811a4ea6846f92a35eeebbd35e9b8e953d4bb8b4a75958de285041cbd495553c1de4a1c3a6804d7a40e18f288283c8c05e1595330856b1f2d5065e93f3c49be05403d736bc8b77a8dcf4117e6eb2407fc6dc67db612e182994adee5e10b793b0caa7881c6acffcd1d353091011fae6786f64ad165b84b75cba09c9981aed7215fc8fe910944af18650a74e0964c7f6f2a0bb6dcd65218a7116de912df5e4d6ab95120176233672f95", 0xec}], 0xa, 0x1000, 0x7fff)

14:52:09 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:09 executing program 2:
ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000000)={0x6, 0x2, 0x3, 0x9})
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:52:09 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
r3 = getpid()
r4 = getpid()
r5 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r5})

14:52:09 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:09 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r6})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe1, 0x1f, 0x9, 0x5, 0x0, 0x3, 0x40080, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000280), 0x4}, 0x10020, 0x0, 0x1, 0x1, 0x7, 0x4c, 0xfffe, 0x0, 0x3ff, 0x0, 0x2}, r5, 0x4, 0xffffffffffffffff, 0x3)

14:52:09 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:09 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 2474.335904] syz-executor.0: attempt to access beyond end of device
[ 2474.335904] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2474.340872] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:52:26 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsmount(r0, 0x0, 0x4)
fsmount(r0, 0x1, 0x70)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

14:52:26 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
getpid()
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))

14:52:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:26 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:52:26 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x0, 0x80000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/usb', 0x6400, 0xb)
r2 = epoll_create(0x7)
r3 = getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000000))
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r4, &(0x7f0000002700), 0x0, 0x0, 0x80000001)
sendfile(r4, r4, 0x0, 0x100000)
clone3(&(0x7f0000000440)={0x240000000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x21}, &(0x7f0000000280)=""/182, 0xb6, &(0x7f0000000340)=""/180, &(0x7f0000000400)=[r3, r3, r1, 0x0], 0x4, {r4}}, 0x58)
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r2, &(0x7f0000000000)={r6})
kcmp(r1, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7, 0xf8, 0x8, 0x2, 0x0, 0x9f, 0x40000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ffd, 0x4, @perf_config_ext={0x101, 0xfffffffeffffffff}, 0x300, 0x1, 0x4, 0x7, 0xfffffffffffff451, 0x7, 0x3, 0x0, 0x400, 0x0, 0x7d1b}, r5, 0x9, r0, 0x3)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:52:26 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r6})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)

14:52:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0xfff}}, './file0\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0xc)

[ 2491.004177] loop0: detected capacity change from 0 to 40
14:52:26 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:52:26 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x294ee128)
shutdown(r3, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/suspend_stats', 0x80000, 0x80)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r5}}, 0xff)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r3, 0x80, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x1, 0x0, 0x1002, 0x1}}, 0x0, 0x0, 0x1}, 0x7fff)
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x294ee128)
shutdown(r2, 0x0)
signalfd4(r2, &(0x7f0000000240), 0x8, 0x80800)
r7 = socket$unix(0x1, 0x2, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0)
preadv(r1, &(0x7f0000002700), 0x0, 0x0, 0x80000001)
sendfile(r1, r1, 0x0, 0x100000)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4)

14:52:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
r3 = getpid()
r4 = getpid()
r5 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r5})

[ 2491.297071] syz-executor.0: attempt to access beyond end of device
[ 2491.297071] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2491.298627] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:52:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:26 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()
epoll_create(0x4)

14:52:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:42 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, @perf_config_ext={0x10000000000, 0xfffffffffffffe00}, 0x8200, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140))
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x8, 0x8e, 0x0, 0x0, 0xffffffffffffbf4e, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xff, 0x7}, 0x11091, 0x1d, 0x81, 0x5, 0xe71b, 0xfffffffd, 0x1, 0x0, 0x400, 0x0, 0x1000}, 0x0, 0x3, r1, 0x12)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:52:42 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:52:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
getpid()
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))

14:52:42 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:42 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()

14:52:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8)

14:52:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r0, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r0, r0, 0x0, 0x100000)
r1 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x5, 0x0, 0x7c, 0xff, 0x0, 0x38000000, 0x1880, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9}, 0x0, 0x6, 0x6, 0x1, 0x3, 0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, r0, 0xe, 0xffffffffffffffff, 0x8)
write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x9a, 0x55, 0x1, 0xff, 0x101, 0x3, 0x3, 0x36a6, 0x21e, 0x40, 0x69, 0xedd, 0x1, 0x38, 0x2, 0x6, 0xc2, 0x7}, [{0x5, 0x2, 0x0, 0x0, 0x1, 0x5, 0xa5, 0x7}], "dac887894a3d7af862fb7292852a349058a54179ce8c6bfe5479e97a916e55ee807fedd102498db00300dd2ff6205377e519b850bf94e6639e501c5f3e6c3d912510", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7ba)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0x10001}}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x82}, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, 0x0, &(0x7f0000000040))
io_setup(0xffffffff, &(0x7f0000000140)=<r3=>0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
io_submit(r3, 0x2, &(0x7f0000001ac0)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000a00)="c130fc447daa89ad78cc7c", 0xb, 0x85f, 0x0, 0x0, r0}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x1a5d, r4, &(0x7f0000000a80)="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", 0x1000, 0x3, 0x0, 0x0, r0}])
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)

[ 2507.261071] loop0: detected capacity change from 0 to 40
14:52:42 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
fsopen(&(0x7f0000000100)='ext4\x00', 0x0)

14:52:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:52:43 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()
epoll_create(0x4)

14:52:43 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 2507.867739] syz-executor.0: attempt to access beyond end of device
[ 2507.867739] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2507.877731] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:52:56 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, '\x00', {0x80}, 0x4})

14:52:56 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:52:56 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x294ee128)
shutdown(r0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xfffffffffffeffff, r1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x20, 0xe, 0x4, 0x0, 0xbde, 0x23002, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7fffffff, 0x1}, 0x40010, 0x5, 0x63, 0x3, 0x7, 0x56f, 0xff92, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x5, r1, 0x8)
finit_module(r0, &(0x7f0000000000)='-@\x00', 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:52:56 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()

14:52:56 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:56 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:56 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()
epoll_create(0x4)

14:52:56 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:52:56 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()
epoll_create(0x4)

[ 2521.374882] loop0: detected capacity change from 0 to 40
14:52:56 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:52:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, <r1=>0x0})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x5, 0xc1, 0x9, 0x1, 0x0, 0x5, 0x4000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9a2, 0x7}, 0x576a3678f3b8e389, 0x7fff, 0x2, 0x3, 0x100000001, 0x1, 0x7, 0x0, 0xfff, 0x0, 0x4}, r2, 0x8, r0, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x2, 0x8, 0x81, 0x0, 0x1, 0x4, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x1d}, 0x40, 0x10001, 0x7, 0x6, 0x0, 0x3f, 0x2, 0x0, 0x9, 0x0, 0x100}, r1, 0x10, 0xffffffffffffffff, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:52:57 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:52:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100))

14:52:57 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1000, @any, 0x7, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:52:57 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = epoll_create(0x7)
r2 = getpid()
r3 = getpid()
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000000)={r4})
kcmp(r0, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r5, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x80, 0x20, 0x80, 0x9, 0x0, 0x0, 0x10, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3f, 0x2}, 0x3480, 0x2000000000, 0x40228828, 0x1, 0x0, 0x2, 0x9, 0x0, 0x5, 0x0, 0xd14}, r0, 0xa, r5, 0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r7, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1f, 0x81, 0x1, 0xfb, 0x0, 0x400, 0x30022, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0x1f, 0x7fff}, 0x10010, 0x3, 0x1, 0x9, 0x5, 0x8, 0x3, 0x0, 0xffffffff, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x4, r7, 0xb)

14:52:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = geteuid()
setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, r3, 0xee00}, 0xc)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=<r5=>0x0)
r6 = perf_event_open$cgroup(&(0x7f0000000480)={0x3, 0x80, 0xff, 0x1f, 0x59, 0x4c, 0x0, 0x8000, 0x1201a, 0xa, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x7, 0x8}, 0x144c, 0x3f, 0xdac9, 0x0, 0x1, 0xffffffff, 0xffff, 0x0, 0x1, 0x0, 0x6}, r4, 0x8, r0, 0x2)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x8, 0x5, 0x9, 0x1, 0x0, 0x8001, 0x2081, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x4}, 0x202, 0x100, 0x80000000, 0x6, 0x1, 0x4, 0xff, 0x0, 0x4b}, r5, 0x10, r6, 0x1)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000280)={0x9b, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e22, @multicast1}}}, 0x108)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000100)={0xffffffff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x108)

[ 2521.546823] syz-executor.0: attempt to access beyond end of device
[ 2521.546823] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.548763] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:52:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:12 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:12 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:12 executing program 2:
readahead(0xffffffffffffffff, 0x4, 0x9)
prctl$PR_GET_SECCOMP(0x15)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

14:53:12 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_io_uring_complete(0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x22, 0x6, 0x7f, 0x0, 0x1, 0x8c0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x73, 0x2, @perf_bp, 0x40000, 0x4f1, 0x5, 0x4, 0xff, 0x4, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xf, r1, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3f, 0x7, 0x0, 0x9, 0x0, 0x100000000, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x4, 0x4, 0xffff, 0x1, 0x10000, 0x3f, 0x6, 0x0, 0x6, 0x0, 0x6}, r2, 0x9, r1, 0x1)
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x5, 0x6, 0x38, 0x0, 0x4, 0x400, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x9, 0x9}, 0x10010, 0x1, 0xfffffffb, 0x0, 0xfff, 0x1, 0x2, 0x0, 0x0, 0x0, 0x101}, r2, 0x5, 0xffffffffffffffff, 0xa)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:53:12 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()

14:53:12 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:53:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100))

14:53:12 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x47870, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xef21, 0x4}, 0x200, 0xfffffffffffffff8, 0x9, 0x9, 0x6, 0x1, 0x382f, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x9, r1, 0x9)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 2537.366383] loop0: detected capacity change from 0 to 40
14:53:13 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:13 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:13 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
ioctl$CDROM_LOCKDOOR(r2, 0x5329, 0x0)
fcntl$getown(r1, 0x9)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x1a1002, 0x50, 0xc}, 0x18)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="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")

14:53:13 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x81, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:53:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100))

14:53:13 executing program 6:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:13 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0x100, 0x1c57, 0x4, 0x20, 0x0, 0x4, 0xa86a}, 0xc)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x2, 0x58, 0x6, 0xe1, 0x0, 0x4, 0x410, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x10001}, 0x0, 0xcfef, 0x60000, 0x4, 0x3, 0x31, 0x81, 0x0, 0x201, 0x0, 0x80000001}, 0x0, 0x7, r0, 0xa)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0)
sendfile(r2, r1, &(0x7f0000000340)=0x2, 0x6)
ioctl$sock_ifreq(r1, 0x84, &(0x7f0000000100)={'tunl0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}})
r3 = eventfd2(0x7, 0x80800)
write$binfmt_aout(r3, &(0x7f0000000180)={{0x10b, 0x8, 0xca, 0x2cc, 0x14b, 0x4, 0x37e, 0x401}, "228303374b349b41539fa91392cbb8051e0135e43b2e07e26bea437f1f88ced7a1358b8ca4159a7a45d7aec606b7cd14b6a1f48292a50c53cfcc876726188bba40464955d5a61ba12411bc12b5237146b879c91874a2352b2fa4e9f18731d8a60be62dffe339b371ca7488b6247dd3d7b1d7ded8b4920913dbca0509111f113814f87776c682f018a9233c8b0b4d6deca88d2432a7b0c90d449997bcc4e580cad3afa6e27a2b9466b13b6e99eec286a6398351a869e6983b4e4b5a983acec1c50d3ef148c70956f8"}, 0xe8)

[ 2537.951432] syz-executor.0: attempt to access beyond end of device
[ 2537.951432] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2537.953641] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:53:27 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:53:27 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0xf25}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})

14:53:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ip6gretap0\x00'})

14:53:27 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40200, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ftruncate(r1, 0x101)
r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x6, 0x4, 0x86, 0x5, 0x0, 0x3, 0x80004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x4}, 0x420, 0x98, 0x8, 0x8, 0x3, 0x8, 0x800, 0x0, 0x1000, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
close(r0)
preadv(0xffffffffffffffff, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x1f, 0x2, 0x3f, 0x6, 0x0, 0x7, 0xc00, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x6, 0x5}, 0x8108c, 0x27c6, 0x80000000, 0x8, 0x200, 0x1, 0x7f, 0x0, 0x4, 0x0, 0x80000001}, 0x0, 0xd, r2, 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000)
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"])
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="010000000000000000003b0000ce08000300", @ANYRES32, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1658, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x2}}}}, [@NL80211_PMSR_ATTR_PEERS={0x52c, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x310, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7b}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x184}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x198, 0x5, 0x0, 0x1, [{0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x99a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf210}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x370}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xf6c, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x17d}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}]}, {0x228, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xba}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xed}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7b6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x78}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x184}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1fffe}]}]}, {0x104, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x396}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x335c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc23}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x67f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x5f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x49}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x36c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x95}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x130, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x84}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x174, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x67}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x384, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x290, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4000}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa3a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xa4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}]}]}]}]}, 0x1658}}, 0x80)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r3, 0xd)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000300))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x40, 0x4, 0x5, 0x0, 0xffff, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x3, 0xfffffffffffffffd}, 0xc00, 0x200, 0x101, 0x0, 0x80, 0x5, 0x581, 0x0, 0x6, 0x0, 0x20}, 0x0, 0xb, r3, 0x3)

[ 2552.250336] loop0: detected capacity change from 0 to 40
14:53:27 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
epoll_create(0x4)

14:53:27 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100))

14:53:27 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:27 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)=0x6, 0x4)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:53:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100))

14:53:27 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

14:53:27 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 2552.399435] syz-executor.0: attempt to access beyond end of device
[ 2552.399435] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2552.400575] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:53:28 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000100), &(0x7f0000000140)={'U-'}, 0x16, 0x4)

14:53:28 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:50 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10000, 0x90)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:53:50 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:51 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5df", 0xb7, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:53:51 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:51 executing program 1:
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r0=>0x0)
sched_setattr(r0, &(0x7f0000000100)={0x38, 0x1, 0x10000000, 0x4, 0x1, 0x6b, 0x580a, 0x4, 0x0, 0x1}, 0x0)
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

14:53:51 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
epoll_create(0x4)

14:53:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100))

14:53:51 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x9, 0x4)

[ 2575.491781] loop0: detected capacity change from 0 to 40
14:53:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:53:51 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:53:51 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:53:51 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100))

14:53:51 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x8, 0x6, 0x6, 0x7, 0x0, 0xfff, 0x92080, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x10001, 0x8001, 0x81, 0x4, 0x7fff, 0x4ae, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x3)
accept4$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
flock(r0, 0x1)

14:53:51 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(r0, r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:53:51 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r1, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r1, r1, 0x0, 0x100000)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x100, @none, 0x7, 0x1}, 0xe)
fcntl$getown(r1, 0x9)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc)

14:53:51 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 2576.311482] syz-executor.0: attempt to access beyond end of device
[ 2576.311482] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2576.313016] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:54:04 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5df", 0xb7, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:54:04 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x6}}, './file0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x81}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x20000055)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x2, 0x0, &(0x7f0000000040))
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)

14:54:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000011c0)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000001200)={'\x00', {0x2, 0x0, @local}})
r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000100)={{r3}, "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"})

14:54:04 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
epoll_create(0x4)

14:54:04 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:04 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x3, 0x6, 0x81, 0x0, 0xfff, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9af8, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x4, 0x4, 0x9, 0x7, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0xa, 0xffffffffffffffff, 0xa)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x60000018})

14:54:04 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 2589.382541] loop0: detected capacity change from 0 to 40
14:54:05 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105040, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})

14:54:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:05 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:05 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8000, @none, 0x4, 0x2}, 0xe)

[ 2589.511249] syz-executor.0: attempt to access beyond end of device
[ 2589.511249] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2589.513110] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:54:05 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:54:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

[ 2589.684771] cgroup: fork rejected by pids controller in /syz5
14:54:19 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:19 executing program 2:
r0 = epoll_create(0x7)
r1 = getpid()
r2 = getpid()
r3 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000000)={r3})
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x800, 0x0, 0x0, 0x80000000000, 0x0, 0x7}, r1, 0xb, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x41, 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x20, 0x7f, 0xff, 0x1, 0x0, 0x3ff, 0x410, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000140)}, 0x44b8, 0x0, 0xb5, 0x1, 0x8, 0xe, 0x7, 0x0, 0x2, 0x0, 0x80}, 0xffffffffffffffff, 0x7, r5, 0x2)

14:54:19 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5df", 0xb7, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:54:19 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x7abf, 0x44e100)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000008240)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000082c0)={'veth1_macvtap\x00', &(0x7f0000008280)=@ethtool_pauseparam={0x13, 0x6, 0x800, 0x391f6286}})
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000200)=0x55, 0x4)

14:54:19 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)=0x27)

14:54:19 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x4)

14:54:19 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:19 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 2604.378834] loop0: detected capacity change from 0 to 40
14:54:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:20 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x294ee128)
shutdown(r0, 0x0)
pread64(r0, &(0x7f0000000080)=""/111, 0x6f, 0x80000000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:54:20 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x294ee128)
shutdown(r0, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={<r1=>0x0, 0x54b, 0x2, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000480)={r1, 0xbd16, 0x1, [0x1, 0x9, 0x4, 0x7, 0x1000], [0x2, 0x100, 0x7, 0x100000000, 0x716f, 0x631, 0x6, 0x2, 0x3, 0x80, 0x6, 0x3, 0x0, 0x6, 0x8, 0x5, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x9, 0x9, 0x80, 0x1, 0x10000, 0x4, 0x5, 0x4, 0x2, 0x7, 0x7ff, 0x3e34, 0x96c, 0x0, 0xdf, 0x9, 0x1, 0xcefa, 0x3, 0x7, 0x8d, 0x1, 0x2, 0x7, 0x20, 0x7fffffff, 0x1f, 0x80000000, 0x0, 0x100000001, 0x7fffffff, 0x8, 0xb3eb, 0x9, 0x8, 0x4, 0xfffffffffffffff8, 0x80000000, 0x6, 0x0, 0xc0000000000000, 0x9, 0xce53, 0x7d02, 0xfffffffffffffff9, 0x0, 0x0, 0x10000, 0x9, 0x970, 0x9, 0x6, 0x1, 0x1f, 0x8dd7, 0x4, 0x4, 0xf4b1, 0x3, 0x100, 0xa65, 0x2, 0x7ff, 0x20, 0x6, 0x2, 0x8, 0x9, 0x400, 0x1, 0xfffffffffffffffa, 0x2, 0x8, 0x5, 0x8, 0x8, 0x0, 0xff, 0x7, 0x5, 0x4fa31c93, 0xcc, 0x100000000, 0x9a, 0x5, 0x9, 0x100000001, 0x1f, 0x8, 0x2, 0x8000, 0x9, 0x100, 0x1, 0x3, 0x3f1d, 0x4, 0x80, 0x7, 0x9]})
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:54:20 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:20 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:54:20 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
poll(&(0x7f0000000040)=[{}], 0x1, 0x294ee128)
mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000005, 0x50, r0, 0x1)
shutdown(0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x294ee128)
shutdown(r2, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r3}, 0x18, 0x0)
poll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x6}], 0x1, 0x4eb0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xee00}, {0x2, 0x4, r3}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x5, 0xffffffffffffffff}], {0x10, 0x7}, {0x20, 0x1}}, 0x44, 0x2)
openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.pending_reads\x00', 0x521800, 0x82)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7, 0x3, 0x80, 0xff, 0x0, 0xa9, 0x400, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x18}, 0xc023, 0x4, 0xf2d, 0x8, 0xfffffffffffffffb, 0x75f880, 0x1, 0x0, 0xef8, 0x0, 0x100000001}, 0xffffffffffffffff, 0x5, r0, 0x1)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:54:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

[ 2604.906796] syz-executor.0: attempt to access beyond end of device
[ 2604.906796] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2604.909407] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:54:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
listen(r0, 0xb65)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:54:37 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
fallocate(r0, 0x34, 0x4, 0x1)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:54:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

14:54:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
gettid()
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:37 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x4)

14:54:37 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:54:37 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2621.528903] loop0: detected capacity change from 0 to 40
14:54:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68)

14:54:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 2621.647161] syz-executor.0: attempt to access beyond end of device
[ 2621.647161] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2621.648959] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:54:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:54:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
r3 = getpid()
r4 = getpid()
r5 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000000)={r5})
kcmp(r1, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = socket$inet6(0xa, 0x1, 0xfff)
kcmp(0x0, r1, 0x2, r6, r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r7}], 0x1, 0x294ee128)
shutdown(r7, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f0000000180)={0x3ff, 0x8, [0x7, 0x4, 0x7, 0x8001], &(0x7f0000000140)=[0x0]})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:54:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

14:54:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:37 executing program 2:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:54:37 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={'netpci0\x00', {0x2, 0x0, @dev}})

14:54:37 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x4)

14:54:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:37 executing program 5:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

14:54:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

14:54:37 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:54:37 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
epoll_create(0x4)

14:54:37 executing program 1:
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "bb01544fdb58d8abd20da0d20c"}, 0x11)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:54:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

14:54:37 executing program 5:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:37 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
flock(r1, 0x7)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0xfffffffffffffdee)

[ 2622.441601] loop0: detected capacity change from 0 to 40
[ 2622.549467] syz-executor.0: attempt to access beyond end of device
[ 2622.549467] loop0: rw=2049, sector=100, nr_sectors = 24 limit=40
[ 2622.556956] syz-executor.0: attempt to access beyond end of device
[ 2622.556956] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2622.558765] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:54:53 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:54:53 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000100)={0x1, 0x10000, 0x2, 0x7, 0x0, [0x7, 0x10001, 0x8000, 0x3e]})

14:54:53 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
epoll_create(0x4)

14:54:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:54:53 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

14:54:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x100000001, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)="bbcdc8d075f7", 0x6, 0x40}, {&(0x7f0000000100)="4167f570d7b2641311c862a34ce52763d25afbf26fe221e51a629a527226086ce5741980bb960a451de05a820a389b84900f82e8864ea311d51c24a0d595959dc9a522501b8d8dbf76a2edb741db4dba32c888267536c5865b74949b24618591e6b2846daf244681c6494918f6286f954a8ec88f9f4b754b60f6e44660fc3bef5ff23c96036c70d7d13033f8a2970222e8520f9c1d553df945ec8dabf3dd6f594cab1f57d5e0c354b15f8222a34f8c3b54ee183475b189d26d1e145dcaa67e361f704604b03b44c1f70061fe891fc0aea3cff97732dfa41fd1509cbd5331dc6dfe74be06", 0xe4}, {&(0x7f0000000200)="529ca00f3d515bbd7a17c7777b3c724c0f6f09e9ab17e0b403b775bb7824aeb3c8baa087ea", 0x25, 0x10000}], 0x0, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, 0xee01}}, {@huge_never}, {@huge_never}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}], [{@context={'context', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x32, 0x37, 0x33, 0x39, 0x39, 0x31, 0x35], 0x2d, [0x30, 0x36, 0x63, 0x31], 0x2d, [0x65, 0x35, 0x61, 0x65], 0x2d, [0x39, 0x30, 0x33, 0x32], 0x2d, [0x39, 0x58, 0x66, 0x36, 0x39, 0x34, 0x65, 0x33]}}}, {@smackfsfloor}]})
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000004c0), &(0x7f0000000500)=<r3=>0x0, &(0x7f0000000540))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private1}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8)
lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fsetxattr$system_posix_acl(r1, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x1, r3}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x2, r4}, {0x2, 0x0, r5}], {0x4, 0x2}, [{0x8, 0x4, 0xee00}], {}, {0x20, 0x6}}, 0x54, 0x1)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:54:53 executing program 5:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:53 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:54:53 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

