f reserved sectors
[ 2457.608440] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 2457.640263] Process accounting resumed
[ 2457.676442] kworker/u4:1: attempt to access beyond end of device
[ 2457.676442] loop5: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2457.678111] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2457.781493] syz-executor.1: attempt to access beyond end of device
[ 2457.781493] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2457.783175] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:26:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r2=>0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x54, 0x76709a8e5462e6fc)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)=ANY=[@ANYBLOB="9e84a96b7ef97f1818000000", @ANYRES32=<r5=>r0, @ANYBLOB="00000000010000002e2f66696c653100"])
kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r3, &(0x7f0000000280)={r4, r5, 0x100})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x20007}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 68)

23:26:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f00000003c0)="25091fc60907aab0ddb4d55caa1fb7adeb8492968d9ecbef371d4d1abd113e8589a5eee7c99bfb81d122af76134e39e2ccc99e81a9e490f595f7b2489de623524d37c5a6b9a0803c8de537bebce93d917166f757f2275c68eae9d76e51d6455ab24a16eb827e9fd7bc294747d2ad720bbc0a28c35be631704db001a6e70ffa621719d31b9b5368bb54e7091e4c0bb14ef81bbccbbdece9c2b8eba9fea80a4f2891c3fa55db46c30c0a701922b6f182a504dc9d2a74df921de6c45dc05e3a48a97950")
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

[ 2471.903492] loop2: detected capacity change from 0 to 40
23:26:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {r1}}, './file1\x00'})
openat(r2, &(0x7f0000000040)='./file0\x00', 0x441400, 0x2291f6dd0c94e59)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

23:26:10 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:26:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x107042, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x460400, 0x90)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2, 0xff, 0x87, 0x4, 0x0, 0x5, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4804, 0x4, @perf_config_ext={0x1, 0x100000000}, 0x1c0c0, 0x0, 0x5, 0x3, 0x5, 0xff, 0x9, 0x0, 0xfffff7f0, 0x0, 0x500000000}, 0xffffffffffffffff, 0xd, r1, 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000000), 0x0, 0x7fffff8, 0x0)

[ 2471.919889] loop5: detected capacity change from 0 to 40
[ 2471.923623] loop6: detected capacity change from 0 to 40
23:26:10 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x4}, r0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2471.987094] syz-executor.2: attempt to access beyond end of device
[ 2471.987094] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2471.988291] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2471.997084] loop1: detected capacity change from 0 to 40
[ 2472.023611] loop4: detected capacity change from 0 to 40
23:26:10 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = gettid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6e, 0x2, 0x0, 0x1, 0x0, 0x452b, 0x1900, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x50, 0x101, 0x10001, 0x9, 0x4, 0x400, 0x2f2, 0x0, 0x1, 0x0, 0x1}, r1, 0xb, r0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2472.081774] kworker/u4:1: attempt to access beyond end of device
[ 2472.081774] loop5: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2472.082652] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:26:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x100000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x1, 0xff, 0x7, 0x0, 0x80, 0x1a299d356455ca11, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x800, 0x4c}, 0x8680, 0xfa6, 0x0, 0x4, 0xff, 0x9, 0xfe, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x10)
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x8, 0x2, 0x3}, 0xb47}}, 0x18)