14:54:53 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xdc, 0x7, 0x2, 0xe9, 0x0, 0x1, 0x2100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7f, 0x6}, 0x4010, 0x6, 0x1, 0x6, 0x7, 0x2, 0x9, 0x0, 0xa72, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x19995b5830566e74)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:54:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x9, 0x83}, 0x2)

[ 2637.908412] loop0: detected capacity change from 0 to 40
14:54:53 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0)

14:54:53 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:54:53 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
epoll_create(0x4)

14:54:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 2638.024559] syz-executor.0: attempt to access beyond end of device
[ 2638.024559] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2638.025618] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:54:53 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x40, 0xee18, 0x7, 0xd3, 0x81, 0x5}, 0xc)

14:55:10 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000100))

14:55:10 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:55:10 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:55:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0)

14:55:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
epoll_create(0x4)

14:55:10 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:55:10 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x10080, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000900)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000a40)={<r2=>0x0, 0x2, 0x1, [0x6, 0x9, 0x40, 0x4, 0x1], [0x3, 0x3, 0x9, 0x1, 0x5, 0x0, 0x8293, 0x9, 0xfff, 0x75, 0x7ac, 0x7, 0x10000, 0x5, 0x4, 0x4, 0xfffffffffffffffb, 0x6b9, 0x2, 0x4, 0x3, 0x8, 0x3f, 0x1, 0x1, 0x100000000000, 0x1, 0x40, 0x9, 0xfffffffffffffff9, 0x4, 0x7, 0xfffffffffffffeff, 0x5, 0x7ff, 0x3, 0x2, 0x4, 0x6, 0xef9, 0x1ff, 0x3f, 0x0, 0x7, 0x3, 0xffff, 0x4, 0x8, 0x9, 0x2, 0x7, 0x4, 0x5, 0x0, 0x7fffffff, 0x29, 0x0, 0x7, 0x9, 0x8, 0xffff, 0x80, 0x0, 0x8, 0x7f675156, 0x1951, 0x1, 0x1, 0x2, 0x7fff, 0x7, 0xd644, 0x6, 0x3a6, 0xece, 0x6, 0x9, 0x9f8, 0x7, 0x9, 0x7fffffff, 0x527, 0xad, 0x6c4, 0x0, 0xc66c, 0x2, 0x1e5, 0x1e2, 0x5079, 0x0, 0x6, 0x7, 0x3, 0x3, 0xff, 0x3, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x40, 0x9, 0x1000, 0x4, 0xffffffffffffffe1, 0x1d8, 0x8000, 0x9, 0x3, 0xff, 0x9, 0x4, 0x3, 0x2, 0x8, 0x1, 0x9800000000000000, 0x4, 0x8, 0x8]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={<r3=>r2, 0xffffffff00000000, 0x1, [0xfffffffffffffff7, 0x401, 0x80000001, 0x200, 0xd7], [0x10000, 0xdde0, 0x215, 0x0, 0x4, 0x3, 0x3f, 0x3, 0x2, 0x3, 0x7fff, 0x3, 0x6, 0xffff, 0x8, 0x1, 0xffffffffffffffff, 0x40, 0x0, 0x4, 0x5, 0x7b, 0xe5f, 0x1, 0x5, 0x1, 0x4b256fff, 0x5, 0x401, 0xde, 0x2, 0x6, 0x2, 0x1000, 0x5, 0x0, 0x7c7, 0x4, 0x0, 0x9, 0xeb9, 0x6, 0xe2e, 0x1, 0x6, 0xeba, 0x5869, 0x7f, 0x9, 0x40, 0x1000, 0x7fff, 0x10001, 0x101, 0x2, 0x1587, 0x9, 0x5, 0x400, 0x0, 0x78f, 0x1, 0x8001, 0xfffffffffffffffe, 0x1000, 0xffffffffffffff39, 0x1, 0x6, 0x10001, 0x6, 0x1, 0x2e, 0x2a3, 0xd, 0x9, 0x100000001, 0x0, 0x1000, 0x6, 0x9, 0x2, 0x1f, 0xffffffffffff21d8, 0x8001, 0x9, 0x3ff, 0x80000000, 0x2, 0x4, 0x9, 0x1, 0x101, 0x6, 0x0, 0x7, 0x3, 0x1, 0xffffffff, 0x62, 0x3f, 0x0, 0x8, 0x1ff, 0x3, 0x2, 0x5e, 0x8, 0x9, 0x843, 0x8, 0x7, 0x10000, 0x42a, 0x4, 0x6, 0x9, 0x0, 0x818, 0x80000001, 0x7, 0x107]})
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}]}, 0x18, 0x0)
getresgid(&(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40)=<r4=>0x0)
r5 = syz_open_pts(r1, 0x40180)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000002b80)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYBLOB="0100796c6530002308609a54b414e49e2e5aed382c038c1621240fb4b230d73b32d8bface8426a1e0ae201e11bd9af3b18d5b016db5412bd8c759215e923b900c3a55b0207d571d0bfa791445ad91c7e6ae3d8"])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000018c0)="ebdb0a296dd1b82da8400d48be710676e114edffb476741a93d4a08d68584048fa569cf7774b44ae7f76018549c1b9c275e47f26", 0x34}, {&(0x7f0000001900)="36e581c09b2b673732dd9b07733608bf110dd7e60d9238ae616339e63201e531442a090c8974ebee9a7b4b62b3729719272df8a4f800bb70d78fc9e28779f6edc3c12b1ad140577f3e8059524d00a8ebcae53891703417891d40e24c1b523d491b298e08cacdbd9c79", 0x69}, {&(0x7f0000001980)="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", 0xfe}, {&(0x7f0000001a80)="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", 0x1000}], 0x4, &(0x7f0000002f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000e9b7e135b186d81966446169dee109b2716aa62c2e84e3df1dac9260f3f436deabe19a4766f39171b51368af8cbab7d7e0a899ed9cf7b85b742fcab0557fe6ae7b05f5446a15370e788bec0bd3fc0b57665b53ef4bde1e9b34a5bb5414b01442244005ecdfa657bf28a815e7082c669572df9709877357c76cacdb9eea4f681ab3c535a0ed", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="1c000000002000000100000900000000890785b5934e3ea28761244ec6bf46c74df3233879c080e73246ed214daff3489cef900ee4ae2dda4c97c95a380ee2782db8243eb40b07bac5f9399dff7fb92978d96350012cd357e983561aeeff73f201838ff114466ac1cbe8327d166579b1999b9a1bc29c3b12d3c20fde27b813bf90d5b59e3aeef7763075f92f7e6e4bb578ae25b7d60b6e5fcdefbf886159a9d7b124d78b8a11a1f5e9e28f0ccad8553034340024", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001800000000000500000000e000000000", @ANYRES32=r0, @ANYRES32], 0x98, 0x20}, 0x4004890)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r6}], 0x1, 0x294ee128)
shutdown(r6, 0x0)
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000e80)={0x1, 0x4, @status={[0x7, 0x4, 0x7d4, 0x1, 0x6, 0xfffffffffffffcee]}, [0x80000001, 0x1f2, 0xfffffffffffffbff, 0x0, 0x8001, 0x3, 0x7, 0x0, 0xdd, 0xff9, 0x7, 0x3f, 0x10001, 0x9, 0x6, 0x8, 0xc00000000000, 0x6, 0x5, 0xf9d1, 0x180000000000, 0x414eee81, 0x9, 0x100000001, 0x0, 0x0, 0x4, 0xff, 0x1000, 0x4, 0x7, 0xf2, 0x1c000, 0x3, 0x4, 0x9636, 0x1, 0x8001, 0x142, 0xff, 0x2, 0x6, 0x1, 0x8001, 0xa876, 0x1, 0x0, 0x4, 0x20, 0xd41, 0x100, 0x0, 0x2, 0x1f, 0x4, 0xac, 0x1a, 0x3, 0x5, 0x5, 0x73, 0x7, 0x24000, 0x100]})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000004c0)={r3, 0x2, 0xfffffffffffffffa})
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8a}, 0xe)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000009c0)={<r7=>r1, 0xfff, 0xfff, 0x1})
ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000a00)={0x800, 0x40, 0x5, 0x46d, 0x6, "4571ba4c23dd0b47209b64958cb68f7dcbf93e"})

14:55:10 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:55:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0)

14:55:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
epoll_create(0x4)

14:55:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0)

[ 2655.338945] loop0: detected capacity change from 0 to 40
14:55:10 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:55:10 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0)

14:55:11 executing program 5:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

[ 2655.485629] syz-executor.0: attempt to access beyond end of device
[ 2655.485629] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2655.487307] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2656.179230] kworker/u4:1: attempt to access beyond end of device
[ 2656.179230] loop0: rw=1, sector=44, nr_sectors = 80 limit=40
[ 2656.180945] kworker/u4:1: attempt to access beyond end of device
[ 2656.180945] loop0: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2656.182398] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:55:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:55:26 executing program 4:
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x6, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100), 0x4)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
poll(&(0x7f00000001c0)=[{r5, 0x400}, {r3, 0x2620}], 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r4, {0x3, 0x5}}, './file1\x00'})
epoll_create1(0x80000)
sendfile(r6, r2, &(0x7f0000000240)=0x200, 0x100000001)
ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000140))

14:55:26 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:55:26 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000))
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:55:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0)

14:55:26 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:55:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:55:26 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
gettid()
epoll_create(0x4)

14:55:26 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

[ 2671.265296] loop0: detected capacity change from 0 to 40
14:55:26 executing program 7:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:55:26 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:55:26 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}}, 0x0)

[ 2671.365523] syz-executor.0: attempt to access beyond end of device
[ 2671.365523] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2671.367104] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:55:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:55:27 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x7fff, 0x101}}, 0x0, 0x5, 0xffffffffffffffff, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x8010)

14:55:27 executing program 7:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:55:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

[ 2671.455245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31613 comm=syz-executor.3
14:55:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:55:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 2672.058995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31727 comm=syz-executor.3
14:55:41 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}}, 0x0)

14:55:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:55:41 executing program 7:
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:55:41 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:55:41 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x2, 0xff, 0xd, 0x6}, {0x6, 0x1b, 0x97, 0x20}]})
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x1, 0x0, 0x7ff, 0x3a000, 0x200, 0x6}, {0x1, 0x26c, 0x1ff, 0x6, 0x7ff, 0x1}], ['\x00', '\x00']})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 2686.217614] loop0: detected capacity change from 0 to 40
14:55:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x8, 0x8, 0x8, 0x0, 0x80000001, 0x82008, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp, 0x882, 0x4d9a, 0x7f, 0x9, 0x4, 0x0, 0x8000, 0x0, 0x400, 0x0, 0xf3}, 0x0, 0x8, r0, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:55:41 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0xfff, 0xe92, 0x8})
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

14:55:41 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 2686.265661] audit: type=1326 audit(1678028141.866:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31733 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7857342b19 code=0x0
[ 2686.271632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31744 comm=syz-executor.3
[ 2686.364574] syz-executor.0: attempt to access beyond end of device
[ 2686.364574] loop0: rw=2049, sector=100, nr_sectors = 24 limit=40
[ 2686.366329] syz-executor.0: attempt to access beyond end of device
[ 2686.366329] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2686.367669] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2687.088200] audit: type=1326 audit(1678028142.687:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31733 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7857342b19 code=0x0
[ 2702.117644] loop0: detected capacity change from 0 to 40
14:55:57 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:55:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x28}}, 0x0)

14:55:57 executing program 4:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x294ee128)
shutdown(r2, 0x0)
sendfile(r1, r2, &(0x7f0000000080)=0x2, 0xffffffffffffffff)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:55:57 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6", 0xc2, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:55:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:55:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005200"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:55:57 executing program 2:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1000000, &(0x7f0000000100))
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:55:57 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x7ed, 0xba0e48d6aa7f7523)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))

14:55:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005200"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:55:57 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:55:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0)

14:55:57 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bond_slave_1\x00', 0x7})

[ 2702.270632] syz-executor.0: attempt to access beyond end of device
[ 2702.270632] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2702.271670] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:55:57 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

[ 2702.347025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32086 comm=syz-executor.6
14:56:15 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = getpid()
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x6, 0xff, 0x0, 0xae7, 0x80001, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x999, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x880, 0x3, 0x401, 0x1, 0x9, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0xffffffff}, r2, 0x8, r0, 0x2)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:56:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005200"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:56:15 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:56:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:56:15 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x40})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, 0x0, &(0x7f0000000040))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r1}, 0x2, &(0x7f0000000080)=[0x0, 0x200], 0x3ff, 0x4, [0x100000000, 0x2, 0x8, 0xe44]})

14:56:15 executing program 7:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:56:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0)

14:56:15 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6", 0xc2, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2719.918991] loop0: detected capacity change from 0 to 40
[ 2719.921639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32098 comm=syz-executor.6
14:56:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000"], 0x28}}, 0x0)

14:56:15 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

[ 2720.014343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32116 comm=syz-executor.6
[ 2720.032284] syz-executor.0: attempt to access beyond end of device
[ 2720.032284] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2720.033237] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:56:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005200"], 0x28}}, 0x0)

14:56:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:56:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:56:15 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000100))
r7 = syz_open_dev$hidraw(&(0x7f0000000180), 0x2, 0x10000)
getpgrp(r5)
r8 = getpgrp(r4)
kcmp$KCMP_EPOLL_TFD(r2, r8, 0x7, r7, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x3})
kcmp(r2, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x3, 0x6, 0x0, 0x101, 0x280, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_config_ext={0x2, 0x2}, 0x59300, 0x4, 0x1f, 0x2, 0x80, 0x2, 0x100, 0x0, 0xff97, 0x0, 0x7fffffff}, r2, 0xf, r0, 0xa)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:56:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005200"], 0x28}}, 0x0)

14:56:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:56:32 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6", 0xc2, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:56:32 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6", 0xc2, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:56:32 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000005200"], 0x28}}, 0x0)

14:56:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:56:32 executing program 2:
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
fcntl$getflags(r0, 0x401)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x49, 0x5, 0x80, 0x0, 0x2, 0x1, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x6239, 0xfffffffffffffffb}, 0x18b40, 0x3f, 0x5, 0x5, 0xb0, 0x9, 0x8, 0x0, 0x2, 0x0, 0x608a}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x64, 0x52, 0x2, 0x2, 0x0, 0x355, 0x8011, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f8, 0x2, @perf_bp={&(0x7f0000000180), 0x1}, 0x18, 0x101, 0x5, 0x1, 0xffff, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x81, 0x4, 0x20, 0x14, 0x0, 0x3, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x1000, 0x7, 0x9ce, 0x0, 0x9, 0xfffff800, 0x6, 0x0, 0x6, 0x0, 0xa8}, 0xffffffffffffffff, 0x10, r2, 0x1)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x2, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x80050, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x8001, 0x3}, 0x2200, 0x9, 0xffffffff, 0x3, 0x7f, 0x3, 0x401, 0x0, 0x8, 0x0, 0x3f}, 0xffffffffffffffff, 0x5, r0, 0x6)

14:56:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

14:56:32 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0xffffffffffffffb4, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180))
r2 = fsmount(0xffffffffffffffff, 0x0, 0x2)
connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x400, @any, 0x8, 0x1}, 0xe)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x294ee128)
shutdown(r3, 0x0)
listen(r3, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x4ea}, 0x8)

14:56:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 2736.923620] loop0: detected capacity change from 0 to 40
14:56:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

14:56:32 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:56:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

14:56:32 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001"], 0x28}}, 0x0)

14:56:32 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:56:32 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

[ 2737.123590] syz-executor.0: attempt to access beyond end of device
[ 2737.123590] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2737.125499] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:56:32 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, <r1=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000140)={{}, r1, 0x0, @inherit={0x50, &(0x7f00000017c0)=ANY=[@ANYBLOB="010000000000000001000000000000000100010000000000090000000000000012000000000000000900000000000000010000000000d21a3ebf097476480000070000000000000007000000000000000100000000000000", @ANYBLOB="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", @ANYRES32=r2]}, @devid})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"3956fa6a5095e1c0d980ddd27bee3bed", r2, 0x0, {0x3, 0x3}, {}, 0x6, [0xd46, 0x9, 0x7fff, 0x7fff, 0x401, 0x7fff, 0x7f9, 0xffff, 0x10000, 0x2153, 0x1, 0x4, 0x5, 0x5, 0xfffffffffffffffa, 0x10001]})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

[ 2737.755985] cgroup: fork rejected by pids controller in /syz4
14:56:48 executing program 4:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="97252d39e00c6aeb2b73c46c95688f1027c885825bd1e9e80d24819538a1705ebf96a80f096e1aaf9c427f169d8b1e6edc4c25e38dd54d36887b290a3d546cd3165d22889bd1c23e4343a042c93f26034387fd6bcd271677a8a5a2aeff576cb394ce774ee04685fcea5a1ed6252759cd4e7767577b395e6d213badd84cb392944eb17b99bf265b9f5e", 0x89}, {&(0x7f0000000200)="33d69fbb0bb3aa68f0bf25fce135146c013a0b9e3c", 0x15}, {&(0x7f0000000240)="78cd", 0x2}], 0x3, &(0x7f00000002c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x7, 0xb6, [@broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}, 0x44008800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x64, 0x0, 0xaf93}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:56:48 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001"], 0x28}}, 0x0)

14:56:48 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:56:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

14:56:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:56:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:56:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1e}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:56:48 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6", 0xc2, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:56:48 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000520001"], 0x28}}, 0x0)

14:56:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:56:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

[ 2753.117727] loop0: detected capacity change from 0 to 40
14:56:48 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

14:56:48 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:56:48 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:56:48 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000480)={0x1a3363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getpgid(r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x10800, 0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1e, 0x3, 0xeb, 0x7, 0x0, 0x6, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x33ff, 0x2}, 0x0, 0x6, 0x48, 0x1, 0x0, 0x7ff800, 0x2, 0x0, 0xffffffff, 0x0, 0x5}, r0, 0x0, r1, 0x5)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40)
preadv(r3, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r3, r3, 0x0, 0x100000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
ioctl$BLKTRACESTART(r4, 0x1274, 0x0)
perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x80, 0x7, 0x1, 0xd6, 0x1f, 0x0, 0x3, 0x20000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x400, 0x22, 0x9, 0x0, 0x6, 0xffffff91, 0x7f, 0x0, 0x739, 0x0, 0x7fffffff}, r3, 0xb, r1, 0x1)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:56:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="080101ffbf0000005e020000020000009a030000060000000000000000000000e1caf10e0b47926084d0cdae9352f3cc7eea36866a58768cfa85d169a6b3083e08f640cdab052023ee083deee7a31379b541577617a54dcb5063ab2ea34ce5f3b509e40afc67000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006361bd809a58dfa277ae308774e35a600362477bd4a75f81a920c53b82062200370bd1b099dbcc6e0bfb5134bc832553c33efb4a799bd7b289f06d325e6771ba02e14bb963f61b55f56393d2dc47a6e0c19dae987f9b733d6dcf897a96c7bd7253878d79998b4a46c65147bc978031f05f512e6676"], 0x166)

[ 2753.382563] syz-executor.0: attempt to access beyond end of device
[ 2753.382563] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2753.386452] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:57:04 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:57:04 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6", 0xc2, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:04 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:04 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:57:04 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

14:57:04 executing program 2:
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x25, @buffer={0x0, 0x42, &(0x7f0000000040)=""/66}, &(0x7f00000000c0)="21b3ba8a8da7", &(0x7f0000000100)=""/88, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00')
accept4$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000100)=0xe, 0x80800)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:57:04 executing program 4:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r1, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1/file0\x00', 0x7e7, 0x7, &(0x7f0000002500)=[{&(0x7f0000000240)="ac753d8ee4cfe017f7b066bb4fc479bd864958aab7e7606381d47fa7ae0f3429adedd082d4daee1428217629753863bf216dc92f181494607ffb1586c007b44285431370a19ea628b1c77f7b2c06b77ca0618327992d904a84bf43b97b8bb6836ec357bbdf180bcee6460d159faf3a0b77e4c397e8c9f6e7dc4cb3706b062bcf01b3ebd2655ed141efb3c10244143b9621475b2f96fbd3c527f2699f2a13e48b6e993103759e81e523590b1787faf84a87520eb8b7a0beaa79223a6cc376046a30b514fa92308effee30e21838e4", 0xce, 0x7}, {&(0x7f0000000340)="16ea80f065b01a353ab8b39e6f9abe114cefad09af65c5815fa959e3730df856d7a057806d991b431fce85a35fe20024fe7e663dd36fdc05dc9c8369d6e76efb2c5328acffe0b0dcca3c23f4b6e923803947aab408e0c6f855ebf0bff566c8d50dd291f08ff495767b569601c489a98f5782fe87a1c069f442fa208b4f48824ff3f87eeb141154de8f9b7976f81263259d6ab4d25437ae2350ee95fab47bac5e454f34e93038b59fd9ad0c0310e2e7982451da91100879", 0xb7, 0xc3}, {&(0x7f0000000140), 0x0, 0xffffffff}, {&(0x7f0000000400)="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", 0x1000, 0x6}, {&(0x7f0000001400)="413359022af2aa5c", 0x8, 0x5}, {&(0x7f0000001440)="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", 0x1000, 0x1f}, {&(0x7f0000002440)="10904e476b3fa7f3e0fd9825488cbf5140903e0f266ef0e3920d2d4559eb0da6ebf8a7f582f4ee099d3c9047424749f4adb9aad617a0609540e2f38791792e0a9d00072ad18cfa8bf6a8ae7b2dae259d19d33aa476ecc5f7aba370e600109f7d4c38da3e6c66c9a9f9f623303b51ff71f24f3dc782aadb413d8c07231cb510b980ea7923a6da9a4216bf8ea3f43cf30b7e2d583442b105f3369d6ca96b04c5043fb95e389b80b8f8b11c704d8d3a6d4f3d2a67a461c105310477e40d", 0xbc, 0x8}], 0x0, &(0x7f00000025c0)={[{@shortname_winnt}], [{@uid_gt={'uid>', 0xffffffffffffffff}}]})
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000002600))
sendfile(r1, r1, 0x0, 0x100000)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1, @none, 0xfeff, 0x2}, 0xe)

[ 2768.573430] loop6: detected capacity change from 0 to 40
[ 2768.599379] loop4: detected capacity change from 0 to 264192
[ 2768.634481] loop0: detected capacity change from 0 to 40
[ 2768.643568] loop4: detected capacity change from 0 to 264192
14:57:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100))

14:57:04 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:57:04 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x9, 0x1, 0x81, 0x5, 0x0, 0x7735a5f2, 0x84000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4e, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0xa00, 0x8001, 0x5, 0x1, 0x1, 0x2a, 0x7fff, 0x0, 0xdad, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
preadv(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/216, 0xd8}], 0x7, 0x2, 0x6)

14:57:04 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

[ 2768.844896] syz-executor.6: attempt to access beyond end of device
[ 2768.844896] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2768.846596] Buffer I/O error on dev loop6, logical block 31, lost async page write
14:57:04 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
r2 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = epoll_create(0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0)
r5 = getpid()
r6 = getpid()
r7 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000000)={r7})
kcmp(r2, r6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x6, 0x80, 0x3f, 0xb0, 0x0, 0x4, 0x1002, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x100, 0x6, 0x2, 0x0, 0xce1, 0x80000001, 0x7, 0x0, 0x8, 0x0, 0x5}, r2, 0xa, r0, 0x8)

14:57:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

14:57:04 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:57:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

[ 2769.065400] syz-executor.0: attempt to access beyond end of device
[ 2769.065400] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2769.066419] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:57:17 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:17 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:57:17 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x5, 0x41, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x12091, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x21b0, 0x4}, 0x12201, 0x11a, 0x6, 0x5, 0x8, 0x0, 0x9, 0x0, 0x1f, 0x0, 0x43d4}, 0xffffffffffffffff, 0xb, r0, 0x8)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = fcntl$dupfd(r0, 0x406, r2)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x0, 0x7, 0x5, 0x0, 0x5, 0x800, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x0, @perf_config_ext={0x20, 0x6}, 0x40010, 0x1, 0x10001, 0x1, 0x334, 0x9, 0x5, 0x0, 0x1ff, 0x0, 0x20}, 0xffffffffffffffff, 0xa, r3, 0x0)

14:57:17 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6", 0xc2, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:17 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:17 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:57:17 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:17 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2782.065507] loop5: detected capacity change from 0 to 40
[ 2782.069210] loop6: detected capacity change from 0 to 40
[ 2782.088868] loop3: detected capacity change from 0 to 40
[ 2782.097423] loop0: detected capacity change from 0 to 40
14:57:17 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x4)

14:57:17 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r0=>0x0}, &(0x7f0000000140)=0xc)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x808, 0xffffffff, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x4, 0x0)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x200e80, 0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 2782.247002] syz-executor.6: attempt to access beyond end of device
[ 2782.247002] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
14:57:17 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
epoll_create(0x4)

[ 2782.248729] Buffer I/O error on dev loop6, logical block 31, lost async page write
14:57:17 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
epoll_create(0x4)

[ 2782.418571] syz-executor.0: attempt to access beyond end of device
[ 2782.418571] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2782.419800] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:57:17 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
epoll_create(0x4)

14:57:42 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
creat(&(0x7f0000000040)='./file0\x00', 0xc0)

14:57:42 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

14:57:42 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:42 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:42 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:42 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:42 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:42 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2807.295103] loop4: detected capacity change from 0 to 40
[ 2807.300624] loop0: detected capacity change from 0 to 40
[ 2807.304272] loop6: detected capacity change from 0 to 40
[ 2807.307564] loop5: detected capacity change from 0 to 40
[ 2807.308125] loop3: detected capacity change from 0 to 40
14:57:42 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 2807.434344] syz-executor.0: attempt to access beyond end of device
[ 2807.434344] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2807.435681] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2807.456499] syz-executor.3: attempt to access beyond end of device
[ 2807.456499] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2807.458532] Buffer I/O error on dev loop3, logical block 31, lost async page write
14:57:43 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2807.536720] syz-executor.6: attempt to access beyond end of device
[ 2807.536720] loop6: rw=2049, sector=108, nr_sectors = 16 limit=40
[ 2807.584797] loop7: detected capacity change from 0 to 40
[ 2807.606450] syz-executor.6: attempt to access beyond end of device
[ 2807.606450] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2807.610577] Buffer I/O error on dev loop6, logical block 31, lost async page write
14:57:43 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400800, 0x0, 0x1}, 0x18)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000200)={0x0, 0x0, "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", "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"})
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x7ff, &(0x7f0000000180)=0x2)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x562a, 0x5, 0x6, 0xeb, 0x6, 0x6, 0x6}, 0xc)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

[ 2807.882017] syz-executor.4: attempt to access beyond end of device
[ 2807.882017] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2807.885285] Buffer I/O error on dev loop4, logical block 31, lost async page write
14:57:43 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x3, 0x7, 0x64, 0x0, 0x7, 0x68423, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_config_ext={0x670e3e4e, 0x4}, 0x44210, 0x80, 0x3, 0x6, 0xdd2a, 0x9, 0x1, 0x0, 0x25396eb3, 0x0, 0x5}, 0x0, 0x0, r1, 0x8)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

14:57:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:43 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2808.159348] loop3: detected capacity change from 0 to 40
14:57:43 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2808.225634] loop7: detected capacity change from 0 to 40
14:57:43 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x8, 0x6, 0x6, 0x7, 0x0, 0xfff, 0x92080, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x10001, 0x8001, 0x81, 0x4, 0x7fff, 0x4ae, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x3)
accept4$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
flock(r0, 0x1)

14:57:43 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:57:43 executing program 2:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)

[ 2808.323397] loop0: detected capacity change from 0 to 40
[ 2808.393786] loop4: detected capacity change from 0 to 40
[ 2808.412256] syz-executor.3: attempt to access beyond end of device
[ 2808.412256] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2808.414668] Buffer I/O error on dev loop3, logical block 31, lost async page write
[ 2808.825044] syz-executor.0: attempt to access beyond end of device
[ 2808.825044] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2808.826344] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2808.934239] syz-executor.4: attempt to access beyond end of device
[ 2808.934239] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2808.935259] Buffer I/O error on dev loop4, logical block 10, lost async page write
14:58:00 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x8, 0x6, 0x6, 0x7, 0x0, 0xfff, 0x92080, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x10001, 0x8001, 0x81, 0x4, 0x7fff, 0x4ae, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x3)
accept4$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
flock(r0, 0x1)

14:58:00 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x294ee128)
shutdown(r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r1, {0x4fa, 0xff}}, './file0\x00'})
ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000180)={'team0\x00', {0x2, 0x0, @multicast2}})
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0x40, 0x9, 0x2})
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})

14:58:00 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:00 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:00 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c", 0xc0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:00 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:00 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2825.093949] loop0: detected capacity change from 0 to 40
[ 2825.119933] loop4: detected capacity change from 0 to 40
14:58:00 executing program 6:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x8, 0x6, 0x6, 0x7, 0x0, 0xfff, 0x92080, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x10001, 0x8001, 0x81, 0x4, 0x7fff, 0x4ae, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r1, 0x3)
accept4$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
flock(r0, 0x1)

[ 2825.149860] loop7: detected capacity change from 0 to 40
[ 2825.157825] loop5: detected capacity change from 0 to 40
[ 2825.169043] loop3: detected capacity change from 0 to 40
14:58:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2825.244808] syz-executor.0: attempt to access beyond end of device
[ 2825.244808] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2825.245838] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2825.265233] syz-executor.4: attempt to access beyond end of device
[ 2825.265233] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2825.266485] Buffer I/O error on dev loop4, logical block 31, lost async page write
14:58:00 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x8, 0x6, 0x6, 0x7, 0x0, 0xfff, 0x92080, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x10001, 0x8001, 0x81, 0x4, 0x7fff, 0x4ae, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x3)
accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:58:00 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x8, 0x6, 0x6, 0x7, 0x0, 0xfff, 0x92080, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x10001, 0x8001, 0x81, 0x4, 0x7fff, 0x4ae, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x3)
accept4$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:01 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2825.462894] syz-executor.7: attempt to access beyond end of device
[ 2825.462894] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2825.463934] Buffer I/O error on dev loop7, logical block 10, lost async page write
14:58:01 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2825.510596] syz-executor.3: attempt to access beyond end of device
[ 2825.510596] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2825.511756] Buffer I/O error on dev loop3, logical block 31, lost async page write
[ 2842.147054] loop3: detected capacity change from 0 to 40
14:58:17 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:17 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:17 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:17 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:17 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:17 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0x100, 0x1c57, 0x4, 0x20, 0x0, 0x4, 0xa86a}, 0xc)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x2, 0x58, 0x6, 0xe1, 0x0, 0x4, 0x410, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x10001}, 0x0, 0xcfef, 0x60000, 0x4, 0x3, 0x31, 0x81, 0x0, 0x201, 0x0, 0x80000001}, 0x0, 0x7, r0, 0xa)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0)
sendfile(r2, r1, &(0x7f0000000340)=0x2, 0x6)
ioctl$sock_ifreq(r1, 0x84, &(0x7f0000000100)={'tunl0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}})
r3 = eventfd2(0x7, 0x80800)
write$binfmt_aout(r3, &(0x7f0000000180)={{0x10b, 0x8, 0xca, 0x2cc, 0x14b, 0x4, 0x37e, 0x401}, "228303374b349b41539fa91392cbb8051e0135e43b2e07e26bea437f1f88ced7a1358b8ca4159a7a45d7aec606b7cd14b6a1f48292a50c53cfcc876726188bba40464955d5a61ba12411bc12b5237146b879c91874a2352b2fa4e9f18731d8a60be62dffe339b371ca7488b6247dd3d7b1d7ded8b4920913dbca0509111f113814f87776c682f018a9233c8b0b4d6deca88d2432a7b0c90d449997bcc4e580cad3afa6e27a2b9466b13b6e99eec286a6398351a869e6983b4e4b5a983acec1c50d3ef148c70956f8"}, 0xe8)

14:58:17 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4", 0xbd, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:17 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x9ff, 0x49038, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000100)}, 0x2800, 0x2a, 0x3, 0x0, 0x2, 0x9, 0x5, 0x0, 0x7}, r1, 0x4, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xffffffffffffff55)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x80, 0x0, 0x4, 0x0, 0xffffffff, 0x20200, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x2, @perf_config_ext={0x8, 0x3ff}, 0x120, 0xfffffffeffffffff, 0xfffffc9f, 0x3, 0x6, 0x400, 0xfffa, 0x0, 0x8f64, 0x0, 0x9}, r1, 0x7, r0, 0xa)
clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
epoll_create(0x7)
getpid()
getpid()
epoll_create(0x4)

[ 2842.208113] loop0: detected capacity change from 0 to 40
[ 2842.215402] loop5: detected capacity change from 0 to 40
14:58:17 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setgroups(0x1, &(0x7f0000000180)=[0x0])
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:17 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2842.472803] loop4: detected capacity change from 0 to 40
14:58:18 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2842.732651] loop7: detected capacity change from 0 to 40
14:58:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2843.074943] syz-executor.0: attempt to access beyond end of device
[ 2843.074943] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2843.076546] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:58:18 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:18 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:18 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2843.315688] loop0: detected capacity change from 0 to 40
[ 2843.384341] syz-executor.3: attempt to access beyond end of device
[ 2843.384341] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2843.390001] Buffer I/O error on dev loop3, logical block 31, lost async page write
14:58:19 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2843.493476] syz-executor.4: attempt to access beyond end of device
[ 2843.493476] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2843.496880] Buffer I/O error on dev loop4, logical block 31, lost async page write
14:58:19 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2844.145950] syz-executor.0: attempt to access beyond end of device
[ 2844.145950] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2844.147124] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2857.568482] loop0: detected capacity change from 0 to 40
[ 2857.568627] loop5: detected capacity change from 0 to 40
[ 2857.570092] loop4: detected capacity change from 0 to 40
14:58:33 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:33 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:33 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:33 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:33 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:33 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:33 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:33 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2857.601585] loop3: detected capacity change from 0 to 40
[ 2857.604889] loop7: detected capacity change from 0 to 40
14:58:33 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2857.735446] syz-executor.4: attempt to access beyond end of device
[ 2857.735446] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2857.737195] Buffer I/O error on dev loop4, logical block 31, lost async page write
14:58:33 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:33 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2857.857058] syz-executor.0: attempt to access beyond end of device
[ 2857.857058] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2857.858267] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:58:33 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:33 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:33 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:33 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:33 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661", 0x93, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2858.139012] loop5: detected capacity change from 0 to 40
[ 2858.146182] loop7: detected capacity change from 0 to 40
[ 2858.256329] syz-executor.7: attempt to access beyond end of device
[ 2858.256329] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2858.258268] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 2858.313677] kworker/u4:9: attempt to access beyond end of device
[ 2858.313677] loop3: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2858.315740] Buffer I/O error on dev loop3, logical block 31, lost async page write
14:58:48 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7011e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x90a0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:58:48 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:48 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa", 0xab, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:48 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0)
linkat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:58:48 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1", 0x62, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:48 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1", 0x62, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2872.813748] loop3: detected capacity change from 0 to 40
[ 2872.872784] loop0: detected capacity change from 0 to 40
[ 2872.879101] loop4: detected capacity change from 0 to 40
14:58:48 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580), 0x0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:48 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2872.975129] syz-executor.3: attempt to access beyond end of device
[ 2872.975129] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2872.977368] Buffer I/O error on dev loop3, logical block 31, lost async page write
14:58:48 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2873.002824] loop5: detected capacity change from 0 to 40
[ 2873.091409] syz-executor.0: attempt to access beyond end of device
[ 2873.091409] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2873.093000] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:58:48 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:48 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:48 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1", 0x62, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2873.226294] loop3: detected capacity change from 0 to 40
14:58:48 executing program 6:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2873.286887] syz-executor.4: attempt to access beyond end of device
[ 2873.286887] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2873.287960] Buffer I/O error on dev loop4, logical block 31, lost async page write
14:58:48 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2873.558859] syz-executor.3: attempt to access beyond end of device
[ 2873.558859] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2873.564759] Buffer I/O error on dev loop3, logical block 31, lost async page write
14:58:49 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:49 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224", 0x54, 0x91}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:49 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580), 0x0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:58:49 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0)
linkat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

14:58:49 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2873.780658] loop5: detected capacity change from 0 to 40
14:58:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:49 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680), 0x0, 0x91}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2873.852046] loop0: detected capacity change from 0 to 40
14:58:49 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2873.904531] loop4: detected capacity change from 0 to 40
14:58:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:58:49 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0)
linkat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

[ 2874.021160] syz-executor.0: attempt to access beyond end of device
[ 2874.021160] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2874.022219] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:58:49 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2874.064634] syz-executor.4: attempt to access beyond end of device
[ 2874.064634] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2874.065787] Buffer I/O error on dev loop4, logical block 31, lost async page write
14:58:49 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2888.004277] loop5: detected capacity change from 0 to 40
14:59:03 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1", 0x62, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:03 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:03 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:03 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224", 0x54, 0x91}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:03 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00') (fail_nth: 1)
epoll_create(0x0)

14:59:03 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580), 0x0, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:03 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2888.007980] loop3: detected capacity change from 0 to 40
[ 2888.039482] loop0: detected capacity change from 0 to 40
[ 2888.043990] loop4: detected capacity change from 0 to 40
14:59:03 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00') (fail_nth: 2)
epoll_create(0x0)

14:59:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:03 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2888.155443] syz-executor.3: attempt to access beyond end of device
[ 2888.155443] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2888.156514] Buffer I/O error on dev loop3, logical block 31, lost async page write
14:59:03 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00') (fail_nth: 3)
epoll_create(0x0)

14:59:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2888.239871] FAULT_INJECTION: forcing a failure.
[ 2888.239871] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2888.241973] CPU: 0 PID: 37439 Comm: syz-executor.7 Not tainted 6.2.0-next-20230303 #1
[ 2888.243077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2888.244105] Call Trace:
[ 2888.244458]  <TASK>
[ 2888.244798]  dump_stack_lvl+0xc1/0xf0
[ 2888.245322]  should_fail_ex+0x4b4/0x5b0
[ 2888.245870]  _copy_from_user+0x2e/0x180
[ 2888.246418]  memdup_user+0x72/0xd0
[ 2888.246907]  strndup_user+0x78/0xe0
[ 2888.247388]  _perf_ioctl+0x4ae/0x2210
[ 2888.247884]  ? trace_contention_end+0xfc/0x140
[ 2888.248677]  ? __mutex_lock+0x224/0x14a0
[ 2888.249260]  ? __pfx__perf_ioctl+0x10/0x10
[ 2888.249808]  ? find_held_lock+0x2c/0x110
[ 2888.250359]  ? __pfx___mutex_lock+0x10/0x10
[ 2888.250918]  ? lock_release+0x1e3/0x710
[ 2888.251537]  ? __pfx_lock_release+0x10/0x10
[ 2888.252124]  ? trace_lock_acquire+0x170/0x1e0
[ 2888.252481] syz-executor.4: attempt to access beyond end of device
[ 2888.252481] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2888.252792]  ? perf_event_ctx_lock_nested+0x8d/0x4e0
[ 2888.252863]  ? lock_acquire+0x32/0xc0
[ 2888.253722] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2888.254436]  ? perf_event_ctx_lock_nested+0x8d/0x4e0
[ 2888.254504]  ? perf_event_ctx_lock_nested+0x3d7/0x4e0
[ 2888.257283]  ? __pfx_perf_event_ctx_lock_nested+0x10/0x10
[ 2888.258173]  ? __pfx_perf_ioctl+0x10/0x10
[ 2888.258769]  perf_ioctl+0x7a/0xb0
[ 2888.259271]  __x64_sys_ioctl+0x19e/0x210
[ 2888.259943]  do_syscall_64+0x3f/0x90
[ 2888.260475]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2888.261287] RIP: 0033:0x7f5936b59b19
[ 2888.261858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2888.264110] RSP: 002b:00007f59340cf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2888.265096] RAX: ffffffffffffffda RBX: 00007f5936c6cf60 RCX: 00007f5936b59b19
[ 2888.266018] RDX: 0000000020000240 RSI: 0000000040082406 RDI: 0000000000000003
[ 2888.266915] RBP: 00007f59340cf1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2888.267795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2888.268693] R13: 00007ffde9ac214f R14: 00007f59340cf300 R15: 0000000000022000
[ 2888.269675]  </TASK>
14:59:03 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:03 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:03 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 2888.485201] syz-executor.0: attempt to access beyond end of device
[ 2888.485201] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2888.486370] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:59:21 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 1)

14:59:21 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:21 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 1)

14:59:21 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

14:59:21 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:21 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00') (fail_nth: 1)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

14:59:21 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224", 0x54, 0x91}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 2905.490257] FAULT_INJECTION: forcing a failure.
[ 2905.490257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2905.491787] CPU: 1 PID: 37756 Comm: syz-executor.3 Not tainted 6.2.0-next-20230303 #1
[ 2905.492752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2905.492763] FAULT_INJECTION: forcing a failure.
[ 2905.492763] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2905.493727] Call Trace:
[ 2905.493737]  <TASK>
[ 2905.493748]  dump_stack_lvl+0xc1/0xf0
[ 2905.493787]  should_fail_ex+0x4b4/0x5b0
[ 2905.496719]  _copy_from_user+0x2e/0x180
[ 2905.497248]  copy_msghdr_from_user+0x89/0x150
[ 2905.497830]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2905.498472]  ? kstrtouint+0xd6/0x130
[ 2905.498950]  ? perf_trace_lock+0xc1/0x480
[ 2905.499476]  ? __pfx___lock_acquire+0x10/0x10
[ 2905.500076]  ? perf_trace_lock+0xc1/0x480
[ 2905.500599]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2905.501221]  ___sys_sendmsg+0xdd/0x1b0
[ 2905.501739]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2905.502319]  ? __fget_files+0x24e/0x480
[ 2905.502848]  ? lock_release+0x1e3/0x710
[ 2905.503383]  ? __pfx_lock_release+0x10/0x10
[ 2905.503957]  ? trace_lock_acquire+0x170/0x1e0
[ 2905.504556]  ? __pfx___fget_files+0x10/0x10
[ 2905.505115]  ? lock_acquire+0x32/0xc0
[ 2905.505604]  ? __pfx___fget_files+0x10/0x10
[ 2905.506176]  ? __fget_files+0x270/0x480
[ 2905.506716]  ? __fget_light+0xe5/0x280
[ 2905.507239]  __sys_sendmsg+0xf7/0x1d0
[ 2905.507724]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2905.508285]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2905.509026]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2905.509780]  ? fput+0x2f/0x1a0
[ 2905.510213]  ? ksys_write+0x1a7/0x260
[ 2905.510693]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2905.511358]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2905.512046]  do_syscall_64+0x3f/0x90
[ 2905.512537]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2905.513194] RIP: 0033:0x7ffbb2ce8b19
[ 2905.513677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2905.515835] RSP: 002b:00007ffbb025e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2905.516750] RAX: ffffffffffffffda RBX: 00007ffbb2dfbf60 RCX: 00007ffbb2ce8b19
[ 2905.517646] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 2905.518499] RBP: 00007ffbb025e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2905.519367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2905.520217] R13: 00007ffe5fef49df R14: 00007ffbb025e300 R15: 0000000000022000
[ 2905.521120]  </TASK>
[ 2905.521428] CPU: 0 PID: 37757 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 2905.522426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2905.523434] Call Trace:
[ 2905.523780]  <TASK>
[ 2905.524090]  dump_stack_lvl+0xc1/0xf0
[ 2905.524598]  should_fail_ex+0x4b4/0x5b0
[ 2905.525150]  _copy_from_user+0x2e/0x180
[ 2905.525692]  move_addr_to_kernel.part.0+0x31/0x110
[ 2905.526340]  __sys_sendto+0x187/0x340
[ 2905.526858]  ? __pfx___sys_sendto+0x10/0x10
[ 2905.527438]  ? rcu_read_lock_any_held+0x79/0xa0
[ 2905.528080]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2905.528780]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2905.529562]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2905.530333]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2905.531107]  ? fput+0x2f/0x1a0
[ 2905.531567]  ? ksys_write+0x1a7/0x260
[ 2905.532104]  __x64_sys_sendto+0xe1/0x1c0
[ 2905.532671]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2905.533362]  do_syscall_64+0x3f/0x90
[ 2905.533856]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2905.534508] RIP: 0033:0x7f78572f58ac
[ 2905.534986] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2905.537254] RSP: 002b:00007f78548b7020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2905.538233] RAX: ffffffffffffffda RBX: 00007f78548b7110 RCX: 00007f78572f58ac
[ 2905.539160] RDX: 0000000000000020 RSI: 00007f78548b7160 RDI: 0000000000000004
[ 2905.540069] RBP: 0000000000000000 R08: 00007f78548b7074 R09: 000000000000000c
[ 2905.540972] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f78548b70c8
[ 2905.541839] R13: 00007f78548b7160 R14: 0000000000000004 R15: 0000000000000000
[ 2905.542758]  </TASK>
[ 2905.555170] loop0: detected capacity change from 0 to 40
14:59:21 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00') (fail_nth: 2)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

14:59:21 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:21 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2400, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

14:59:21 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 2)

14:59:21 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 2)

14:59:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00') (fail_nth: 3)
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