23:26:10 executing program 4:
socket$nl_audit(0x10, 0x3, 0x9)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
openat(r1, &(0x7f0000000240)='./file1\x00', 0x4000, 0x4)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x0, 0x1f, &(0x7f0000000000)="e5afbeef40cc207a8b818043569f420d9dc552e5e507ee7a7a3cdf64d17839", 0x1}, {0x80, 0x1000, &(0x7f00000003c0)="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"}, {0x75, 0xa5, &(0x7f00000013c0)="5cba9447a424e59917e8012e5cc87dcb49dd8ef037f23325cce0ac52a2c55899712d77a7a095236f6e8580b986280700c2ad0e561708e793af5e50888c0d09dab7e4c479c125ea38acb85684b592ecf95d9ea25b164c6f84710466d748cebced6d7f1961affb2b11e45443c64ed7699f5e11f1e87025d3f703e9dddeadc65237ada256aa2f094c5beff21d346e47ef3fe7edcd09ac6d7b478ac59941740fcfd2449a69bd00", 0x1}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(r3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2472.195453] loop2: detected capacity change from 0 to 40
[ 2472.202464] syz-executor.1: attempt to access beyond end of device
[ 2472.202464] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2472.204099] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2472.210521] loop4: detected capacity change from 0 to 40
[ 2472.215899] loop5: detected capacity change from 0 to 40
[ 2472.226031] syz-executor.2: attempt to access beyond end of device
[ 2472.226031] loop2: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2472.231503] FAULT_INJECTION: forcing a failure.
[ 2472.231503] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2472.233057] CPU: 0 PID: 35246 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221208 #1
[ 2472.233830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2472.234594] Call Trace:
[ 2472.234849]  <TASK>
[ 2472.235080]  dump_stack_lvl+0x8f/0xb7
[ 2472.235470]  should_fail_ex.cold+0x5/0xa
[ 2472.235884]  prepare_alloc_pages+0x178/0x500
[ 2472.236339]  __alloc_pages+0x149/0x500
[ 2472.236733]  ? __pfx___alloc_pages+0x10/0x10
[ 2472.237174]  ? __pfx___lock_acquire+0x10/0x10
[ 2472.237633]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2472.238115]  alloc_pages+0x1a0/0x260
[ 2472.238491]  filemap_alloc_folio+0x32a/0x410
[ 2472.238927]  ? __filemap_get_folio+0x254/0xc90
[ 2472.239405]  ? __pfx_lock_release+0x10/0x10
[ 2472.239829]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2472.240309]  ? xas_start+0x157/0x6a0
[ 2472.240686]  ? xas_load+0x6a/0x140
[ 2472.241059]  __filemap_get_folio+0x32c/0xc90
[ 2472.241502]  ? __pfx___filemap_get_folio+0x10/0x10
[ 2472.241991]  ? __mark_inode_dirty+0x68c/0xe70
[ 2472.242460]  pagecache_get_page+0x2e/0x130
[ 2472.242876]  ? __pfx_fat_get_block+0x10/0x10
[ 2472.243321]  block_write_begin+0x35/0x450
[ 2472.243734]  ? lock_release+0x3b6/0x750
[ 2472.244140]  cont_write_begin+0x4fe/0x700
[ 2472.244563]  ? __pfx_fat_get_block+0x10/0x10
[ 2472.245000]  ? __pfx_cont_write_begin+0x10/0x10
[ 2472.245456]  ? __mark_inode_dirty+0x68c/0xe70
[ 2472.245933]  fat_write_begin+0x89/0x180
[ 2472.246323]  ? __pfx_fat_get_block+0x10/0x10
[ 2472.246771]  generic_perform_write+0x25a/0x580
[ 2472.247260]  ? __pfx_generic_perform_write+0x10/0x10
[ 2472.247746]  ? __pfx_fat_update_time+0x10/0x10
[ 2472.248195]  ? __pfx_file_update_time+0x10/0x10
[ 2472.248671]  ? generic_write_checks+0x2c0/0x400
[ 2472.249139]  __generic_file_write_iter+0x308/0x4b0
[ 2472.249377] syz-executor.2: attempt to access beyond end of device
[ 2472.249377] loop2: rw=2049, sector=108, nr_sectors = 4 limit=40
[ 2472.249611]  ? do_sendfile+0xb1d/0x1280
[ 2472.250844]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 2472.251330]  generic_file_write_iter+0xe7/0x350
[ 2472.251808]  do_iter_readv_writev+0x211/0x3c0
[ 2472.252272]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2472.252776]  ? avc_policy_seqno+0xd/0x70
[ 2472.253187]  ? security_file_permission+0xb5/0xe0
[ 2472.253669]  do_iter_write+0x18b/0x700
[ 2472.254066]  ? lock_is_held_type+0xdb/0x130
[ 2472.254521]  vfs_iter_write+0x74/0xb0
[ 2472.254914]  iter_file_splice_write+0x73e/0xcb0
[ 2472.255399]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2472.255907]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2472.256431]  ? inode_security+0x105/0x140
[ 2472.256872]  ? security_file_permission+0xb5/0xe0
[ 2472.257346]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2472.257853]  direct_splice_actor+0x113/0x180
[ 2472.258285]  splice_direct_to_actor+0x33a/0x8c0
[ 2472.258746]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2472.259514]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2472.260252]  ? security_file_permission+0xb5/0xe0
[ 2472.260972]  do_splice_direct+0x1bc/0x290
[ 2472.261582]  ? __pfx_do_splice_direct+0x10/0x10
[ 2472.262287]  ? lock_is_held_type+0xdb/0x130
[ 2472.262939]  do_sendfile+0xb1d/0x1280
[ 2472.263577]  ? __pfx_do_sendfile+0x10/0x10
[ 2472.264242]  __x64_sys_sendfile64+0x248/0x2a0
[ 2472.264900]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2472.265618]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2472.266350]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2472.267095]  do_syscall_64+0x3f/0x90
[ 2472.267636]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2472.268364] RIP: 0033:0x7f076f651b19
[ 2472.268886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2472.270281] syz-executor.2: attempt to access beyond end of device
[ 2472.270281] loop2: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2472.271311] RSP: 002b:00007f076cbc7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2472.271354] RAX: ffffffffffffffda RBX: 00007f076f764f60 RCX: 00007f076f651b19
[ 2472.272205] Buffer I/O error on dev loop2, logical block 26, lost async page write
[ 2472.273175] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2472.273202] RBP: 00007f076cbc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2472.273225] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2472.273249] R13: 00007ffc52d32f1f R14: 00007f076cbc7300 R15: 0000000000022000
[ 2472.273320]  </TASK>
23:26:10 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x28b8c9f, 0x0)
acct(0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f0000000540)=[{&(0x7f0000000180)="529c19cd7b1dfbce95f8457d07ac6b35977ade65292736450cded8f83a4dae62956283e4799fd730205a603abfe12c4bdd450c82fac5c5387bff71811f3bbf66368d0c738571334bb7df8cc229b37df2bd59ab11463fd456709124076bfc5887303aecabd0cc0c302c22dab37ffb0bb8a3326724f299d8", 0x77}, {&(0x7f0000000300)="b6ba06703eb9d2718bef97259e1c03bc512d06f81549383bc6076f0a052c398e7f476e5b00858f53013432e29183c5a97e4e0d86317a863b63321973433162ac2a185a20b672da963d69cdb449804ab1af0aaa45b65d5bc4475456dac4db4db692091b12227f436411d80f04b5b408e03fe8dfa5a1adc680d33a2e19746726c854d0c14d4ce0885718d4df4628113b4a71bd5cdcbc7aa3b597cabb091976f54b8e075c0d46bf5e22a3622e0ce798f0fc20dfa55a009ff4aa17532de3dfe93ce980a15dffca7b24c3bb909c115020af4c379081f5b46291", 0xd7, 0x1}, {&(0x7f0000000400)="a78b2dfa70c544bfd193682bc5c23ea43469704944116d540d94384a28bdb8ca68605a2136feef419692431db99e25c863578d5800411957b01c", 0x3a, 0x8000}, {&(0x7f0000000440)="9d2be604ba2210f1d2e1f376d94a187579457632be6590332465adeb4f139e6cef3d9f9c6542fecfa1f3db90a6ae03af6803a284df2c705fd0848ff12f4470a91d474c8f85c09d88551c4cd70f1d1b3043532dc2b06f38e7f1cfa356991b97c738c76ac891212719476d58ac98e6f268290be4978885f7385f24bf12c2fd3dde6d75f4e8ca43a134957d5cd8682d9198eaf7eb59b842485a2326e1daf0f9822ab91a6df2abcd5477d9afef5dcb34a077654bf36e13d88c246f8d9253b9c3892d9ac22f7f8dec1da0effa4691a3703f060b5f9aed7b04dd7241240010ec06c9cbf32ebeb044852def", 0xe8, 0x8001}], 0x8, &(0x7f00000005c0)={[{@dots}, {@dots}, {@fat=@debug}], [{@measure}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_user}]})
syncfs(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r2, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2472.290621] syz-executor.1: attempt to access beyond end of device
[ 2472.290621] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2472.292001] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2472.328264] syz-executor.2: attempt to access beyond end of device
[ 2472.328264] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2472.329276] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2472.340498] syz-executor.5: attempt to access beyond end of device
[ 2472.340498] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2472.341823] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2472.373200] syz-executor.5: attempt to access beyond end of device
[ 2472.373200] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2472.374719] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2472.421873] Buffer I/O error on dev loop4, logical block 10, lost async page write
23:26:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x4, 0x40, 0x3215, 0x3a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x7, 0xfffffff8, 0xe33}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6_vti0\x00', r4, 0x4, 0x1, 0x3f, 0x100, 0x2bea5b216236179d, @dev={0xfe, 0x80, '\x00', 0x30}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x80, 0x8001, 0x8000}})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080))
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:10 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r1 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x2, 0x1, 0x5, 0x7, 0x0, 0x0, 0x8020, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000180), 0x5}, 0x4, 0x9, 0x81, 0x1, 0x2, 0xffffffea, 0x7f, 0x0, 0x1, 0x0, 0xff}, r1, 0xd, r0, 0x2)
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x3, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1c940, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x2, 0x254}, 0x40, 0x8, 0x4, 0x5, 0x9, 0x8, 0x9, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x3, r2, 0x8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100)=@v3={0x3000000, [{0x7, 0x6ac}, {0xffffffff, 0x9a69}], r3}, 0x18, 0x2)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4600000, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x5, 0x40, 0x49, 0x0, 0x7f, 0x1, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x200, 0x0, 0x13da, 0x0, 0x2, 0xa6, 0x101, 0x0, 0xffff}, 0x0, 0x7, 0xffffffffffffffff, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:10 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000180), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)=""/128, 0x80}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="1c008000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x70}, 0x40012160)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2472.466739] loop1: detected capacity change from 0 to 40
[ 2472.477080] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2472.489567] Process accounting resumed
[ 2473.352368] loop2: detected capacity change from 0 to 40
23:26:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x40, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2488.110726] loop2: detected capacity change from 0 to 40
[ 2488.128331] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777±_­à·c'ÄGÛÍfRàÏÔ	«¡³º•I˘~¯Ú™–Jt}‹UôàâôØÀj«NÕ•[°7žªhji€Êï™âÕРìÿÝþÙYbpl" or missing value
23:26:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r0, r2, &(0x7f0000000000)=0x2, 0x80000001)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 69)

23:26:26 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a0108a080101000440002000f801", 0x17}, {0x0, 0x0, 0x8}], 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYBLOB="b15f1fade015b76327c447dbcd6652e07fcfd4131a09aba1b316ba9549cb0811987eafda99964a747d8b5515f4e00ee2f4067fd8c06aab1d4ed5955bb037149eaa686a6980caef99e2d5d0a0ecffddfed95962706c003e694c7b91c2f4456379ebee9a1a7810800863b4e8d54817fe25155555aa37aa8e075b5a8b1b5b251201dc3fd4e5d6fff90c2c6a"])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x502100, 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:26 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:26 executing program 4:
socket$nl_audit(0x10, 0x3, 0x9)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
name_to_handle_at(r1, &(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x2, 0x4, 0x81, 0xffff7dff}}, &(0x7f0000000100), 0x0)
futimesat(r1, &(0x7f0000000180)='./file1/file0\x00', &(0x7f0000000280)={{}, {0x0, 0x2710}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:26 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}], 0x1, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2488.135245] loop6: detected capacity change from 0 to 40
[ 2488.139511] loop5: detected capacity change from 0 to 40
[ 2488.175688] loop4: detected capacity change from 0 to 40
23:26:26 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2488.299166] bio_check_eod: 6 callbacks suppressed
[ 2488.299196] syz-executor.2: attempt to access beyond end of device
[ 2488.299196] loop2: rw=2049, sector=108, nr_sectors = 16 limit=40
[ 2488.314203] syz-executor.2: attempt to access beyond end of device
[ 2488.314203] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2488.315528] buffer_io_error: 2 callbacks suppressed
[ 2488.315538] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2488.329208] syz-executor.5: attempt to access beyond end of device
[ 2488.329208] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2488.330211] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2488.356381] syz-executor.6: attempt to access beyond end of device
[ 2488.356381] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2488.357619] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2488.367525] syz-executor.2: attempt to access beyond end of device
[ 2488.367525] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2488.368374] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2488.381044] syz-executor.5: attempt to access beyond end of device
[ 2488.381044] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2488.382069] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:26:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 70)