14:59:21 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2905.979809] FAULT_INJECTION: forcing a failure.
[ 2905.979809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2905.981337] CPU: 1 PID: 38030 Comm: syz-executor.3 Not tainted 6.2.0-next-20230303 #1
[ 2905.982321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2905.983338] Call Trace:
[ 2905.983672]  <TASK>
[ 2905.983972]  dump_stack_lvl+0xc1/0xf0
[ 2905.984479]  should_fail_ex+0x4b4/0x5b0
[ 2905.985016]  _copy_from_user+0x2e/0x180
[ 2905.985562]  iovec_from_user+0x23e/0x3c0
[ 2905.986108]  __import_iovec+0x68/0x600
[ 2905.986626]  ? __might_fault+0xa9/0x180
[ 2905.987152]  ? lock_acquire+0x32/0xc0
[ 2905.987643]  ? __might_fault+0xa9/0x180
[ 2905.988180]  import_iovec+0x87/0xb0
[ 2905.988685]  copy_msghdr_from_user+0xed/0x150
[ 2905.989296]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2905.989944]  ? kstrtouint+0xd6/0x130
[ 2905.990436]  ? perf_trace_lock+0xc1/0x480
[ 2905.990979]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2905.991565]  ___sys_sendmsg+0xdd/0x1b0
[ 2905.992075]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2905.992654]  ? __fget_files+0x24e/0x480
[ 2905.993191]  ? lock_release+0x1e3/0x710
[ 2905.993730]  ? __pfx_lock_release+0x10/0x10
[ 2905.994300]  ? trace_lock_acquire+0x170/0x1e0
[ 2905.994898]  ? __pfx___fget_files+0x10/0x10
[ 2905.995456]  ? lock_acquire+0x32/0xc0
[ 2905.995951]  ? __pfx___fget_files+0x10/0x10
[ 2905.996524]  ? __fget_files+0x270/0x480
[ 2905.997084]  ? __fget_light+0xe5/0x280
[ 2905.997616]  __sys_sendmsg+0xf7/0x1d0
[ 2905.998112]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2905.998682]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2905.999379]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2906.000100]  do_syscall_64+0x3f/0x90
[ 2906.000416] FAULT_INJECTION: forcing a failure.
[ 2906.000416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2906.000587]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2906.002661] RIP: 0033:0x7ffbb2ce8b19
[ 2906.003143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2906.005373] RSP: 002b:00007ffbb025e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2906.006314] RAX: ffffffffffffffda RBX: 00007ffbb2dfbf60 RCX: 00007ffbb2ce8b19
[ 2906.007191] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 2906.008075] RBP: 00007ffbb025e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2906.008967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2906.009850] R13: 00007ffe5fef49df R14: 00007ffbb025e300 R15: 0000000000022000
[ 2906.010754]  </TASK>
[ 2906.011064] CPU: 0 PID: 38052 Comm: syz-executor.5 Not tainted 6.2.0-next-20230303 #1
[ 2906.012090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2906.013133] Call Trace:
[ 2906.013479]  <TASK>
[ 2906.013796]  dump_stack_lvl+0xc1/0xf0
[ 2906.014319]  should_fail_ex+0x4b4/0x5b0
[ 2906.014877]  _copy_from_user+0x2e/0x180
[ 2906.015425]  memdup_user+0x72/0xd0
[ 2906.015915]  strndup_user+0x78/0xe0
[ 2906.016412]  _perf_ioctl+0x4ae/0x2210
[ 2906.016945]  ? trace_contention_end+0xfc/0x140
[ 2906.017557]  ? __mutex_lock+0x224/0x14a0
[ 2906.018117]  ? __pfx__perf_ioctl+0x10/0x10
[ 2906.018687]  ? find_held_lock+0x2c/0x110
[ 2906.019243]  ? __pfx___mutex_lock+0x10/0x10
[ 2906.019816]  ? lock_release+0x1e3/0x710
[ 2906.020370]  ? __pfx_lock_release+0x10/0x10
[ 2906.020962]  ? trace_lock_acquire+0x170/0x1e0
[ 2906.021603]  ? perf_event_ctx_lock_nested+0x8d/0x4e0
[ 2906.022290]  ? lock_acquire+0x32/0xc0
[ 2906.022809]  ? perf_event_ctx_lock_nested+0x8d/0x4e0
[ 2906.023520]  ? perf_event_ctx_lock_nested+0x3d7/0x4e0
[ 2906.024228]  ? __pfx_perf_event_ctx_lock_nested+0x10/0x10
[ 2906.025001]  ? __pfx_perf_ioctl+0x10/0x10
[ 2906.025582]  perf_ioctl+0x7a/0xb0
[ 2906.026078]  __x64_sys_ioctl+0x19e/0x210
[ 2906.026662]  do_syscall_64+0x3f/0x90
[ 2906.027194]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2906.027896] RIP: 0033:0x7f33ebbe6b19
[ 2906.028409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2906.030781] RSP: 002b:00007f33e915c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2906.031814] RAX: ffffffffffffffda RBX: 00007f33ebcf9f60 RCX: 00007f33ebbe6b19
[ 2906.032756] RDX: 0000000020000240 RSI: 0000000040082406 RDI: 0000000000000003
[ 2906.033696] RBP: 00007f33e915c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2906.034629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2906.035575] R13: 00007ffe3675aa3f R14: 00007f33e915c300 R15: 0000000000022000
[ 2906.036497]  </TASK>
[ 2906.062146] FAULT_INJECTION: forcing a failure.
[ 2906.062146] name failslab, interval 1, probability 0, space 0, times 0
[ 2906.063771] CPU: 0 PID: 38068 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 2906.064756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2906.065774] Call Trace:
[ 2906.066110]  <TASK>
[ 2906.066412]  dump_stack_lvl+0xc1/0xf0
[ 2906.066924]  should_fail_ex+0x4b4/0x5b0
[ 2906.067459]  ? __alloc_skb+0x28c/0x330
[ 2906.067986]  should_failslab+0x9/0x20
[ 2906.068487]  kmem_cache_alloc_node+0x5d/0x330
[ 2906.069125]  __alloc_skb+0x28c/0x330
[ 2906.069657]  ? __pfx___alloc_skb+0x10/0x10
[ 2906.070293]  netlink_sendmsg+0x9ac/0xe30
[ 2906.070866]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2906.071489]  ? __might_fault+0xa9/0x180
[ 2906.072074]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2906.072655]  sock_sendmsg+0x1b6/0x200
[ 2906.073194]  __sys_sendto+0x23a/0x340
[ 2906.073717]  ? __pfx___sys_sendto+0x10/0x10
[ 2906.074311]  ? rcu_read_lock_any_held+0x79/0xa0
[ 2906.074956]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2906.075700]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2906.076501]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2906.077308]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2906.078081]  ? fput+0x2f/0x1a0
[ 2906.078548]  ? ksys_write+0x1a7/0x260
[ 2906.079095]  __x64_sys_sendto+0xe1/0x1c0
[ 2906.079671]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2906.080364]  do_syscall_64+0x3f/0x90
[ 2906.080877]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2906.081558] RIP: 0033:0x7f78572f58ac
[ 2906.082037] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2906.084289] RSP: 002b:00007f78548b7020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2906.085294] RAX: ffffffffffffffda RBX: 00007f78548b7110 RCX: 00007f78572f58ac
[ 2906.086216] RDX: 0000000000000020 RSI: 00007f78548b7160 RDI: 0000000000000004
[ 2906.087150] RBP: 0000000000000000 R08: 00007f78548b7074 R09: 000000000000000c
[ 2906.088094] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f78548b70c8
[ 2906.089031] R13: 00007f78548b7160 R14: 0000000000000004 R15: 0000000000000000
[ 2906.089983]  </TASK>
[ 2906.387250] syz-executor.0: attempt to access beyond end of device
[ 2906.387250] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2906.389015] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:59:36 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:36 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) (fail_nth: 1)

14:59:36 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2401, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

14:59:36 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2921.340645] loop0: detected capacity change from 0 to 40
14:59:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 3)

14:59:36 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 3)

14:59:36 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

[ 2921.378162] FAULT_INJECTION: forcing a failure.
[ 2921.378162] name failslab, interval 1, probability 0, space 0, times 0
[ 2921.379694] CPU: 1 PID: 38207 Comm: syz-executor.3 Not tainted 6.2.0-next-20230303 #1
[ 2921.380789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2921.381794] Call Trace:
[ 2921.382124]  <TASK>
[ 2921.382421]  dump_stack_lvl+0xc1/0xf0
[ 2921.382920]  should_fail_ex+0x4b4/0x5b0
[ 2921.383444]  ? __alloc_skb+0x28c/0x330
[ 2921.383953]  should_failslab+0x9/0x20
[ 2921.384447]  kmem_cache_alloc_node+0x5d/0x330
[ 2921.385027]  __alloc_skb+0x28c/0x330
[ 2921.385530]  ? __pfx___alloc_skb+0x10/0x10
[ 2921.386077]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 2921.386768]  netlink_sendmsg+0x9ac/0xe30
[ 2921.387311]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2921.387919]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2921.388513]  sock_sendmsg+0x1b6/0x200
[ 2921.389032]  ____sys_sendmsg+0x74e/0x980
[ 2921.389599]  ? copy_msghdr_from_user+0xfc/0x150
[ 2921.390218]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2921.390823]  ? kstrtouint+0xd6/0x130
[ 2921.391326]  ? perf_trace_lock+0xc1/0x480
[ 2921.391871]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2921.392474]  ___sys_sendmsg+0x110/0x1b0
[ 2921.393081]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2921.393792]  ? __fget_files+0x24e/0x480
[ 2921.394396]  ? __pfx_lock_release+0x10/0x10
[ 2921.394976]  ? trace_lock_acquire+0x170/0x1e0
[ 2921.395584]  ? __pfx___fget_files+0x10/0x10
[ 2921.396149]  ? lock_acquire+0x32/0xc0
[ 2921.396651]  ? __pfx___fget_files+0x10/0x10
[ 2921.397249]  ? __fget_files+0x270/0x480
[ 2921.397787]  ? __fget_light+0xe5/0x280
[ 2921.398318]  __sys_sendmsg+0xf7/0x1d0
[ 2921.398827]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2921.399430]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2921.400107]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2921.400801]  do_syscall_64+0x3f/0x90
[ 2921.401307]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2921.401976] RIP: 0033:0x7ffbb2ce8b19
[ 2921.402464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2921.404729] RSP: 002b:00007ffbb025e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2921.405693] RAX: ffffffffffffffda RBX: 00007ffbb2dfbf60 RCX: 00007ffbb2ce8b19
[ 2921.406593] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 2921.407497] RBP: 00007ffbb025e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2921.408399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2921.409321] R13: 00007ffe5fef49df R14: 00007ffbb025e300 R15: 0000000000022000
[ 2921.410243]  </TASK>
14:59:37 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

14:59:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:37 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 4)

14:59:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

14:59:37 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2402, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

14:59:37 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 4)

14:59:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2922.042741] syz-executor.0: attempt to access beyond end of device
[ 2922.042741] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2922.047762] Buffer I/O error on dev loop0, logical block 31, lost async page write
14:59:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 5)

14:59:52 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2937.185685] loop0: detected capacity change from 0 to 40
14:59:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

14:59:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

14:59:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2400, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

14:59:52 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2403, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

14:59:52 executing program 2:
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000180)={'veth1_to_batadv\x00', {0x2, 0x0, @initdev}})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x2)
ioctl$int_out(r0, 0x2, &(0x7f0000000080))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000140), &(0x7f0000000100)=0x10)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
fallocate(r4, 0x0, 0x0, 0x87ffffc)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.events\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000640))
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000000c0)=@generic={0x0, 0x1, 0x4})

14:59:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 5)

14:59:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 6)

[ 2937.300774] FAULT_INJECTION: forcing a failure.
[ 2937.300774] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2937.301618] CPU: 0 PID: 38687 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 2937.302138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2937.302665] Call Trace:
[ 2937.302845]  <TASK>
[ 2937.303004]  dump_stack_lvl+0xc1/0xf0
[ 2937.303283]  should_fail_ex+0x4b4/0x5b0
[ 2937.303574]  copyin+0x19/0x120
[ 2937.303816]  _copy_from_iter+0x37a/0x1140
[ 2937.304120]  ? __build_skb_around+0x276/0x3a0
[ 2937.304439]  ? __pfx__copy_from_iter+0x10/0x10
[ 2937.304766]  ? __pfx___alloc_skb+0x10/0x10
[ 2937.305070]  ? __virt_addr_valid+0x102/0x340
[ 2937.305418]  ? __check_object_size+0x3e4/0x860
[ 2937.305771]  netlink_sendmsg+0x880/0xe30
[ 2937.306082]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2937.306395]  ? __might_fault+0xa9/0x180
[ 2937.306709]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2937.307036]  sock_sendmsg+0x1b6/0x200
[ 2937.307321]  __sys_sendto+0x23a/0x340
[ 2937.307627]  ? __pfx___sys_sendto+0x10/0x10
[ 2937.307932]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 2937.308300]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2937.308655]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2937.309069]  ? __pfx_lapic_next_deadline+0x10/0x10
[ 2937.309428]  ? clockevents_program_event+0x135/0x360
[ 2937.309801]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2937.310218]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2937.310629]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2937.311054]  __x64_sys_sendto+0xe1/0x1c0
[ 2937.311352]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2937.311701]  do_syscall_64+0x3f/0x90
[ 2937.311966]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2937.312327] RIP: 0033:0x7f78572f58ac
[ 2937.312584] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2937.313835] RSP: 002b:00007f78548b7020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2937.314355] RAX: ffffffffffffffda RBX: 00007f78548b7110 RCX: 00007f78572f58ac
[ 2937.314851] RDX: 0000000000000020 RSI: 00007f78548b7160 RDI: 0000000000000004
[ 2937.315360] RBP: 0000000000000000 R08: 00007f78548b7074 R09: 000000000000000c
[ 2937.315862] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f78548b70c8
[ 2937.316370] R13: 00007f78548b7160 R14: 0000000000000004 R15: 0000000000000000
[ 2937.316909]  </TASK>
[ 2937.429250] syz-executor.0: attempt to access beyond end of device
[ 2937.429250] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2937.430450] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2952.025855] loop0: detected capacity change from 0 to 40
15:00:07 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 6)

15:00:07 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:07 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240)}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:00:07 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
fcntl$setflags(r0, 0x2, 0x0)
r1 = socket(0x6, 0x4, 0x3)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0xffffffffffffff5d)

15:00:07 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:07 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 7)

15:00:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2401, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:00:07 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:00:07 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2952.117495] FAULT_INJECTION: forcing a failure.
[ 2952.117495] name failslab, interval 1, probability 0, space 0, times 0
[ 2952.118542] CPU: 1 PID: 38871 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 2952.119175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2952.119825] Call Trace:
[ 2952.120044]  <TASK>
[ 2952.120244]  dump_stack_lvl+0xc1/0xf0
[ 2952.120577]  should_fail_ex+0x4b4/0x5b0
[ 2952.120958]  should_failslab+0x9/0x20
[ 2952.121288]  __kmem_cache_alloc_node+0x5b/0x310
[ 2952.121724]  ? rtnl_newlink+0x4a/0xa0
[ 2952.122061]  ? trace_lock_acquire+0x170/0x1e0
[ 2952.122488]  kmalloc_trace+0x26/0x120
[ 2952.122817]  rtnl_newlink+0x4a/0xa0
[ 2952.123163]  ? __pfx_rtnl_newlink+0x10/0x10
[ 2952.123537]  rtnetlink_rcv_msg+0x43f/0xd60
[ 2952.123940]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2952.124350]  ? perf_trace_lock+0xc1/0x480
[ 2952.124729]  ? __pfx___lock_acquire+0x10/0x10
[ 2952.125127]  ? __pfx___lock_acquire+0x10/0x10
[ 2952.125554]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2952.125943]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2952.126366]  netlink_rcv_skb+0x15d/0x450
[ 2952.126716]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2952.127129]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2952.127572]  ? netlink_deliver_tap+0x1b2/0xcc0
[ 2952.127997]  ? is_vmalloc_addr+0x86/0xa0
[ 2952.128356]  netlink_unicast+0x552/0x800
[ 2952.128735]  ? __pfx_netlink_unicast+0x10/0x10
[ 2952.129121]  ? __virt_addr_valid+0x102/0x340
[ 2952.129558]  netlink_sendmsg+0x923/0xe30
[ 2952.129908]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2952.130292]  ? __might_fault+0xa9/0x180
[ 2952.130678]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2952.131061]  sock_sendmsg+0x1b6/0x200
[ 2952.131420]  __sys_sendto+0x23a/0x340
[ 2952.131755]  ? __pfx___sys_sendto+0x10/0x10
[ 2952.132161]  ? rcu_read_lock_any_held+0x79/0xa0
[ 2952.132571]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2952.133066]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2952.133559]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2952.134081]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2952.134562]  ? fput+0x2f/0x1a0
[ 2952.134871]  ? ksys_write+0x1a7/0x260
[ 2952.135205]  __x64_sys_sendto+0xe1/0x1c0
[ 2952.135589]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2952.136011]  do_syscall_64+0x3f/0x90
[ 2952.136361]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2952.136794] RIP: 0033:0x7f78572f58ac
[ 2952.137131] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2952.138556] RSP: 002b:00007f78548b7020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2952.139214] RAX: ffffffffffffffda RBX: 00007f78548b7110 RCX: 00007f78572f58ac
[ 2952.139783] RDX: 0000000000000020 RSI: 00007f78548b7160 RDI: 0000000000000004
[ 2952.140350] RBP: 0000000000000000 R08: 00007f78548b7074 R09: 000000000000000c
[ 2952.140917] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f78548b70c8
[ 2952.141504] R13: 00007f78548b7160 R14: 0000000000000004 R15: 0000000000000000
[ 2952.142095]  </TASK>
15:00:07 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:07 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:07 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r1 = syz_io_uring_complete(0x0)
getsockopt(r1, 0x8, 0x5, &(0x7f0000000000)=""/201, &(0x7f0000000100)=0xc9)

15:00:07 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 7)

15:00:07 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 8)

[ 2952.352227] FAULT_INJECTION: forcing a failure.
[ 2952.352227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2952.353767] CPU: 0 PID: 39191 Comm: syz-executor.3 Not tainted 6.2.0-next-20230303 #1
[ 2952.354767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2952.355790] Call Trace:
[ 2952.356135]  <TASK>
[ 2952.356445]  dump_stack_lvl+0xc1/0xf0
[ 2952.356965]  should_fail_ex+0x4b4/0x5b0
[ 2952.357558]  copyin+0x19/0x120
[ 2952.358025]  _copy_from_iter+0x37a/0x1140
[ 2952.358578]  ? __build_skb_around+0x276/0x3a0
[ 2952.359202]  ? __pfx__copy_from_iter+0x10/0x10
[ 2952.359795]  ? __pfx___alloc_skb+0x10/0x10
[ 2952.360373]  ? __netlink_dump_start+0x8c0/0x910
[ 2952.360983]  ? __virt_addr_valid+0x102/0x340
[ 2952.361612]  ? __check_object_size+0x3e4/0x860
[ 2952.362218]  netlink_sendmsg+0x880/0xe30
[ 2952.362795]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2952.363400]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2952.364016]  sock_sendmsg+0x1b6/0x200
[ 2952.364523]  ____sys_sendmsg+0x74e/0x980
[ 2952.365086]  ? copy_msghdr_from_user+0xfc/0x150
[ 2952.365720]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2952.366381]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2952.366987]  ? perf_trace_lock+0x2d5/0x480
[ 2952.367577]  ___sys_sendmsg+0x110/0x1b0
[ 2952.368128]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2952.368744]  ? __fget_files+0x24e/0x480
[ 2952.369306]  ? __pfx_lock_release+0x10/0x10
[ 2952.369932]  ? trace_lock_acquire+0x170/0x1e0
[ 2952.370555]  ? __pfx___fget_files+0x10/0x10
[ 2952.371141]  ? lock_acquire+0x32/0xc0
[ 2952.371651]  ? __pfx___fget_files+0x10/0x10
[ 2952.372258]  ? __fget_files+0x270/0x480
[ 2952.372831]  ? __fget_light+0xe5/0x280
[ 2952.373384]  __sys_sendmsg+0xf7/0x1d0
[ 2952.373914]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2952.374553]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2952.375241]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2952.375962]  do_syscall_64+0x3f/0x90
[ 2952.376474]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2952.377155] RIP: 0033:0x7ffbb2ce8b19
[ 2952.377648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2952.379890] RSP: 002b:00007ffbb025e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2952.380843] RAX: ffffffffffffffda RBX: 00007ffbb2dfbf60 RCX: 00007ffbb2ce8b19
[ 2952.381771] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 2952.382676] RBP: 00007ffbb025e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2952.383591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2952.384490] R13: 00007ffe5fef49df R14: 00007ffbb025e300 R15: 0000000000022000
[ 2952.385426]  </TASK>
15:00:07 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2952.388366] syz-executor.0: attempt to access beyond end of device
[ 2952.388366] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2952.390315] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:00:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2402, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:00:22 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4b47, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:00:22 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240)}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:00:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2403, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:00:22 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 9)

15:00:22 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:22 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:00:22 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 8)

[ 2967.364889] loop0: detected capacity change from 0 to 40
15:00:22 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

[ 2967.387519] FAULT_INJECTION: forcing a failure.
[ 2967.387519] name failslab, interval 1, probability 0, space 0, times 0
[ 2967.388389] CPU: 0 PID: 39466 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 2967.388919] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2967.389460] Call Trace:
[ 2967.389642]  <TASK>
[ 2967.389824]  dump_stack_lvl+0xc1/0xf0
[ 2967.390102]  should_fail_ex+0x4b4/0x5b0
[ 2967.390395]  ? __alloc_skb+0x28c/0x330
[ 2967.390675]  should_failslab+0x9/0x20
[ 2967.390951]  kmem_cache_alloc_node+0x5d/0x330
[ 2967.391271]  __alloc_skb+0x28c/0x330
[ 2967.391547]  ? __pfx___alloc_skb+0x10/0x10
[ 2967.391857]  ? rtnl_newlink+0x73/0xa0
[ 2967.392135]  ? __kmem_cache_free+0xd1/0x2f0
[ 2967.392453]  netlink_ack+0x35e/0x1370
[ 2967.392728]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2967.393066]  ? __pfx_netlink_ack+0x10/0x10
[ 2967.393376]  netlink_rcv_skb+0x35a/0x450
[ 2967.393668]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2967.394015]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2967.394373]  ? netlink_deliver_tap+0x1b2/0xcc0
[ 2967.394700]  ? is_vmalloc_addr+0x86/0xa0
[ 2967.394996]  netlink_unicast+0x552/0x800
[ 2967.395289]  ? __pfx_netlink_unicast+0x10/0x10
[ 2967.395602]  ? __virt_addr_valid+0x102/0x340
[ 2967.395927]  netlink_sendmsg+0x923/0xe30
[ 2967.396222]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2967.396557]  ? __might_fault+0xa9/0x180
[ 2967.396866]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2967.397202]  sock_sendmsg+0x1b6/0x200
[ 2967.397483]  __sys_sendto+0x23a/0x340
[ 2967.397782]  ? __pfx___sys_sendto+0x10/0x10
[ 2967.398108]  ? rcu_read_lock_any_held+0x79/0xa0
[ 2967.398464]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2967.398861]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2967.399266]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2967.399683]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2967.400085]  ? fput+0x2f/0x1a0
[ 2967.400341]  ? ksys_write+0x1a7/0x260
[ 2967.400616]  __x64_sys_sendto+0xe1/0x1c0
[ 2967.400929]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2967.401289]  do_syscall_64+0x3f/0x90
[ 2967.401572]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2967.401967] RIP: 0033:0x7f78572f58ac
[ 2967.402243] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2967.403522] RSP: 002b:00007f78548b7020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2967.404063] RAX: ffffffffffffffda RBX: 00007f78548b7110 RCX: 00007f78572f58ac
[ 2967.404566] RDX: 0000000000000020 RSI: 00007f78548b7160 RDI: 0000000000000004
[ 2967.405068] RBP: 0000000000000000 R08: 00007f78548b7074 R09: 000000000000000c
[ 2967.405569] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f78548b70c8
[ 2967.406081] R13: 00007f78548b7160 R14: 0000000000000004 R15: 0000000000000000
[ 2967.406612]  </TASK>
[ 2967.435667] FAULT_INJECTION: forcing a failure.
[ 2967.435667] name failslab, interval 1, probability 0, space 0, times 0
[ 2967.437324] CPU: 1 PID: 39499 Comm: syz-executor.3 Not tainted 6.2.0-next-20230303 #1
[ 2967.438277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2967.439260] Call Trace:
[ 2967.439592]  <TASK>
[ 2967.439886]  dump_stack_lvl+0xc1/0xf0
[ 2967.440376]  should_fail_ex+0x4b4/0x5b0
[ 2967.440907]  ? __alloc_skb+0x28c/0x330
[ 2967.441433]  should_failslab+0x9/0x20
[ 2967.441952]  kmem_cache_alloc_node+0x5d/0x330
[ 2967.442542]  __alloc_skb+0x28c/0x330
[ 2967.443027]  ? __netlink_dump_start+0x16e/0x910
[ 2967.443629]  ? __pfx___alloc_skb+0x10/0x10
[ 2967.444170]  ? lock_is_held_type+0x9f/0x120
[ 2967.444709]  ? __netlink_dump_start+0x64a/0x910
[ 2967.445316]  netlink_dump+0x743/0x1070
[ 2967.445849]  ? trace_contention_end+0xfc/0x140
[ 2967.446422]  ? __mutex_lock+0x224/0x14a0
[ 2967.446926]  ? __pfx_netlink_dump+0x10/0x10
[ 2967.447503]  ? netlink_lookup+0x25e/0x4f0
[ 2967.448038]  ? __pfx_netlink_lookup+0x10/0x10
[ 2967.448615]  ? __pfx_lock_release+0x10/0x10
[ 2967.449159]  ? trace_lock_acquire+0x170/0x1e0
[ 2967.449741]  __netlink_dump_start+0x652/0x910
[ 2967.450371]  rtnetlink_rcv_msg+0x767/0xd60
[ 2967.450902]  ? __pfx_rtnl_dump_all+0x10/0x10
[ 2967.451456]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2967.452051]  ? perf_trace_lock+0xc1/0x480
[ 2967.452576]  ? __pfx_rtnl_dump_all+0x10/0x10
[ 2967.453162]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2967.453757]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2967.454325]  netlink_rcv_skb+0x15d/0x450
[ 2967.454832]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 2967.455425]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2967.456029]  ? netlink_deliver_tap+0x1b2/0xcc0
[ 2967.456616]  ? is_vmalloc_addr+0x86/0xa0
[ 2967.457155]  netlink_unicast+0x552/0x800
[ 2967.457698]  ? __pfx_netlink_unicast+0x10/0x10
[ 2967.458262]  ? __virt_addr_valid+0x102/0x340
[ 2967.458830]  netlink_sendmsg+0x923/0xe30
[ 2967.459355]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2967.459945]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2967.460529]  sock_sendmsg+0x1b6/0x200
[ 2967.461026]  ____sys_sendmsg+0x74e/0x980
[ 2967.461540]  ? copy_msghdr_from_user+0xfc/0x150
[ 2967.462123]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2967.462701]  ? kstrtouint+0xd6/0x130
[ 2967.463171]  ? perf_trace_lock+0xc1/0x480
[ 2967.463699]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2967.464314]  ___sys_sendmsg+0x110/0x1b0
[ 2967.464828]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2967.465427]  ? __fget_files+0x24e/0x480
[ 2967.465982]  ? __pfx_lock_release+0x10/0x10
[ 2967.466569]  ? trace_lock_acquire+0x170/0x1e0
[ 2967.467169]  ? __pfx___fget_files+0x10/0x10
[ 2967.467748]  ? lock_acquire+0x32/0xc0
[ 2967.468244]  ? __pfx___fget_files+0x10/0x10
[ 2967.468828]  ? __fget_files+0x270/0x480
[ 2967.469374]  ? __fget_light+0xe5/0x280
[ 2967.469920]  __sys_sendmsg+0xf7/0x1d0
[ 2967.470431]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2967.471041]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2967.471723]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2967.472440]  do_syscall_64+0x3f/0x90
[ 2967.472941]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2967.473624] RIP: 0033:0x7ffbb2ce8b19
[ 2967.474125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2967.476382] RSP: 002b:00007ffbb025e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2967.477340] RAX: ffffffffffffffda RBX: 00007ffbb2dfbf60 RCX: 00007ffbb2ce8b19
[ 2967.478254] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[ 2967.479162] RBP: 00007ffbb025e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2967.480071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2967.480979] R13: 00007ffe5fef49df R14: 00007ffbb025e300 R15: 0000000000022000
[ 2967.481920]  </TASK>
15:00:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4b49, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:00:23 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:00:23 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:23 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 10)

15:00:23 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1, 0x4000}], 0x2000000000000240, 0x7a6)
shutdown(r1, 0x0)
socketpair(0x29, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast1}})
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:00:23 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000)

15:00:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 2967.802138] syz-executor.0: attempt to access beyond end of device
[ 2967.802138] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2967.803549] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:00:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:00:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 9)

15:00:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:40 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 11)

15:00:40 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5421, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:00:40 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240)}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:00:40 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

15:00:40 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000)

[ 2985.145654] loop0: detected capacity change from 0 to 40
15:00:40 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 12)

15:00:40 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r1, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r1, r1, 0x0, 0x100000)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x15da, @none, 0x7f, 0x2}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:00:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 10)

15:00:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000)

15:00:57 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:00:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4b47, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:00:57 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:57 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 13)

15:00:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5450, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:00:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 11)

15:00:57 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x81, 0x20, 0x0, 0x40, 0x0, 0x5, 0x40010, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x200, 0x5, 0xc014, 0x6, 0x3, 0x8, 0x1000, 0x0, 0x0, 0x0, 0x3}, r0, 0x7, 0xffffffffffffffff, 0x4)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x8, 0x7, 0xffff, 0x7d})
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

[ 3001.696689] loop0: detected capacity change from 0 to 40
[ 3001.751333] FAULT_INJECTION: forcing a failure.
[ 3001.751333] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3001.752859] CPU: 1 PID: 40323 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 3001.753812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3001.754788] Call Trace:
[ 3001.755106]  <TASK>
[ 3001.755401]  dump_stack_lvl+0xc1/0xf0
[ 3001.755887]  should_fail_ex+0x4b4/0x5b0
[ 3001.756400]  copyout+0x19/0x120
[ 3001.756833]  _copy_to_iter+0x5cc/0x13f0
[ 3001.757356]  ? __pfx___skb_try_recv_datagram+0x10/0x10
[ 3001.758008]  ? __pfx__copy_to_iter+0x10/0x10
[ 3001.758586]  ? __virt_addr_valid+0x102/0x340
[ 3001.759141]  ? __check_object_size+0x3e4/0x860
[ 3001.759735]  simple_copy_to_iter+0x50/0x80
[ 3001.760271]  __skb_datagram_iter+0x122/0x880
[ 3001.760852]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 3001.761471]  skb_copy_datagram_iter+0x44/0x60
[ 3001.762050]  netlink_recvmsg+0x1c7/0xd60
[ 3001.762605]  ? trace_lock_acquire+0x170/0x1e0
[ 3001.763185]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 3001.763772]  ? __fget_files+0x270/0x480
[ 3001.764281]  ? security_socket_recvmsg+0x99/0xc0
[ 3001.764868]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 3001.765450]  sock_recvmsg+0x187/0x1d0
[ 3001.765936]  __sys_recvfrom+0x1b0/0x2f0
[ 3001.766475]  ? __pfx___sys_recvfrom+0x10/0x10
[ 3001.767049]  ? rcu_read_lock_any_held+0x79/0xa0
[ 3001.767657]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 3001.768376]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 3001.769084]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 3001.769800]  ? fput+0x2f/0x1a0
[ 3001.770241]  ? ksys_write+0x1a7/0x260
[ 3001.770727]  __x64_sys_recvfrom+0xe1/0x1c0
[ 3001.771267]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3001.771887]  do_syscall_64+0x3f/0x90
[ 3001.772361]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3001.772990] RIP: 0033:0x7f78572f57e4
[ 3001.773449] Code: 89 4c 24 1c e8 bd fb ff ff 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 e9 fb ff ff 48 8b 04
[ 3001.775550] RSP: 002b:00007f78548b7030 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 3001.776442] RAX: ffffffffffffffda RBX: 00007f78548b7110 RCX: 00007f78572f57e4
[ 3001.777284] RDX: 0000000000001000 RSI: 00007f78548b7160 RDI: 0000000000000004
[ 3001.778131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 3001.778981] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f78548b70c8
[ 3001.779833] R13: 00007f78548b7160 R14: 0000000000000004 R15: 0000000000000000
[ 3001.780702]  </TASK>
15:00:57 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
accept4$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:57 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0) (fail_nth: 12)

15:00:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)

15:00:57 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4b49, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:00:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5451, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:00:57 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000004240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100, 0x2}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000004200))
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001000)={{0x1, 0x1, 0x18, <r1=>r0, {0x81, 0x3}}, './file0\x00'})
recvmmsg$unix(r1, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000004280)=""/81, 0x4d}, {&(0x7f0000001080)=""/202, 0xca}, {&(0x7f0000001180)=""/82, 0x52}, {&(0x7f0000001200)=""/24, 0x18}, {&(0x7f0000001240)=""/100, 0x64}, {&(0x7f00000012c0)=""/89, 0x59}, {&(0x7f0000001340)=""/153, 0x99}, {&(0x7f0000001400)=""/181, 0xb5}, {&(0x7f00000040c0)=""/4, 0x4}], 0xa}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000004300)=[{&(0x7f0000001640)=""/125, 0x7d}, {&(0x7f00000016c0)=""/6, 0x6}, {&(0x7f0000001700)=""/203, 0xcb}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/197, 0xffffffffffffff0e}, {&(0x7f0000002900)=""/63, 0x3f}, {&(0x7f0000002940)=""/236, 0xec}, {&(0x7f0000003b80)=""/171, 0xab}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/101, 0x60}], 0xa, &(0x7f0000003c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003c80)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f0000003d00)=""/121, 0x79}, {&(0x7f0000003d80)=""/246, 0xf6}, {&(0x7f0000003e80)=""/230, 0xe6}, {&(0x7f0000003f80)=""/227, 0xe3}], 0x1000000000000120, &(0x7f0000004280), 0x68}}], 0x3, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r0)

[ 3001.999824] FAULT_INJECTION: forcing a failure.
[ 3001.999824] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3002.001327] CPU: 0 PID: 40602 Comm: syz-executor.3 Not tainted 6.2.0-next-20230303 #1
[ 3002.002293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3002.003249] Call Trace:
[ 3002.003579]  <TASK>
[ 3002.003877]  dump_stack_lvl+0xc1/0xf0
[ 3002.004371]  should_fail_ex+0x4b4/0x5b0
[ 3002.004895]  _copy_to_user+0x2e/0x150
[ 3002.005400]  simple_read_from_buffer+0xd0/0x170
[ 3002.006011]  proc_fail_nth_read+0x19c/0x230
[ 3002.006573]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3002.007178]  ? security_file_permission+0xb5/0xe0
[ 3002.007812]  vfs_read+0x257/0x940
[ 3002.008283]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3002.008895]  ? __pfx_vfs_read+0x10/0x10
[ 3002.009426]  ? __pfx___fget_files+0x10/0x10
[ 3002.009988]  ? __fget_files+0x270/0x480
[ 3002.010565]  ksys_read+0x12b/0x260
[ 3002.011042]  ? __pfx_ksys_read+0x10/0x10
[ 3002.011601]  do_syscall_64+0x3f/0x90
[ 3002.012084]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3002.012721] RIP: 0033:0x7ffbb2c9b69c
[ 3002.013182] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3002.015274] RSP: 002b:00007ffbb025e170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3002.016188] RAX: ffffffffffffffda RBX: 0000000000000028 RCX: 00007ffbb2c9b69c
[ 3002.017037] RDX: 000000000000000f RSI: 00007ffbb025e1e0 RDI: 0000000000000005
[ 3002.017880] RBP: 00007ffbb025e1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3002.018746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3002.019586] R13: 00007ffe5fef49df R14: 00007ffbb025e300 R15: 0000000000022000
[ 3002.020481]  </TASK>
15:00:57 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 14)

15:00:57 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:00:57 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

[ 3002.441028] syz-executor.0: attempt to access beyond end of device
[ 3002.441028] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3002.446697] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:01:14 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:01:14 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:01:14 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:01:14 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:01:14 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:01:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 15)

15:01:14 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x294ee128)
shutdown(r0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x20, 0x100)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)

15:01:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x541b, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

[ 3018.730042] loop6: detected capacity change from 0 to 40
[ 3018.748816] loop0: detected capacity change from 0 to 40
15:01:14 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:01:14 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x80000)

15:01:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 16)

15:01:14 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5460, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:01:14 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x6, 0x0, 0x2, 0x7f, 0x3, [0x7, 0x7, 0x6, 0xfffffff9]})
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:01:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5421, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:01:14 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000)

15:01:14 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:01:14 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 17)

[ 3019.362615] syz-executor.6: attempt to access beyond end of device
[ 3019.362615] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3019.367855] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 3019.566942] syz-executor.0: attempt to access beyond end of device
[ 3019.566942] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3019.568737] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:01:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 1)

15:01:29 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042408, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:01:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5450, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:01:29 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)

15:01:29 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:01:29 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:01:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 18)

15:01:29 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

[ 3034.384175] FAULT_INJECTION: forcing a failure.
[ 3034.384175] name failslab, interval 1, probability 0, space 0, times 0
[ 3034.385192] CPU: 1 PID: 41605 Comm: syz-executor.6 Not tainted 6.2.0-next-20230303 #1
[ 3034.385774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3034.386355] Call Trace:
[ 3034.386541]  <TASK>
[ 3034.386715]  dump_stack_lvl+0xc1/0xf0
[ 3034.387004]  should_fail_ex+0x4b4/0x5b0
[ 3034.387302]  should_failslab+0x9/0x20
[ 3034.387584]  kmem_cache_alloc_lru+0x6b/0x590
[ 3034.387901]  ? sock_alloc_inode+0x27/0x1d0
[ 3034.388221]  sock_alloc_inode+0x27/0x1d0
[ 3034.388514]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 3034.388857]  alloc_inode+0x63/0x240
[ 3034.389130]  new_inode_pseudo+0x17/0x80
[ 3034.389421]  sock_alloc+0x40/0x270
[ 3034.389691]  do_accept+0x142/0x520
[ 3034.389962]  ? __pfx_do_accept+0x10/0x10
[ 3034.390261]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3034.390615]  ? lock_acquire+0x32/0xc0
[ 3034.390897]  ? alloc_fd+0x6e/0x760
[ 3034.391163]  ? do_raw_spin_unlock+0x53/0x220
[ 3034.391480]  ? _raw_spin_unlock+0x1e/0x40
[ 3034.391792]  ? alloc_fd+0x2eb/0x760
[ 3034.392077]  __sys_accept4+0x9a/0x130
[ 3034.392366]  __x64_sys_accept4+0x97/0x100
[ 3034.392672]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3034.393043]  do_syscall_64+0x3f/0x90
[ 3034.393321]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3034.393693] RIP: 0033:0x7fa124dcbb19
[ 3034.393961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3034.395225] RSP: 002b:00007fa122341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3034.395753] RAX: ffffffffffffffda RBX: 00007fa124edef60 RCX: 00007fa124dcbb19
[ 3034.396241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 3034.396741] RBP: 00007fa1223411d0 R08: 0000000000000000 R09: 0000000000000000
[ 3034.397245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3034.397751] R13: 00007ffc0fa9f0ff R14: 00007fa122341300 R15: 0000000000022000
[ 3034.398263]  </TASK>
15:01:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)

[ 3034.407344] FAULT_INJECTION: forcing a failure.
[ 3034.407344] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 3034.408600] CPU: 1 PID: 41652 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 3034.409123] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3034.409671] Call Trace:
[ 3034.409855]  <TASK>
[ 3034.410024]  dump_stack_lvl+0xc1/0xf0
[ 3034.410300]  should_fail_ex+0x4b4/0x5b0
[ 3034.410588]  prepare_alloc_pages+0x178/0x500
[ 3034.410896]  ? __lock_acquire+0x18df/0x6380
[ 3034.411205]  __alloc_pages+0x149/0x510
[ 3034.411486]  ? __pfx___alloc_pages+0x10/0x10
[ 3034.411497] loop0: detected capacity change from 0 to 40
[ 3034.411791]  ? __lock_acquire+0xbba/0x6380
[ 3034.412785]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3034.413103]  ? mark_lock.part.0+0xef/0x2f30
[ 3034.413414]  vma_alloc_folio+0xe2/0x450
[ 3034.413695]  __handle_mm_fault+0xfea/0x31e0
[ 3034.413996]  ? __pfx_lock_release+0x10/0x10
[ 3034.414304]  ? lock_is_held_type+0x9f/0x120
[ 3034.414608]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3034.414949]  ? mark_held_locks+0x9e/0xe0
[ 3034.415239]  handle_mm_fault+0x2ce/0xb40
[ 3034.415520]  do_user_addr_fault+0x360/0x12e0
[ 3034.415846]  exc_page_fault+0x9c/0x1a0
[ 3034.416136]  asm_exc_page_fault+0x26/0x30
[ 3034.416430] RIP: 0033:0x7f78572df7ee
[ 3034.416692] Code: 89 c0 48 01 d7 4c 89 c2 48 01 c6 e9 9c d8 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 41 54 55 48 89 fd 53 48 81 ec d0 00 00 00 <48> 89 74 24 28 48 89 54 24 30 48 89 4c 24 38 4c 89 44 24 40 4c 89
[ 3034.417883] RSP: 002b:00007f78548b6f70 EFLAGS: 00010202
[ 3034.418240] RAX: 0000000000000000 RBX: 00007f78548b7110 RCX: 00007f78572f57e4
[ 3034.418744] RDX: 0000000000001000 RSI: 0000000000000050 RDI: 00007f785738c548
[ 3034.419218] RBP: 00007f785738c548 R08: 0000000000000000 R09: 0000000000000000
[ 3034.419737] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f78548b70c8
[ 3034.420250] R13: 00007f78548b7160 R14: 0000000000000214 R15: 00000000ffffffff
[ 3034.420771]  </TASK>
[ 3034.421081] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
15:01:30 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xcc4, @any, 0x200, 0x3}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:01:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)

15:01:30 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:01:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (fail_nth: 19)

15:01:30 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042409, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:01:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 2)

[ 3034.616810] FAULT_INJECTION: forcing a failure.
[ 3034.616810] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3034.618290] CPU: 0 PID: 41994 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 3034.619302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3034.620306] Call Trace:
[ 3034.620648]  <TASK>
[ 3034.620956]  dump_stack_lvl+0xc1/0xf0
[ 3034.621481]  should_fail_ex+0x4b4/0x5b0
[ 3034.622032]  _copy_to_user+0x2e/0x150
[ 3034.622545]  simple_read_from_buffer+0xd0/0x170
[ 3034.623203]  proc_fail_nth_read+0x19c/0x230
[ 3034.623788]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3034.624426]  ? security_file_permission+0xb5/0xe0
[ 3034.625088]  vfs_read+0x257/0x940
[ 3034.625570]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3034.626205]  ? __pfx_vfs_read+0x10/0x10
[ 3034.626788]  ? __pfx___fget_files+0x10/0x10
[ 3034.627364]  ? __fget_files+0x270/0x480
[ 3034.627937]  ksys_read+0x12b/0x260
[ 3034.628434]  ? __pfx_ksys_read+0x10/0x10
[ 3034.629018]  do_syscall_64+0x3f/0x90
[ 3034.629524]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3034.630200] RIP: 0033:0x7f78572f569c
[ 3034.630721] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3034.632974] RSP: 002b:00007f78548b8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3034.633936] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f78572f569c
[ 3034.634889] RDX: 000000000000000f RSI: 00007f78548b81e0 RDI: 0000000000000005
[ 3034.635796] RBP: 00007f78548b81d0 R08: 0000000000000000 R09: 00007f78548b6f60
[ 3034.636707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3034.637612] R13: 00007fffe9ba92bf R14: 00007f78548b8300 R15: 0000000000022000
[ 3034.638583]  </TASK>
15:01:46 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {0x0, 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 3051.084124] loop0: detected capacity change from 0 to 40
15:01:46 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0)

15:01:46 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:01:46 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5451, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:01:46 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46d8571", 0x28}], 0x1}}], 0x1, 0x20000051)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x600000, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff, @private2, 0x3ff}, 0x1c)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x5}, 0x1c)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000))

15:01:46 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 3)

15:01:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:01:46 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40049409, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 3051.166029] FAULT_INJECTION: forcing a failure.
[ 3051.166029] name failslab, interval 1, probability 0, space 0, times 0
[ 3051.167677] CPU: 0 PID: 42125 Comm: syz-executor.6 Not tainted 6.2.0-next-20230303 #1
[ 3051.168761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3051.169860] Call Trace:
[ 3051.170234]  <TASK>
[ 3051.170568]  dump_stack_lvl+0xc1/0xf0
[ 3051.171135]  should_fail_ex+0x4b4/0x5b0
[ 3051.171681]  ? security_inode_alloc+0x38/0x160
[ 3051.172287]  should_failslab+0x9/0x20
[ 3051.172778]  kmem_cache_alloc+0x5a/0x320
[ 3051.173317]  security_inode_alloc+0x38/0x160
[ 3051.173912]  inode_init_always+0xbb2/0xea0
[ 3051.174479]  alloc_inode+0x84/0x240
[ 3051.175014]  new_inode_pseudo+0x17/0x80
[ 3051.175531]  sock_alloc+0x40/0x270
[ 3051.176034]  do_accept+0x142/0x520
[ 3051.176529]  ? __pfx_do_accept+0x10/0x10
[ 3051.177101]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3051.177712]  ? lock_acquire+0x32/0xc0
[ 3051.178228]  ? alloc_fd+0x6e/0x760
[ 3051.178698]  ? do_raw_spin_unlock+0x53/0x220
[ 3051.179297]  ? _raw_spin_unlock+0x1e/0x40
[ 3051.179836]  ? alloc_fd+0x2eb/0x760
[ 3051.180367]  __sys_accept4+0x9a/0x130
[ 3051.180889]  __x64_sys_accept4+0x97/0x100
[ 3051.181460]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3051.182120]  do_syscall_64+0x3f/0x90
[ 3051.182634]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3051.183287] RIP: 0033:0x7fa124dcbb19
[ 3051.183782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3051.185886] RSP: 002b:00007fa122341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3051.186874] RAX: ffffffffffffffda RBX: 00007fa124edef60 RCX: 00007fa124dcbb19
[ 3051.187779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 3051.188692] RBP: 00007fa1223411d0 R08: 0000000000000000 R09: 0000000000000000
[ 3051.189603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3051.190508] R13: 00007ffc0fa9f0ff R14: 00007fa122341300 R15: 0000000000022000
[ 3051.191480]  </TASK>
15:01:46 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:01:46 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}, 0x1, 0x0, 0x0, 0xc10}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:01:46 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:01:46 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 4)

15:01:46 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:01:46 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082404, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:01:47 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x48)

15:01:47 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x14, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 3051.919425] syz-executor.0: attempt to access beyond end of device
[ 3051.919425] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3051.921010] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:02:01 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 5)

15:02:01 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {0x0, 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:02:01 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendfile(r3, 0xffffffffffffffff, &(0x7f00000012c0)=0x7ff, 0x5)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000001600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="000428bd7000fedbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="00010000", @ANYRES16=r5, @ANYBLOB="010000000023d6276e003b08000008000300", @ANYRES32=r4, @ANYBLOB="e200330080800000080211000001080211"], 0x100}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xffc, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xfe0, 0x5, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1c00000}]}]}, {0x114, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x131}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x161c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x5e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8e7f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbc2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa03}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x27f0}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7fff}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5ba9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x78, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x165b}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9837}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x60c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x320, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4d}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x39e6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x972}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff2a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x30, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xac}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x351}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}]}, 0xffc}, 0x1, 0x0, 0x0, 0x884}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:02:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 1)

[ 3066.019480] FAULT_INJECTION: forcing a failure.
[ 3066.019480] name failslab, interval 1, probability 0, space 0, times 0
[ 3066.020324] CPU: 0 PID: 42764 Comm: syz-executor.6 Not tainted 6.2.0-next-20230303 #1
[ 3066.020886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3066.021427] Call Trace:
[ 3066.021623]  <TASK>
[ 3066.021797]  dump_stack_lvl+0xc1/0xf0
[ 3066.022088]  should_fail_ex+0x4b4/0x5b0
[ 3066.022405]  should_failslab+0x9/0x20
[ 3066.022681]  kmem_cache_alloc_lru+0x6b/0x590
[ 3066.023028]  ? __d_alloc+0x31/0x9c0
[ 3066.023313]  __d_alloc+0x31/0x9c0
[ 3066.023596]  d_alloc_pseudo+0x1d/0x70
[ 3066.023872]  alloc_file_pseudo+0xd2/0x260
[ 3066.024195]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 3066.024534]  ? lock_acquire+0x32/0xc0
[ 3066.024821]  ? new_inode_pseudo+0x34/0x80
[ 3066.025140]  ? do_raw_spin_unlock+0x53/0x220
[ 3066.025496]  sock_alloc_file+0x53/0x1a0
[ 3066.025790]  do_accept+0x28f/0x520
[ 3066.026076]  ? __pfx_do_accept+0x10/0x10
[ 3066.026386]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3066.026732]  ? lock_acquire+0x32/0xc0
[ 3066.026748] loop0: detected capacity change from 0 to 40
[ 3066.027001]  ? alloc_fd+0x6e/0x760
[ 3066.027028]  ? do_raw_spin_unlock+0x53/0x220
[ 3066.028081]  ? _raw_spin_unlock+0x1e/0x40
[ 3066.028381]  ? alloc_fd+0x2eb/0x760
[ 3066.028676]  __sys_accept4+0x9a/0x130
[ 3066.028961]  __x64_sys_accept4+0x97/0x100
[ 3066.029281]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3066.029648]  do_syscall_64+0x3f/0x90
[ 3066.029942]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3066.030295] RIP: 0033:0x7fa124dcbb19
[ 3066.030573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3066.031775] RSP: 002b:00007fa122341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3066.032328] RAX: ffffffffffffffda RBX: 00007fa124edef60 RCX: 00007fa124dcbb19
[ 3066.032841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 3066.033427] RBP: 00007fa1223411d0 R08: 0000000000000000 R09: 0000000000000000
[ 3066.034010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3066.034517] R13: 00007ffc0fa9f0ff R14: 00007fa122341300 R15: 0000000000022000
[ 3066.035068]  </TASK>
[ 3066.051587] FAULT_INJECTION: forcing a failure.
[ 3066.051587] name failslab, interval 1, probability 0, space 0, times 0
[ 3066.052659] CPU: 0 PID: 42772 Comm: syz-executor.1 Not tainted 6.2.0-next-20230303 #1
[ 3066.053261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3066.053848] Call Trace:
[ 3066.054044]  <TASK>
[ 3066.054220]  dump_stack_lvl+0xc1/0xf0
[ 3066.054519]  should_fail_ex+0x4b4/0x5b0
[ 3066.054829]  should_failslab+0x9/0x20
[ 3066.055136]  kmem_cache_alloc_lru+0x6b/0x590
[ 3066.055472]  ? sock_alloc_inode+0x27/0x1d0
[ 3066.055787]  sock_alloc_inode+0x27/0x1d0
[ 3066.056094]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 3066.056431]  alloc_inode+0x63/0x240
[ 3066.056722]  new_inode_pseudo+0x17/0x80
[ 3066.057003]  sock_alloc+0x40/0x270
[ 3066.057280]  do_accept+0x142/0x520
[ 3066.057549]  ? __pfx_do_accept+0x10/0x10
[ 3066.057862]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3066.058197]  ? lock_acquire+0x32/0xc0
[ 3066.058485]  ? alloc_fd+0x6e/0x760
[ 3066.058751]  ? do_raw_spin_unlock+0x53/0x220
[ 3066.059098]  ? _raw_spin_unlock+0x1e/0x40
[ 3066.059418]  ? alloc_fd+0x2eb/0x760
[ 3066.059702]  __sys_accept4+0x9a/0x130
[ 3066.060006]  __x64_sys_accept4+0x97/0x100
[ 3066.060326]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3066.060687]  do_syscall_64+0x3f/0x90
[ 3066.060976]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3066.061339] RIP: 0033:0x7f14880e9b19
[ 3066.061620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3066.062827] RSP: 002b:00007f148565f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3066.063397] RAX: ffffffffffffffda RBX: 00007f14881fcf60 RCX: 00007f14880e9b19
[ 3066.063919] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000005
[ 3066.064436] RBP: 00007f148565f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3066.064959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3066.065480] R13: 00007ffda6ce056f R14: 00007f148565f300 R15: 0000000000022000
[ 3066.066035]  </TASK>
15:02:01 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4008240b, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:02:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5460, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:02:01 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:01 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x28080, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0xe1e4, 0x9, 0x2, 0x3f, 0x6, 0x8, 0x7c}, 0xc)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x7ff, @none, 0x101, 0x1}, 0xe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000078c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x804)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x294ee128)
shutdown(r3, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f00000003c0)=ANY=[@ANYBLOB="dd0400000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/29896])
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x100)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r0, {0x7}}, './file0\x00'})
bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x7, @any, 0x3, 0x2}, 0xe)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x78, @none, 0x7, 0x2}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:02:01 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:01 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 6)

15:02:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 2)

15:02:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042408, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:02:01 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40086602, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 3066.199515] syz-executor.0: attempt to access beyond end of device
[ 3066.199515] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3066.201174] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:02:01 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xbc9, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:01 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_misc(r1, &(0x7f0000000080)={'syz1', "c91a35093fe432c2eaf90bb765b42c41921c5e043c6c3abbb7cff1073501"}, 0x22)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)

15:02:01 executing program 4:
r0 = clone3(&(0x7f0000000480)={0x1a3363500, &(0x7f0000000180), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = getpgid(r0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x3, 0x4, 0x1, 0x10000, 0xb992, r0})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000529be902"], 0x28}}, 0x0)
r3 = epoll_create(0x7)
r4 = getpid()
r5 = getpid()
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/consoles\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x7f, 0x2, 0x80, 0x0, 0x80, 0xc000, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000240)}, 0x2, 0x5, 0x7, 0x0, 0x7570, 0x7, 0x9, 0x0, 0x3, 0x0, 0x6}, r1, 0xc, r6, 0x1)
r7 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000000)={r7})
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3f, 0x7, 0xff, 0x6, 0x0, 0x1, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0xf}, 0x40800, 0xff, 0xff, 0x5, 0x4, 0x4, 0xecb, 0x0, 0x1, 0x0, 0x1f}, r4, 0x7, 0xffffffffffffffff, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)

15:02:01 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 7)

15:02:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 3)

[ 3066.300040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39762 sclass=netlink_route_socket pid=43164 comm=syz-executor.4
[ 3066.333104] FAULT_INJECTION: forcing a failure.
[ 3066.333104] name failslab, interval 1, probability 0, space 0, times 0
[ 3066.333941] CPU: 0 PID: 43303 Comm: syz-executor.6 Not tainted 6.2.0-next-20230303 #1
[ 3066.334500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3066.335084] Call Trace:
[ 3066.335276]  <TASK>
[ 3066.335448]  dump_stack_lvl+0xc1/0xf0
[ 3066.335748]  should_fail_ex+0x4b4/0x5b0
[ 3066.336061]  ? __alloc_file+0x21/0x240
[ 3066.336350]  should_failslab+0x9/0x20
[ 3066.336622]  kmem_cache_alloc+0x5a/0x320
[ 3066.336937]  __alloc_file+0x21/0x240
[ 3066.337209]  alloc_empty_file+0x71/0x190
[ 3066.337522]  alloc_file+0x5e/0x810
[ 3066.337790]  alloc_file_pseudo+0x16e/0x260
[ 3066.338110]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 3066.338449]  ? lock_acquire+0x32/0xc0
[ 3066.338737]  ? do_raw_spin_unlock+0x53/0x220
[ 3066.339089]  sock_alloc_file+0x53/0x1a0
[ 3066.339392]  do_accept+0x28f/0x520
[ 3066.339660]  ? __pfx_do_accept+0x10/0x10
[ 3066.339966]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3066.340299]  ? lock_acquire+0x32/0xc0
[ 3066.340577]  ? alloc_fd+0x6e/0x760
[ 3066.340839]  ? do_raw_spin_unlock+0x53/0x220
[ 3066.341173]  ? _raw_spin_unlock+0x1e/0x40
[ 3066.341476]  ? alloc_fd+0x2eb/0x760
[ 3066.341772]  __sys_accept4+0x9a/0x130
[ 3066.342058]  __x64_sys_accept4+0x97/0x100
[ 3066.342376]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3066.342742]  do_syscall_64+0x3f/0x90
[ 3066.343034]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3066.343398] RIP: 0033:0x7fa124dcbb19
[ 3066.343676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3066.344860] RSP: 002b:00007fa122341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3066.345402] RAX: ffffffffffffffda RBX: 00007fa124edef60 RCX: 00007fa124dcbb19
[ 3066.345903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 3066.346410] RBP: 00007fa1223411d0 R08: 0000000000000000 R09: 0000000000000000
[ 3066.346921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3066.347441] R13: 00007ffc0fa9f0ff R14: 00007fa122341300 R15: 0000000000022000
[ 3066.347974]  </TASK>
[ 3066.365387] FAULT_INJECTION: forcing a failure.
[ 3066.365387] name failslab, interval 1, probability 0, space 0, times 0
[ 3066.366561] CPU: 1 PID: 43353 Comm: syz-executor.1 Not tainted 6.2.0-next-20230303 #1
[ 3066.367233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3066.367890] Call Trace:
[ 3066.368105]  <TASK>
[ 3066.368296]  dump_stack_lvl+0xc1/0xf0
[ 3066.368626]  should_fail_ex+0x4b4/0x5b0
[ 3066.368974]  ? security_inode_alloc+0x38/0x160
[ 3066.369359]  should_failslab+0x9/0x20
[ 3066.369681]  kmem_cache_alloc+0x5a/0x320
[ 3066.370028]  security_inode_alloc+0x38/0x160
[ 3066.370396]  inode_init_always+0xbb2/0xea0
[ 3066.370759]  alloc_inode+0x84/0x240
[ 3066.371096]  new_inode_pseudo+0x17/0x80
[ 3066.371425]  sock_alloc+0x40/0x270
[ 3066.371739]  do_accept+0x142/0x520
[ 3066.372059]  ? __pfx_do_accept+0x10/0x10
[ 3066.372412]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3066.372795]  ? lock_acquire+0x32/0xc0
[ 3066.373116]  ? alloc_fd+0x6e/0x760
[ 3066.373427]  ? do_raw_spin_unlock+0x53/0x220
[ 3066.373796]  ? _raw_spin_unlock+0x1e/0x40
[ 3066.374153]  ? alloc_fd+0x2eb/0x760
[ 3066.374482]  __sys_accept4+0x9a/0x130
[ 3066.374823]  __x64_sys_accept4+0x97/0x100
[ 3066.375183]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3066.375627]  do_syscall_64+0x3f/0x90
[ 3066.375951]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3066.376394] RIP: 0033:0x7f14880e9b19
[ 3066.376713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3066.378194] RSP: 002b:00007f148565f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3066.378823] RAX: ffffffffffffffda RBX: 00007f14881fcf60 RCX: 00007f14880e9b19
[ 3066.379432] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000005
[ 3066.380012] RBP: 00007f148565f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3066.380574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3066.381148] R13: 00007ffda6ce056f R14: 00007f148565f300 R15: 0000000000022000
[ 3066.381743]  </TASK>
15:02:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 8)

15:02:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042409, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:02:16 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000100)=0xc)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2a, 0x40, 0x1b, 0x1f, 0x0, 0xe97d, 0x4a2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8000, 0xa4, 0x20000, 0x6, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4b5c}, r2, 0x4, r0, 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000052000102a4d8e1b9ccf1dcb6ae9742690dacf871eb21aa3f399b365057cfebdf1484e4dcf836b6641bae1e5d32ecbb8078549607894ef80020affb2df579fb949a7bc23738e9d4f9b752881749b928c6698dc919b465bccfe886eec902a968dcfaefe1490c2380b9c9d04a4a8e1a570c0416ff3c414359fbd3de835ffbb56d820c0bac5512ca0e39c1c7c1a96fc22352e948d10af6538af35072874c4c120b29ebf8c375fc090ab0386419e6dd2ff9dbbff56d9da8a86fbc811d95651fdde1893740dbf65e2e797aa6f5fa3d0ace150b70"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)

15:02:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:16 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {0x0, 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:02:16 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{}, {0x20, '&&'}], 0xa, "dbf41e097462fa68108056dd1344453acea30dcebd9a9d3ba9fd3b7e4467fb98e2385f755868ad808415000203eb87e09e0e4247c4424541a952c038aa9208969b3ddf80ff7bb14f18fc510e8a935bfd7e21b2069129a8eb76099f2d47667f7437d371c3b96fe12ef9c5e5beb39d8ff8824e85b85343c017ccb4b142cc1689c6499e4be027ccc0805aab28bdfdcfb83ad9abe71abce4628bbf59c2126703dcec44bf3c4d27d8c2ecfbbe6d90355f470d3eeb84515523a2757791e1be1ee4f8b05a4f1e330645e9f16b917068502c3868cad3fb27daa2471f6500354b2888a73d01d242cda665f7843d1fc0c7ed6decde4f19072b63842b3bd861a482aca476f4d7f24301056c82f8a415d9f931f0ebd92942282ea2fc346bb424d69adf66c0eb2e3ecb42f02e8cf5c69469b2abee73b0f6172281be25a6a4a696b514b0ca6c9869a44fc7ef9000d55422c737d06c7ef323d0956ddfebe826bfcc7578fec2a3d44c64df79e98e157c4fc6fc712ede3d77f72c637fb09b67985922c94a5424e76a36557a58c49d46e2b18df23d13d1d156e03dfed1c77cb99836f80bf418ff0f78419c8c9960ebf2fb79a4cb187699fe9f759030467b020100d85f3d8a53b363c87cf741db0dcef4e1b84a5d9e577e341468235bba4685724bf682307e619338a3db869c3d3932ffc7ee61c9127ef0147ace1eb2c6d3bd11513ff1cfed231415ace2c8104d342b4e3c28f2610584de89dc558c737d7ae22e9893bc08fac6beb5e5f25e2cc44c6b166974f408085cca5fcba293f2f784834aebfa0300a36d63bd64b82c197dfa6a6d47aac37921e3435550b99a509fcf2bdfb58ff834c62ef5b059e841d909d0d954f8a715a988bc44fd727759339d1486cabf798a4540d92a761faf56a1bce85d1cebad5924cc35dc058678789d3e9b09dfef3572c69ccf1c676c93bfbefd4d78cbd2948707958873fc8d9af4a21dc209d6680419d2137ef50d3572e753eab65d30fbc5be1ef027e2ace51602b0941ecde5c095698d29b5e1457eb2b30383870605ccf71f402e4e1acd114ec3a158229bbdbe20b07431155add583a0b6bda9e96a90d10ac81044d6a22539866196671d6a1c5cd09b17fea7c8ee42c74c079c263d39a2903255826ff2680b9ee860667948b7c6aaa3f31900307619ee561995d7b07880bbbcaee1159410d7dc0577d0226a546a94e4626c559372c43fc9c560b522384cb68f266b719ceda9c10707b060445091d7db089ef7d2f2bb0439c23cca17c9153e33df02f4cdb6d37d2d85fe28f02c282636ed496a1746e2ac83f8cce9bdf3311fca996094e0f8a3c292d9de9359f8a9f0a0006582b4849f27a6d8babd885252f018b00f1bc6c0461d66703861df58a1d8e0872150f4de23b905b743165b0974e87a7a0fb863725bbb085caff409f3bc50213582d5d920fadda5c024314973762ecc8eaca14f953e86a52e7dc9f96826d4d37d4b7b0339f4bd942263565b759102ba809fe1f91f707882e07ff35afca1d5a8286eb5fa20206552cbf39665b79de34bcbd22a57ed67f51ab35576fcd477adaa8ee03260624d58e0d8ca85062cd390a54ca054f368db9b67a16383aeab740d463b8246cffc139c9d5bde61d6db9fd26860c534e48d2bfa33a20a7178c76945486ab54ecb193995150d3c94fd7ac86fb845118ebf22e087b670fb8ae516e2c46c3d78bb9a8f7cc1632fd773d2e46a04993bc4a569ebfa3251881127697ffb07441652a67dc1c5b03924f61a209a3e3415b3d4e1a95c55bd8cff67e1154e509142477bc62f3cbe579aed343ca1333c3cc989bcc2aeb2d034ff81f0b1a7d9b5135ff47dfd8496b3a3c5408450d9a5b408b3e5fb764964aa2fb6e61f41b264dc39d545dea439d43ab0b0bb50e0401a6e95d88d0a1b970f1c6a8ae4e5bf7257c295265d21800fdb8e1eb2c4acb007cddf4fbdef65926799f8aeff57f62491630d7ea8a3f479334630179303d7a0cd413bb652c89b74becb9b0bfd03d517299d7643c5817105bafe7b7203d989cae9f98325f43970495fa2f53f1ce52f96e9581fbcd224aab4f18352ba4d27261dc321dd71eac7af15a9445083d913901bc474cc450d3823a79824f024049e4238f07ebe2ee6570b105d513ee346274de64658b075216f1dfc388c08d9a659d915d4566e2b3ab2dc5cced30f412169708e255b23ec3d2f0c71474dda771dba4f79040ad9cdc36f0044cddab42a140da263b97b8ea48fe536e0546d1dbfd6fa0c6a4b275d56a3e4fe3226958f431d60bf6ad40c6a9fcb6b62e33c81ecc23aaf163f22f8869f23c2fe61153e62334d208e96183e92a2bd096a78cc6c579cc152be41aa3275b7ff3885ed88b3cec2f802f722ad6f26d3dec18e85a4ef30edc7e09a3adeb780b21fa7bbc8e312f396355940769f61972da4d47be0bb9d0bd617d76a35c3ccf8b5097279ae2dcd1eca5bb0aac4b9473f13ad7d1e7f11bcd0edefa78566f7644724a5d26d1834c41f33d60f0fcaf059b406999b95d63996f643e072bc4b511eb878ca32eddd1f1913bf5aa1e4ce3cc71ada68b36e76ec4ba46270f8dd53628f6fbd2801c4766d41802c0f3ee1a8e90f022de416058e06838aed4f0a27d2fde7bf945864c6d03caa1aaaaf3edb11b8abc89f9e2fab2d7ed4ed2a20419d609e10392419882e11961cb6ec442b50be08d80bd683a1c072f7d8d23783d181684bdc374688a88fa3dd768c0e72e0a460a6766c5b0dcdecbfb1c3648f8e58e3473d1bf4ff50e8dd1594b149cbc2ad900c92915ca71f3127bba46131a65ad20958346ea1551d1a76d38aa44bfb3e0e0c0b98c13b9168fdfbbcf45dd4a1de23616815f4fd91ec38f1cd4aacc8dde1b4beaf047da80cb626d82816a046130d5fd9f9c4838fb83019e4f5792ec603391019a5a360cb8aad64e7df5071c360d670bfa7f00a39059207d907bb3ccf7d861114a1c83ec47ce54ba96c9b5d6584ba5167d217a72df884ff3662ef4576d1049cf06e2bbe5cd10376510f6c3583c0f48854bf6826c703527a8c79f07e261e83a0cfb2cbc1fc66432609655f6093c496839464b8e2a5cf3593e68e4dbbf2e63536353ad3ca70c73bcf98d410fb2652f87f4aef97f3dd10300c000355310671e03dc3b74397abc05ac3cc19a77173846ae8dcb3051930807a0d923cea16947ed6d9782186d7115e6e7783433fd2311d5dec4fa63e1e893ad9eedb7460b310dcb4d5460ed73cc8dc636ace96bc8b9a80ce8bff8d66853fb7b461ffbb4b0a368b6c5dc6695b6ba1249cabfaa0927504dddaa345dd629c25c50d171315ac6f4c1f11814578ff2f2dd682a086eac49c1abf150b781c061f537a4f5263de30aa914b93ba1c583bdbadb7941ac56009d5996753c0e8517ce4271713e14370188ff4ee72e946918682f12fc6b0e168b594e0a717610432422b8f1478179c76b6df9c92f3783c8d63cb0099e54b21fd11d89941f05d092312936ed92bf29fd58e3ba5c591d391038b50937b3feb297ee8425b36b37dae61d77ccbc55888d562365e5dc7afcba6e59b00ffb4223a809a15cc4e28505841c3fdce1daa06fe1b60b9cbd0a3fdf24cf62c9a6986f8c6ae8d47d5329f35a81c831acc3c29c54080635806475d2e5e98822eb33c4ef8dc1da42c7ca0816d75b60ad7fcc0be3f038f8544ee7032dbd6aeee9eae3d8eb2f8d4076381111a4272f96b6decc10a1f847dc1878d7a0c63d3ba8c99be1c0991278a7a8e76bdae9b6db3d0ebbb93edd179104e8ecfd8c2776d768bc2486ec48c0bc0a3f1ebe0db5f2281369bbf9883379fc8ac95851276b83c02dc6106a86460118427d41c6446e45b5a542491c385891bbe013298a99ddef0cb24d17f64624f8d020c0b11fc9a4df692f92a5263e5e5bc5529fd1e50eee783306a23c3e31eeb51fe24d2ca22f45b44306fc840d0355808b8ce4618a2835e8583159e6e954969afc22c5bd01ed92348e1d4f9f9baa99308d9f3ce5e5722dcf96f602ab68c86ed816a27e4db8ab2460b119dab5f33a65c9b18f7bac0fb876ae5974cd1f95b2f35c246cf5785fbce2f2b8cdcfd17d9177d9e7d44ba846dd5ef8871c09836c92464ee2b2a5d121e388863612111c965d06b90e2c574b4f229fc61c70f4c8ce02099dc19a2c383adb365cd3ae927f81d7beb9f116d133e0af25ca4ab8065b9962b33ce7a9d48b0342772304818ebc480e7c6c3ffb4d26557f80100b3863fc25957a05e8bb7d6cbfffd6eb752380908968853930d1a8c0ff06f739488198c1b822aa6c7250aceedb5685ffbc58285a2e85b3687c8a5046f6d267c97c1a42ad8eab5807a05daa6ef5aa2e057b8a5b90d47c14c097550580195b0bcb44c6d359d64ea84bc87c23629851aa07b5b36ece68bd50fb2f3908632a33a8dece0bc9eab1365d0dd252eb408e94bdfacb9850aff93622d4122f08b3839f9c07c21a97766aed1de1c1bb529fd23937e0c1b9c9cc4508e64e5517330947f4c8710f58fe44e185eac89350f3215465fafa26c9efc0d4b2f2419516e9133c6899a04bbc9875586d074bfa674fe24584d755600096d26b3b5afa190022ab2bca80b3cbcd1c707de121f413e7e3b9003f355b4e19f31c3b02ac0b09d0a87af9e776ad543148077cd228414370f066cdb5f9204cb13d924aec9ca6f73ba9fd1547d9462c836892e17587cbaafacb178b65171c6ebf635ee5e63d13e7b3863508d39a3ab7c9a252d7f974e5e15806254abe3a75fbd76cfa9735aa6e9e684d097087c9dd0e58efac00567370de7c65ab936fe7ebe4cb90d6ed07b7e99ab7b37668c37d162c247f390490d01ef7d8ec0aa116d32a2511ba3220031eaa81fea137110009cdd6c3653195b3e1fcf1d365ebb56c547a8aea0ef27e464e9b580efd03daca14536ff3e98472c70e16ae8b8f48d01e5b516e1a8e1606cf46ee20461095c0a37d5e716a830365b28a3cadbed2438eb350b6c5ddeab3cd849a2f206b3233dba00551cc42e2c11e449f6ea63609e2562f44495be6b0c9df3a8c195815a3d016f38043d8520dd7f4fd288350cbc7ac408d6adec7bb40b1a15de1c6c7f82021960c752354d1bc88f460ec25ce64204634debf0f5e38592bba5c32a5b68918062c42f782f79398241d42a21cbf4b562960f686863537b21e32b3bef0fa2fc35c7dfa38640627781e82460e57474425a92196c9f8a187b554b519516774fc580665ace118f0f96a9180c84fe626a5603a88bb08bf804492cdefe6af1036fa378f1e5d4a238653d4c028dc5321ee434e8b9797c5dfecbfa2e2ba949c2046b73e12e86c261d6c0590f80423b108aa72e5e3cff7833e183b37c90b4b01df54e0c81a3757245f0fc321cb38b84c2e80148d8699d69b2c1bbb02b773118635859049464befd08f06f45b0937e6868681a8f7e854ed48e1446f2579134ef741847277f276c14136ace32bbd93c352f5adaab12061cb67c43d48eef78ba06cf6f677df1a2daa8c1340a63fd6fde29e7615a7f0e5bb266243343426e310b9e9995868486b703a3cb30a9eca9393ba7f69eac6464ec19516a62469865e05bf59f50bcd792e7cbbd081c143da8c4d2afe32bf7b22a2c4a021ddef5df302c62b37ed4e74aed1c15299161770f1922363568d8d9ca5cafe06492fee162ac2c7dfc6edd9a2bab74f15aef2046cf9a7738bb393f932c1df29bc964b2e2737b1fc22ce32064ca9f7e3d8c45a017d6ccc7ced48f2b2b9cb7d868cd2af491db6a0118753a43c7d176751ad290a200440757f822734c014d81964"}, 0x100f)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

15:02:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 4)

15:02:16 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40087602, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:02:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 9)

[ 3080.492386] loop0: detected capacity change from 0 to 40
15:02:16 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:02:16 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000520001025726020ed51dc1099dea5714e6e77f3233dfec4ee9e1e836d68cef3121236500d5c4ddbe79642994e22a8b0715537fda3642844ae679b40ac07483458cc520d5585cdf678c5dd7a6ce8eda3fe34a894d03340105e53f"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 3080.560390] FAULT_INJECTION: forcing a failure.
[ 3080.560390] name failslab, interval 1, probability 0, space 0, times 0
[ 3080.561225] CPU: 1 PID: 43665 Comm: syz-executor.6 Not tainted 6.2.0-next-20230303 #1
[ 3080.561736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3080.562272] Call Trace:
[ 3080.562446]  <TASK>
[ 3080.562610]  dump_stack_lvl+0xc1/0xf0
[ 3080.562879]  should_fail_ex+0x4b4/0x5b0
[ 3080.563166]  ? security_file_alloc+0x38/0x170
[ 3080.563504]  should_failslab+0x9/0x20
[ 3080.563773]  kmem_cache_alloc+0x5a/0x320
[ 3080.564064]  security_file_alloc+0x38/0x170
[ 3080.564374]  __alloc_file+0xb6/0x240
[ 3080.564641]  alloc_empty_file+0x71/0x190
[ 3080.564926]  alloc_file+0x5e/0x810
[ 3080.565182]  alloc_file_pseudo+0x16e/0x260
[ 3080.565474]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 3080.565812]  ? lock_acquire+0x32/0xc0
[ 3080.566079]  ? do_raw_spin_unlock+0x53/0x220
[ 3080.566393]  sock_alloc_file+0x53/0x1a0
[ 3080.566672]  do_accept+0x28f/0x520
[ 3080.566931]  ? __pfx_do_accept+0x10/0x10
[ 3080.567232]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3080.567555]  ? lock_acquire+0x32/0xc0
[ 3080.567819]  ? alloc_fd+0x6e/0x760
[ 3080.568072]  ? do_raw_spin_unlock+0x53/0x220
[ 3080.568375]  ? _raw_spin_unlock+0x1e/0x40
[ 3080.568660]  ? alloc_fd+0x2eb/0x760
[ 3080.568932]  __sys_accept4+0x9a/0x130
[ 3080.569207]  __x64_sys_accept4+0x97/0x100
[ 3080.569493]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3080.569867]  do_syscall_64+0x3f/0x90
[ 3080.570153]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3080.570537] RIP: 0033:0x7fa124dcbb19
[ 3080.570817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3080.572117] RSP: 002b:00007fa122341188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3080.572669] RAX: ffffffffffffffda RBX: 00007fa124edef60 RCX: 00007fa124dcbb19
[ 3080.573186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[ 3080.573696] RBP: 00007fa1223411d0 R08: 0000000000000000 R09: 0000000000000000
[ 3080.574207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3080.574718] R13: 00007ffc0fa9f0ff R14: 00007fa122341300 R15: 0000000000022000
[ 3080.575256]  </TASK>
15:02:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:16 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 5)

15:02:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40049409, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:02:16 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 10)

15:02:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x1400, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 3080.724936] FAULT_INJECTION: forcing a failure.
[ 3080.724936] name failslab, interval 1, probability 0, space 0, times 0
[ 3080.726433] CPU: 0 PID: 43840 Comm: syz-executor.1 Not tainted 6.2.0-next-20230303 #1
[ 3080.727464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3080.728500] Call Trace:
[ 3080.728851]  <TASK>
[ 3080.729166]  dump_stack_lvl+0xc1/0xf0
[ 3080.729694]  should_fail_ex+0x4b4/0x5b0
[ 3080.730259]  should_failslab+0x9/0x20
[ 3080.730779]  kmem_cache_alloc_lru+0x6b/0x590
[ 3080.731384]  ? __d_alloc+0x31/0x9c0
[ 3080.731922]  __d_alloc+0x31/0x9c0
[ 3080.732436]  d_alloc_pseudo+0x1d/0x70
[ 3080.732956]  alloc_file_pseudo+0xd2/0x260
[ 3080.733520]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 3080.734165]  ? lock_acquire+0x32/0xc0
[ 3080.734678]  ? new_inode_pseudo+0x34/0x80
[ 3080.735268]  ? do_raw_spin_unlock+0x53/0x220
[ 3080.735900]  sock_alloc_file+0x53/0x1a0
[ 3080.736469]  do_accept+0x28f/0x520
[ 3080.737001]  ? __pfx_do_accept+0x10/0x10
[ 3080.737575]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3080.738214]  ? lock_acquire+0x32/0xc0
[ 3080.738743]  ? alloc_fd+0x6e/0x760
[ 3080.739266]  ? do_raw_spin_unlock+0x53/0x220
[ 3080.739881]  ? _raw_spin_unlock+0x1e/0x40
[ 3080.740469]  ? alloc_fd+0x2eb/0x760
[ 3080.741023]  __sys_accept4+0x9a/0x130
[ 3080.741582]  __x64_sys_accept4+0x97/0x100
[ 3080.742169]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3080.742871]  do_syscall_64+0x3f/0x90
[ 3080.743420]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3080.744121] RIP: 0033:0x7f14880e9b19
[ 3080.744629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3080.746925] RSP: 002b:00007f148565f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3080.747914] RAX: ffffffffffffffda RBX: 00007f14881fcf60 RCX: 00007f14880e9b19
[ 3080.748844] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000005
[ 3080.749769] RBP: 00007f148565f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3080.750705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3080.751647] R13: 00007ffda6ce056f R14: 00007f148565f300 R15: 0000000000022000
[ 3080.752628]  </TASK>
[ 3080.799870] syz-executor.0: attempt to access beyond end of device
[ 3080.799870] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3080.800930] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:02:29 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x401c5820, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:02:29 executing program 2:
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0xe0, 0x7, 0x3f, 0x3, 0x0, 0x38e, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe53a, 0x4, @perf_config_ext={0x4, 0x5}, 0x8008, 0x6, 0x80000001, 0xa, 0x1ff, 0xb9d, 0xe2b5, 0x0, 0x0, 0x0, 0x11}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x2, 0x6})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r2}], 0x1, 0x294ee128)
shutdown(r2, 0x0)
pread64(r2, &(0x7f00000001c0)=""/190, 0xbe, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg1\x00'})

15:02:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, <r0=>0x0})
r1 = memfd_secret(0x80000)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x40, 0x4, 0x4, 0x1, 0x0, 0x401, 0x20000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100000001, 0x7f}, 0x40, 0x18d2, 0x9, 0x10e81014e6281234, 0x7, 0x7, 0x1, 0x0, 0x7f, 0x0, 0x3}, r0, 0x10, r1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)

15:02:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082404, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:02:29 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) (fail_nth: 11)

15:02:29 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 6)

15:02:30 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 3094.434525] FAULT_INJECTION: forcing a failure.
[ 3094.434525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3094.435428] CPU: 1 PID: 43972 Comm: syz-executor.6 Not tainted 6.2.0-next-20230303 #1
[ 3094.435942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3094.436482] Call Trace:
[ 3094.436662]  <TASK>
[ 3094.436835]  dump_stack_lvl+0xc1/0xf0
[ 3094.437103]  should_fail_ex+0x4b4/0x5b0
[ 3094.437390]  _copy_to_user+0x2e/0x150
[ 3094.437660]  simple_read_from_buffer+0xd0/0x170
[ 3094.437992]  proc_fail_nth_read+0x19c/0x230
[ 3094.438302]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3094.438637]  ? security_file_permission+0xb5/0xe0
[ 3094.438992]  vfs_read+0x257/0x940
[ 3094.439261]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3094.439615]  ? __pfx_vfs_read+0x10/0x10
[ 3094.439901]  ? __pfx___fget_files+0x10/0x10
[ 3094.440203]  ? __fget_files+0x270/0x480
[ 3094.440492]  ksys_read+0x12b/0x260
[ 3094.440748]  ? __pfx_ksys_read+0x10/0x10
[ 3094.441042]  do_syscall_64+0x3f/0x90
[ 3094.441301]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3094.441651] RIP: 0033:0x7fa124d7e69c
[ 3094.441914] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3094.443092] RSP: 002b:00007fa122341170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3094.443589] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa124d7e69c
[ 3094.444053] RDX: 000000000000000f RSI: 00007fa1223411e0 RDI: 0000000000000004
[ 3094.444526] RBP: 00007fa1223411d0 R08: 0000000000000000 R09: 0000000000000000
[ 3094.445001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3094.445465] R13: 00007ffc0fa9f0ff R14: 00007fa122341300 R15: 0000000000022000
[ 3094.445952]  </TASK>
15:02:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 7)

[ 3094.474989] loop0: detected capacity change from 0 to 40
15:02:30 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xc00e, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:30 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4020940d, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:02:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

15:02:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4a9fe054}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

[ 3094.559135] FAULT_INJECTION: forcing a failure.
[ 3094.559135] name failslab, interval 1, probability 0, space 0, times 0
[ 3094.559955] CPU: 1 PID: 44272 Comm: syz-executor.1 Not tainted 6.2.0-next-20230303 #1
[ 3094.560495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3094.561059] Call Trace:
[ 3094.561245]  <TASK>
[ 3094.561416]  dump_stack_lvl+0xc1/0xf0
[ 3094.561707]  should_fail_ex+0x4b4/0x5b0
[ 3094.561998]  ? __alloc_file+0x21/0x240
[ 3094.562272]  should_failslab+0x9/0x20
[ 3094.562545]  kmem_cache_alloc+0x5a/0x320
[ 3094.562834]  __alloc_file+0x21/0x240
[ 3094.563095]  alloc_empty_file+0x71/0x190
[ 3094.563386]  alloc_file+0x5e/0x810
[ 3094.563644]  alloc_file_pseudo+0x16e/0x260
[ 3094.563938]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 3094.564266]  ? lock_acquire+0x32/0xc0
[ 3094.564532]  ? do_raw_spin_unlock+0x53/0x220
[ 3094.564837]  sock_alloc_file+0x53/0x1a0
[ 3094.565111]  do_accept+0x28f/0x520
[ 3094.565364]  ? __pfx_do_accept+0x10/0x10
[ 3094.565647]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3094.565964]  ? lock_acquire+0x32/0xc0
[ 3094.566229]  ? alloc_fd+0x6e/0x760
[ 3094.566488]  ? do_raw_spin_unlock+0x53/0x220
[ 3094.566793]  ? _raw_spin_unlock+0x1e/0x40
[ 3094.567084]  ? alloc_fd+0x2eb/0x760
[ 3094.567344]  __sys_accept4+0x9a/0x130
[ 3094.567633]  __x64_sys_accept4+0x97/0x100
[ 3094.567927]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3094.568279]  do_syscall_64+0x3f/0x90
[ 3094.568536]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3094.568896] RIP: 0033:0x7f14880e9b19
[ 3094.569151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3094.570330] RSP: 002b:00007f148565f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3094.570828] RAX: ffffffffffffffda RBX: 00007f14881fcf60 RCX: 00007f14880e9b19
[ 3094.571317] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000005
[ 3094.571830] RBP: 00007f148565f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3094.572334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3094.572841] R13: 00007ffda6ce056f R14: 00007f148565f300 R15: 0000000000022000
[ 3094.573349]  </TASK>
15:02:30 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/132, 0x84}], 0x2, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)}], 0x6, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/19, 0x13}, {&(0x7f0000002540)=""/137, 0x89}, {&(0x7f0000002600)=""/216, 0xd8}], 0x4, &(0x7f0000002740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002840)=""/187, 0xbb}, {&(0x7f0000002900)=""/175, 0xaf}, {&(0x7f00000029c0)=""/206, 0xce}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/196, 0xc4}, {&(0x7f0000003bc0)=""/126, 0x7e}, {&(0x7f0000003c40)=""/16, 0x10}], 0x7, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40), 0x6e, &(0x7f0000004000)=[{&(0x7f0000003dc0)=""/4, 0x4}, {&(0x7f0000003e00)=""/199, 0xc7}, {&(0x7f0000003f00)=""/18, 0x12}, {&(0x7f0000003f40)=""/133, 0x85}], 0x4, &(0x7f0000004040)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004080)=@abs, 0x6e, &(0x7f0000004640)=[{&(0x7f0000004100)=""/96, 0x60}, {&(0x7f0000004180)=""/55, 0x37}, {&(0x7f00000041c0)=""/92, 0x5c}, {&(0x7f0000004240)=""/160, 0xa0}, {&(0x7f0000004300)=""/228, 0xe4}, {&(0x7f0000004400)=""/171, 0xab}, {&(0x7f00000044c0)=""/90, 0x5a}, {&(0x7f0000004540)=""/145, 0x91}, {&(0x7f0000004600)=""/32, 0x20}], 0x9, &(0x7f0000004700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000004800)=@abs, 0x6e, &(0x7f0000005c00)=[{&(0x7f0000004880)=""/23, 0x17}, {&(0x7f00000048c0)=""/236, 0xec}, {&(0x7f00000049c0)=""/176, 0xb0}, {&(0x7f0000004a80)=""/13, 0xd}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/52, 0x34}, {&(0x7f0000005b00)=""/219, 0xdb}], 0x7, &(0x7f0000005c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000005d80)=""/21, 0x15}], 0x1}}], 0x8, 0x100, &(0x7f0000006000))
ioctl$FICLONE(r0, 0x40049409, r1)

15:02:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4008240b, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:02:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 8)

[ 3094.966781] syz-executor.0: attempt to access beyond end of device
[ 3094.966781] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3094.967911] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:02:43 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 9)

15:02:43 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xc90b, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:43 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 3108.150838] FAULT_INJECTION: forcing a failure.
[ 3108.150838] name failslab, interval 1, probability 0, space 0, times 0
15:02:43 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80082407, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 3108.151675] CPU: 1 PID: 44600 Comm: syz-executor.1 Not tainted 6.2.0-next-20230303 #1
[ 3108.152352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3108.152884] Call Trace:
[ 3108.153062]  <TASK>
[ 3108.153224]  dump_stack_lvl+0xc1/0xf0
[ 3108.153494]  should_fail_ex+0x4b4/0x5b0
[ 3108.153785]  ? security_file_alloc+0x38/0x170
[ 3108.154107]  should_failslab+0x9/0x20
[ 3108.154376]  kmem_cache_alloc+0x5a/0x320
[ 3108.154670]  security_file_alloc+0x38/0x170
[ 3108.154971]  __alloc_file+0xb6/0x240
[ 3108.155236]  alloc_empty_file+0x71/0x190
[ 3108.155521]  alloc_file+0x5e/0x810
[ 3108.155805]  alloc_file_pseudo+0x16e/0x260
[ 3108.156095]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 3108.156424]  ? lock_acquire+0x32/0xc0
[ 3108.156690]  ? do_raw_spin_unlock+0x53/0x220
[ 3108.156998]  sock_alloc_file+0x53/0x1a0
[ 3108.157275]  do_accept+0x28f/0x520
[ 3108.157536]  ? __pfx_do_accept+0x10/0x10
[ 3108.157822]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3108.158144]  ? lock_acquire+0x32/0xc0
[ 3108.158403]  ? alloc_fd+0x6e/0x760
[ 3108.158654]  ? do_raw_spin_unlock+0x53/0x220
[ 3108.158966]  ? _raw_spin_unlock+0x1e/0x40
[ 3108.159256]  ? alloc_fd+0x2eb/0x760
[ 3108.159518]  __sys_accept4+0x9a/0x130
[ 3108.159806]  __x64_sys_accept4+0x97/0x100
[ 3108.160096]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3108.160449]  do_syscall_64+0x3f/0x90
[ 3108.160711]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
15:02:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40086602, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:02:43 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x2)

[ 3108.161149] RIP: 0033:0x7f14880e9b19
[ 3108.161454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3108.162618] RSP: 002b:00007f148565f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 3108.163119] RAX: ffffffffffffffda RBX: 00007f14881fcf60 RCX: 00007f14880e9b19
[ 3108.163600] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000005
[ 3108.164119] RBP: 00007f148565f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3108.164637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3108.165143] R13: 00007ffda6ce056f R14: 00007f148565f300 R15: 0000000000022000
[ 3108.165667]  </TASK>
15:02:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:02:43 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000080))

[ 3108.198131] loop0: detected capacity change from 0 to 40
15:02:43 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:02:43 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x4)

15:02:43 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 10)

15:02:43 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

[ 3108.340046] syz-executor.0: attempt to access beyond end of device
[ 3108.340046] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3108.341116] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:02:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="657ae5e7a3500440000102d62d519af82a4018c9e746072d82d12dba58cc5e2d73ccefc6d978eff04b38f73a81d2bf8290afaf2cdea3cadcb6bc4f2010de00a07db06effb97fe563919bd0e22913a424ff9136498319164cea37b623e384fc0342e6f43eb244d5dd514d606a49fe284cb459721b0ccb22892876d297ddc975c24355270b23ee3d90197387475e52b5cea12320ad69941229cc70697a1029757c904ec678e3e1d576aa46a4f5acea74200000007b2f7cdf134a151ab57cd982a6f3292c75c2b41d098575f7b9405b6933c36cd8416c0fa473a3e240863a75c2"], 0x28}}, 0x0)
r1 = gettid()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0x0, 0x3f}, {0xffffffff}], r2}, 0x18, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = gettid()
mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f94ee762f6c7348301231e0fd8cbb16e375abf4", @ANYBLOB="1f625d8527b16b7fe54fbf003d292ac7bfe82023b61ec9528a6e6aa979fdf9c4e217dad7577d198452514ce9dd7b61486a7a4cb3ea2fc926d75419a23ffb8bc757cc3c1a11eefab272a62c6f680373734d7f029337c9acdaa3535099", @ANYRES16=r3, @ANYRESDEC=r4, @ANYRES64], &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='ceph\x00', 0x48e6, &(0x7f0000000940)='system.posix_acl_access\x00')
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x2020100}, 0xc, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x20, 0x48001}, 0x24010000)
write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x7, 0x8, 0x8, 0x10000, 0x3, 0x3e, 0xfffffffe, 0x170, 0x40, 0xe1, 0xffffffff, 0x80, 0x38, 0x2, 0x20, 0x9, 0x1}, [{0x2, 0x7ff, 0x10001, 0x4, 0x6d, 0x81, 0x81, 0x448}, {0x5, 0xfffffbff, 0x0, 0x3, 0xffffffff, 0x7, 0xf3, 0x10000}], "6600ebffddde3ea56d88eeb39dfd1d3adfdbef4d14617e53d70cd52221a132", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6cf)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:03:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40087602, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:03:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480)}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:03:00 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x8)

15:03:00 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x1)
fallocate(r1, 0x0, 0x3, 0x100)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:03:00 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x9)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6ca4, @none, 0x3ff, 0x1}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:03:00 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:00 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0) (fail_nth: 11)

15:03:00 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80086601, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 3124.889275] FAULT_INJECTION: forcing a failure.
[ 3124.889275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3124.890099] CPU: 1 PID: 45044 Comm: syz-executor.1 Not tainted 6.2.0-next-20230303 #1
[ 3124.890624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3124.891165] Call Trace:
[ 3124.891343]  <TASK>
[ 3124.891503]  dump_stack_lvl+0xc1/0xf0
[ 3124.891779]  should_fail_ex+0x4b4/0x5b0
[ 3124.892075]  _copy_to_user+0x2e/0x150
[ 3124.892360]  simple_read_from_buffer+0xd0/0x170
[ 3124.892697]  proc_fail_nth_read+0x19c/0x230
[ 3124.893004]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3124.893345]  ? security_file_permission+0xb5/0xe0
[ 3124.893689]  vfs_read+0x257/0x940
[ 3124.893946]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3124.894293]  ? __pfx_vfs_read+0x10/0x10
[ 3124.894577]  ? __pfx___fget_files+0x10/0x10
[ 3124.894890]  ? __fget_files+0x270/0x480
[ 3124.895177]  ksys_read+0x12b/0x260
[ 3124.895453]  ? __pfx_ksys_read+0x10/0x10
[ 3124.895757]  do_syscall_64+0x3f/0x90
[ 3124.896034]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3124.896380] RIP: 0033:0x7f148809c69c
[ 3124.896646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3124.897813] RSP: 002b:00007f148565f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3124.898350] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f148809c69c
[ 3124.898823] RDX: 000000000000000f RSI: 00007f148565f1e0 RDI: 0000000000000004
[ 3124.899319] RBP: 00007f148565f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 3124.899830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3124.900335] R13: 00007ffda6ce056f R14: 00007f148565f300 R15: 0000000000022000
[ 3124.900861]  </TASK>
[ 3124.953439] loop0: detected capacity change from 0 to 40
15:03:00 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0)

15:03:00 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0xd6)

15:03:00 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80087601, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:03:00 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:00 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x0)

15:03:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x401c5820, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:03:00 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x115)

15:03:00 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x801c581f, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 3125.182252] syz-executor.0: attempt to access beyond end of device
[ 3125.182252] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3125.183549] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:03:00 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x80000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d48671f55200293a"], 0x28}}, 0x20000804)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:03:15 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:03:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x2, 0x0)

15:03:15 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045878, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:03:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0xa51)

15:03:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4020940d, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:03:15 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40004)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x40010)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x8)

[ 3139.768114] loop0: detected capacity change from 0 to 40
15:03:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0xa52)

15:03:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x4, 0x0)

15:03:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80082407, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:03:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x8, 0x0)

15:03:15 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x1501)

[ 3139.969117] syz-executor.0: attempt to access beyond end of device
[ 3139.969117] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3139.970268] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:03:15 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x9, 0x7a, 0xff, 0x0, 0x2, 0x8, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x3, 0x6, 0x8, 0x4c, 0xc03, 0x4be, 0x0, 0x5, 0x0, 0xffffffffffffff81}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
mq_open(&(0x7f0000000200)='\\\x8c\x00', 0x40, 0x170, &(0x7f0000000240)={0x100000000, 0xc864, 0x54e2, 0x1})

15:03:15 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045878, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:03:15 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x510a)

15:03:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80086601, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:03:30 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:03:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x28e, 0x0)

15:03:30 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:30 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xa081e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0xe1, 0x0, 0x0, 0x7, 0x1b6}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000002c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r2=>0x0}], 0x6, "1b05d36653b867"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000012c0)={0x0, r2, "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", "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"})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x2, 0x0, 0x100000000, 0x80})
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r3=>r1, {0x101}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)

15:03:30 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:03:30 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc008240a, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

[ 3154.602017] loop0: detected capacity change from 0 to 40
15:03:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x520a)

15:03:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0xa1a, 0x0)

15:03:30 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:03:30 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

[ 3154.838238] syz-executor.0: attempt to access beyond end of device
[ 3154.838238] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3154.839277] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:03:44 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x80087601, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:03:44 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2c, 0x0, "2188cb56d2c6d7c3cb039ce05251927cefbff75132b646fe4a10e67f8a8af5b0cd0ad33775433a8210e3ec942d9a08085b2360047136feb25c13fab77f09dd0cca8aa63ed79aacc62b355189b46775a4"}, 0xd8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r1, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r1, r1, 0x0, 0x100000)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:03:44 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x5, &(0x7f0000000740)=[{&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:03:44 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0189436, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:03:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x7}, 0x2240, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f5ffffff5200010200aa807ad7bb6bf608e27148e354267321507826e878c15e2644d20c70c60dac399a6f01d1ea2697086055f1128c1084770b6d8ac961611490a441a8b091690a2a42ec3e804952568b0300a923f234d1e84fe1f303822be1ec10b380e42c4bd296baf6ace84aa0aa8bdccb3f2846b21135ba994941ae0b026c34e07f3b92814a2b4e6069f14837"], 0x28}}, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x8, 0x8, 0x9, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x884, 0x2f3, 0x9, 0x2, 0x8, 0x9, 0x0, 0x0, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0xb, r1, 0x7a0e6286dbb25da1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:03:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x1a0a, 0x0)

15:03:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0xd600)

[ 3169.214876] loop0: detected capacity change from 0 to 40
15:03:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000)

15:03:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x8e02, 0x0)

15:03:44 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc020660b, &(0x7f0000000240)='t@\x00')
epoll_create(0x0)

15:03:44 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfff8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe0}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:03:44 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:03:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x80000, 0x0)

[ 3169.379718] syz-executor.0: attempt to access beyond end of device
[ 3169.379718] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3169.381770] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:03:44 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x1000000)

15:03:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x801c581f, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:07 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r0, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r0, r0, 0x0, 0x100000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r1, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r1, r1, 0x0, 0x100000)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)

15:04:07 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x1000000, 0x0)

15:04:07 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x0, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:04:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045878, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

[ 3192.175146] loop0: detected capacity change from 0 to 40
15:04:07 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = epoll_create(0x7)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = getpid()
r5 = getpid()
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000000)={r6})
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
kcmp(r1, r1, 0x0, r7, 0xffffffffffffffff)
kcmp(r1, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x40, 0x37, 0x1, 0x0, 0x1, 0x20004, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x0, @perf_config_ext={0x7}, 0x40000, 0x46, 0xfab2f412, 0x3, 0x0, 0xb7, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, r1, 0xd, r0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000498a8bcc4cd2cadcc00a1238ca45e3ed66c16f085503b1bea0915418a04eb1bc6e590abee033dd6dff1f1858563c4c88abf85128227eee304da278d0701c14e385a65c414ed69290655012c0b697c29aa269bf6c593"], 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)

15:04:07 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x14000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:07 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='!@\x00')
epoll_create(0x0)

15:04:07 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x2000000)

15:04:07 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:07 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\"@\x00')
epoll_create(0x0)

15:04:07 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x2000000, 0x0)

15:04:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045878, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:07 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x4000000)

15:04:08 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:08 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_io_uring_complete(0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x79b8b0b6]}, 0x8, 0x80800)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:04:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc008240a, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

[ 3192.487431] syz-executor.0: attempt to access beyond end of device
[ 3192.487431] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3192.488900] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:04:08 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='&@\x00')
epoll_create(0x0)

15:04:08 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x4000000, 0x0)

15:04:22 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9400000052000102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:04:22 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xc00e0000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:22 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x15010000)

15:04:22 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x0, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:04:22 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\'@\x00')
epoll_create(0x0)

15:04:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0189436, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:22 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x1a0a0000, 0x0)

15:04:22 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
pwrite64(r1, &(0x7f0000000140)="6fc0396b81bd070e2f65f2cfcfb13631250ab594cbbf07cec4c4bd815e1ba19e7153fefba9599b54a910fcfdf28834b5ba21e78db09de0a6813c6ce1278ec0b246cf01abdf449d02e0ccfac0460494d80313ed08d219d77b36b3eb1e300d917c2e8e678229a51f922aa0e8dfd4ddc5ca3f02e2d176d4aaa767c1d67d8af973d5a3bfaebd941558c927ecc83fceba2193a514ee5f21150825449c5dff5a6aa3cd4f451c75d14d4f7e3083b53dc503d3a847a9faf32f92", 0xb6, 0x8)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000240)=0x10000000)
r2 = pidfd_getfd(r0, r0, 0x0)
sendfile(r0, r2, &(0x7f0000000080)=0x6, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x294ee128)
shutdown(r3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="010023fb00e21100000082252d196002859d9ccc9bb3d60a22bc413888cfba2b821e53827ca4cd9a0c9844e51fd17f161336eb5bb93e0aa2ab911ab5a25dcb4c59f9688e5ee00419cf0c7d6aa4689893592ae2ec3b870ff15f44ced261daaa1383c6c71c5ac8d3ed87ee95159e992b7bd4abde99ef71f7431d647743caac0faa4136de07ecfb1857c24f115c4c157f2406cde24a700b4e8ccba606d5cbd9ebb9f216a72fc23b8bc991a710f04a163293dfe59c6d5a5728fbcec44e0999318ba3cbdfc07f353f570d4832f318a82fed71c8e75d76c4fe7b264acd9e75f436855d135d05"])
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x808781e74ab64c33, 0x7fffffc, 0x0)
fsmount(r4, 0x1, 0x2)
openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0xc0000, 0x4)

[ 3207.242220] loop0: detected capacity change from 0 to 40
15:04:22 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xc90b0000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:22 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:22 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0x8e020000, 0x0)

15:04:22 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x510a0000)

15:04:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc020660b, &(0x7f0000000240)='t@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

[ 3207.414801] syz-executor.0: attempt to access beyond end of device
[ 3207.414801] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3207.415950] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:04:23 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xff000000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='(@\x00')
epoll_create(0x0)

15:04:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0xfeffffff, 0x0)

15:04:38 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x0, &(0x7f0000000800)={[{@shortname_winnt}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@nonumtail}, {@shortname_lower}], [{@fowner_lt={'fowner<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

[ 3222.672624] loop0: detected capacity change from 0 to 40
15:04:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x520a0000)

15:04:38 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
r2 = signalfd(r1, &(0x7f0000000540)={[0x4]}, 0x8)
r3 = openat(r2, &(0x7f0000000580)='./file1\x00', 0x2300, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r6}], 0x1, 0x294ee128)
shutdown(r6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x1000}}, './file1\x00'})
fallocate(r5, 0x0, 0x0, 0x87ffffc)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x1fc, r7, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xaf}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xe4b8}, {0xc, 0x90, 0x4543}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x80000000}, {0xc, 0x90, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xa00000}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x85ad}, {0xc, 0x90, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x4}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r7, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x72}, {0x8, 0x15, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4040800)

15:04:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='!@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:38 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)=')@\x00')
epoll_create(0x0)

15:04:38 executing program 2:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r0, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r0, r0, 0x0, 0x100000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x111000, 0x10)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)=0xfffffffffffff801)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x1)
preadv(r3, &(0x7f0000002700)=[{0x0}], 0x1, 0x0, 0x80000001)
sendfile(r3, r3, 0x0, 0x100000)
setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0x40, 0x2)

15:04:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

[ 3222.759565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=48841 comm=syz-executor.4
15:04:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140)=0xfffffffe, 0x0)

15:04:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\"@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0xd6000000)

15:04:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:38 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvfrom(r0, &(0x7f0000000040)=""/131, 0x83, 0x1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2, 0x4}, 0x80)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
fcntl$setsig(r0, 0xa, 0xa)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))

[ 3222.937386] syz-executor.0: attempt to access beyond end of device
[ 3222.937386] loop0: rw=2049, sector=84, nr_sectors = 40 limit=40
15:04:38 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x2)

15:04:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='&@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

[ 3223.014017] syz-executor.0: attempt to access beyond end of device
[ 3223.014017] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3223.017676] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 3223.509505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=48841 comm=syz-executor.4
15:04:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='\'@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:52 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='|@\x00')
epoll_create(0x0)

15:04:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0xfeffffff)

15:04:52 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:04:52 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x4)

15:04:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)

15:04:52 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ca", 0x1}, {0x0}], 0x2, 0x7fffffc, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000001c0), 0x2)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r3}], 0x1, 0x294ee128)
shutdown(r3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_setup(0x10d9, &(0x7f00000000c0)={0x0, 0x24f9, 0x20, 0x3, 0x77}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180))
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="0100030eedb957d798b27cb2", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])

15:04:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000052000102"], 0x28}}, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1601, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r3=>0x0, 0x2b, 0x4, 0x1, 0x1, 0x47, @mcast1, @loopback, 0x40, 0x700, 0xb55, 0x69}})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc880)
syz_io_uring_setup(0x85f, &(0x7f0000000180)={0x0, 0x6cdf, 0x0, 0x0, 0xda, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

15:04:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0xfffffffe)

[ 3236.542677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=49391 comm=syz-executor.4
[ 3236.554423] loop0: detected capacity change from 0 to 40
[ 3236.583567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=49407 comm=syz-executor.4
15:04:52 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x8)

15:04:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x1000000000000)

15:04:52 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = epoll_create(0x7)
r2 = getpid()
r3 = getpid()
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100))
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000000)={r4})
kcmp(r0, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff}, 0x0, 0xffffffffffffffff, r5, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3f, 0x80, 0x2, 0x96, 0x0, 0x10001, 0x10, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x1}, 0x10, 0x4, 0x4, 0x1, 0x0, 0x7e00, 0x8, 0x0, 0x30343b2a, 0x0, 0x1}, r0, 0xa, r5, 0xb)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1428294afddf0102"], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)

[ 3236.703841] syz-executor.0: attempt to access beyond end of device
[ 3236.703841] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3236.705520] Buffer I/O error on dev loop0, logical block 31, lost async page write
15:04:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0f00000052000102"], 0x28}}, 0x0)

15:04:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x8000000000000)

15:04:52 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r1}], 0x1, 0x294ee128)
shutdown(r1, 0x0)
r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0x9, 0x100000001, 0x7b})

15:04:52 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='(@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:52 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t\"\x00')
epoll_create(0x0)

15:04:52 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x28e)

15:04:52 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x100000000000000)

15:04:53 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(0x0, 0x0, 0x8, 0x6, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000480), 0x0, 0x5}, {&(0x7f0000000240), 0x0, 0x5}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000000580)="786708f96bd8b1a5ea053cc981dad02ba9816f24e88bdb1c0ff5a3998b70d7fe643c1cfdb0a8a47e0488b31253040c56c57dafb895b6b65a7dc66f3dc9f3dd0041305454b7e82301acaa0d6da3f867fb0bf526be95e5f419ae7c7b1b6f1ba6cc34a1449e4cd1250f756e3237dc27ad097d8dbae07497dea9d03bee0b6b07129c2d4486653d06a1d65193695d3c06b3263a2661fe44461b38ddca438e67506a6156883bae61e31e70cc92aa8f29406422c76a45dd5ea5dfacc7502767e4f8330c44f6c4", 0xc3, 0x2}, {&(0x7f0000000680)="251d8ded548ffeb5746cb77660774bdc35faa6916ee63cd0864b3f04bb26ac0890c0867fceb5d4835ea14ac82c273c481174056b73ddb4d7db43dd6665cc832bfcbc35d9dbdbdd8141d6023e512bdd9e77ca4224ee", 0x55}], 0x2804808, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x294ee128)
shutdown(r4, 0x0)
sendfile(r2, r4, &(0x7f0000000000)=0x55, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
faccessat(r0, &(0x7f00000000c0)='./file1\x00', 0x80)
poll(&(0x7f0000000040)=[{r5}], 0x1, 0x294ee128)
shutdown(r5, 0x0)
fallocate(r5, 0x67, 0x0, 0xa4)
stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900))

15:04:53 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0xa1a)

15:04:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1000000052000102"], 0x28}}, 0x0)

15:04:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

15:04:53 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1100, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x200000000000000)

15:04:53 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)=')@\x00')
getpid()
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

15:04:53 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='t&\x00')
epoll_create(0x0)

15:04:53 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r1 = socket(0x9, 0x80000, 0x5)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0xe)

[ 3237.556962] loop0: detected capacity change from 0 to 40
[ 3237.763958] syz-executor.0: attempt to access beyond end of device
[ 3237.763958] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3237.766435] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 3264.697706] watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.4:49612]
[ 3264.698313] Modules linked in:
[ 3264.698549] irq event stamp: 5368327
[ 3264.698799] hardirqs last  enabled at (5368326): [<ffffffff8460144a>] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3264.699473] hardirqs last disabled at (5368327): [<ffffffff84490d7f>] sysvec_apic_timer_interrupt+0xf/0x90
[ 3264.700122] softirqs last  enabled at (5321116): [<ffffffff8118efbc>] __irq_exit_rcu+0xcc/0x110
[ 3264.700713] softirqs last disabled at (5321119): [<ffffffff8118efbc>] __irq_exit_rcu+0xcc/0x110
[ 3264.701298] CPU: 0 PID: 49612 Comm: syz-executor.4 Not tainted 6.2.0-next-20230303 #1
[ 3264.701827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3264.702379] RIP: 0010:___slab_alloc+0x2a5/0x1070
[ 3264.702715] Code: 0a 00 00 49 c7 46 28 00 00 00 00 48 c7 c6 0e 03 80 81 4c 89 f7 e8 0b 5d ad ff 4d 85 ed 74 06 e8 d1 a1 d2 ff fb 48 8b 44 24 30 <e9> ab fd ff ff 48 8b 45 00 be ff ff ff ff 48 8d 78 20 65 48 03 3d
[ 3264.703894] RSP: 0018:ffff88806ce099c8 EFLAGS: 00000202
[ 3264.704262] RAX: ffffea000116c200 RBX: ffff88806ce41bb0 RCX: ffffffff812cbd8f
[ 3264.704739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8180032f
[ 3264.705222] RBP: ffff888008fc0280 R08: 0000000000000001 R09: ffffffff877829c7
[ 3264.705703] R10: fffffbfff0ef0538 R11: 0000000000000001 R12: 00000000ffffffff
[ 3264.706181] R13: 0000000000000200 R14: ffff88806ce41bd0 R15: 0000000000000000
[ 3264.706655] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[ 3264.707191] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3264.707585] CR2: 00007f8e46226590 CR3: 000000000fd6e000 CR4: 0000000000350ef0
[ 3264.711668] Call Trace:
[ 3264.711863]  <IRQ>
[ 3264.712035]  ? kmalloc_reserve+0x169/0x270
[ 3264.712355]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3264.712769]  ? kmalloc_reserve+0x169/0x270
[ 3264.713092]  kmem_cache_alloc_node+0x2fd/0x330
[ 3264.713444]  kmalloc_reserve+0x169/0x270
[ 3264.713764]  __alloc_skb+0x129/0x330
[ 3264.714056]  ? __pfx___alloc_skb+0x10/0x10
[ 3264.714372]  ? __pfx_lock_acquire.part.0+0x10/0x10
[ 3264.714727]  ? __pfx___ieee80211_beacon_get+0x10/0x10
[ 3264.715115]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3264.715471]  ? trace_lock_acquire+0x170/0x1e0
[ 3264.715827]  __netdev_alloc_skb+0x72/0x370
[ 3264.716141]  __ieee80211_beacon_get+0x3d9/0x13c0
[ 3264.716505]  ? __pfx___lock_acquire+0x10/0x10
[ 3264.716846]  ? __pfx_lapic_next_deadline+0x10/0x10
[ 3264.717202]  ? clockevents_program_event+0x135/0x360
[ 3264.717586]  ieee80211_beacon_get_tim+0x99/0x540
[ 3264.718009]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[ 3264.718539]  ? hwsim_unicast_netgroup+0x5b0/0x630
[ 3264.719026]  ? lock_acquire.part.0+0xea/0x320
[ 3264.719470]  ? lock_is_held_type+0x9f/0x120
[ 3264.719907]  mac80211_hwsim_beacon_tx+0x1d3/0xb10
[ 3264.720387]  ? rcu_read_lock_sched_held+0x42/0x80
[ 3264.720880]  __iterate_interfaces+0x2d3/0x580
[ 3264.721335]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 3264.721873]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[ 3264.722396]  ieee80211_iterate_active_interfaces_atomic+0x73/0x1c0
[ 3264.723012]  mac80211_hwsim_beacon+0x105/0x200
[ 3264.723461]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 3264.723956]  __hrtimer_run_queues+0x54b/0xcb0
[ 3264.724433]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 3264.724932]  ? ktime_get_update_offsets_now+0x25a/0x360
[ 3264.725486]  hrtimer_run_softirq+0x14c/0x310
[ 3264.725936]  __do_softirq+0x258/0x8a2
[ 3264.726244]  __irq_exit_rcu+0xcc/0x110
[ 3264.726542]  irq_exit_rcu+0x9/0x20
[ 3264.726819]  sysvec_apic_timer_interrupt+0x6e/0x90
[ 3264.727181]  </IRQ>
[ 3264.727354]  <TASK>
[ 3264.727527]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3264.727919] RIP: 0010:__tlb_remove_page_size+0x32/0x480
[ 3264.728309] Code: 41 55 49 89 f5 41 54 55 53 48 89 fb e8 67 b0 d7 ff 48 8d 7b 18 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 aa 03 00 00 48 8b 6b 18 31 ff 48 89 ee e8 0a ac d7 ff 48 85
[ 3264.729546] RSP: 0018:ffff8880486976b8 EFLAGS: 00000246
[ 3264.729939] RAX: dffffc0000000000 RBX: ffff888048697ad8 RCX: 0000000000000000
[ 3264.730446] RDX: 1ffff110090d2f5e RSI: ffffffff8173d199 RDI: ffff888048697af0
[ 3264.730951] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 3264.731453] R10: 000000000000001f R11: 0000000000000001 R12: 000000000000001f
[ 3264.731959] R13: ffffea0000fa7840 R14: dffffc0000000000 R15: 000000000000001e
[ 3264.732481]  ? __tlb_remove_page_size+0x19/0x480
[ 3264.732839]  ? __tlb_remove_page_size+0x19/0x480
[ 3264.733200]  unmap_page_range+0x113b/0x2db0
[ 3264.733574]  ? __pfx_unmap_page_range+0x10/0x10
[ 3264.733940]  ? uprobe_munmap+0x20/0x570
[ 3264.734249]  unmap_single_vma+0x19a/0x2b0
[ 3264.734577]  unmap_vmas+0x233/0x390
[ 3264.734868]  ? __pfx_unmap_vmas+0x10/0x10
[ 3264.735190]  ? find_held_lock+0x2c/0x110
[ 3264.735500]  ? mlock_drain_local+0x1b5/0x3f0
[ 3264.735841]  ? __pfx_lock_release+0x10/0x10
[ 3264.736167]  ? trace_lock_acquire+0x170/0x1e0
[ 3264.736541]  exit_mmap+0x15e/0x960
[ 3264.736817]  ? __pfx_exit_mmap+0x10/0x10
[ 3264.737162]  ? delayed_uprobe_remove+0x27/0x230
[ 3264.737525]  mmput+0xd5/0x390
[ 3264.737786]  do_exit+0x9c6/0x2800
[ 3264.738050]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3264.738455]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3264.738853]  ? __pfx_do_exit+0x10/0x10
[ 3264.739168]  do_group_exit+0xd4/0x2a0
[ 3264.739464]  get_signal+0x23c8/0x2450
[ 3264.739770]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3264.740175]  ? __pfx_get_signal+0x10/0x10
[ 3264.740488]  ? __schedule+0xbb5/0x2a90
[ 3264.740801]  arch_do_signal_or_restart+0x79/0x590
[ 3264.741150]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 3264.741539]  ? perf_trace_preemptirq_template+0x252/0x420
[ 3264.741946]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 3264.742377]  exit_to_user_mode_prepare+0x122/0x190
[ 3264.742730]  syscall_exit_to_user_mode+0x1d/0x50
[ 3264.743058]  do_syscall_64+0x4c/0x90
[ 3264.743330]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3264.743683] RIP: 0033:0x7f7857342b19
[ 3264.743941] Code: Unable to access opcode bytes at 0x7f7857342aef.
[ 3264.744350] RSP: 002b:00007f78548b8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 3264.744855] RAX: 0000000000000000 RBX: 00007f7857455f68 RCX: 00007f7857342b19
[ 3264.745360] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7857455f6c
[ 3264.745867] RBP: 00007f7857455f60 R08: 000000000000000e R09: 0000000000000000
[ 3264.746367] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f7857455f6c
[ 3264.746872] R13: 00007fffe9ba92bf R14: 00007f78548b8300 R15: 0000000000022000
[ 3264.747403]  </TASK>
[ 3264.747582] Sending NMI from CPU 0 to CPUs 1:
[ 3264.747926] NMI backtrace for cpu 1 skipped: idling at default_idle+0xf/0x20

VM DIAGNOSIS:
15:05:20  Registers:
info registers vcpu 0
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff8250d045 RDI=ffffffff87f14e60 RBP=ffffffff87f14e20 RSP=ffff88806ce09278
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001
R12=0000000000000030 R13=ffffffff87f14e20 R14=0000000000000010 R15=ffffffff8250d030
RIP=ffffffff8250d09d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe28319c2000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe28319c0000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8e46226590 CR3=000000000fd6e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=000000000000000041887fda00000000 XMM03=00000000000000000000000000000000
XMM04=00000000005baf8600000000005babd9 XMM05=00000000005baf8600000000005babd9
XMM06=00000000005e6d7200000000005e6de0 XMM07=00000000005d38c200000000005d390c
XMM08=00000000005babd900000000005baa49 XMM09=00000000005baf8600000000005babd9
XMM10=00000000005baf8600000000005babd9 XMM11=00000000005baf8600000000005babd9
XMM12=00000000005e6d7200000000005e6de0 XMM13=00000000005d38c200000000005d390c
XMM14=00000000008a225100000000005d260c XMM15=00000000004643c100000000008a1267
info registers vcpu 1
RAX=0000000000a22af9 RBX=ffff888008da5040 RCX=ffffffff844922de RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff81285370 RBP=0000000000000001 RSP=ffff888008e1fe70
R8 =0000000000000001 R9 =ffff88806cf34f83 R10=ffffed100d9e69f0 R11=0000000000000001
R12=ffffed10011b4a08 R13=ffffffff85d28410 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff844932ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 ffff888000000000 00000000 00000000
TR =0040 fffffe2eabba1000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe2eabb9f000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005630db717648 CR3=000000000e0d4000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=746f72702f6374652f00656372000a23
XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=3270682820262620294c4c554e203d21 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000