23:26:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
openat(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:26 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)=')', 0x1}])
r5 = epoll_create(0x4)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0002000})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='attr/sockcreate\x00')
r8 = inotify_init()
io_submit(0x0, 0x4, &(0x7f0000001480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x800, 0xffffffffffffffff, &(0x7f00000003c0)="1ba39dd58529b2fa40c1a4adf0c7a0e914a8a4d935bdbb2181af714302849bde48b07a357225359bd31db4bf74e9a0d6b99e1de70edb66fe70a92aa8acd5340461c9a55f4f62c3952462eb82c227374ea562df112f1254837b1f7e95e2e57d894d61cc93fed6ca0a71721629dcce587b8102a46130468c1a3cb7ae47d2e3522fec03fafd2ce1fa70fff2a231ccd75aed014b736e29b30ecd37e03e0201f2ac008f9bee5ddbfc0c1c", 0xa8, 0x1, 0x0, 0x1, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x2, r3, &(0x7f0000000040)="3e815f8b98a8a60d4a7c80b6ad09a4b1092db22a4f3435338cb0dc03816389ec04", 0x21, 0x436, 0x0, 0x1, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xfff9, r0, &(0x7f00000001c0)="ea8ac70c265e388e4ee5c4059276ee759da8f6de15062c2afa38", 0x1a, 0x8, 0x0, 0x2, r7}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x8, r8, &(0x7f0000000480)="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", 0x1000, 0x3}])
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2488.573346] loop6: detected capacity change from 0 to 40
[ 2488.574563] loop2: detected capacity change from 0 to 40
[ 2488.597139] loop5: detected capacity change from 0 to 40
[ 2488.628801] syz-executor.5: attempt to access beyond end of device
[ 2488.628801] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2488.676375] syz-executor.5: attempt to access beyond end of device
[ 2488.676375] loop5: rw=2049, sector=108, nr_sectors = 4 limit=40
[ 2488.755053] syz-executor.6: attempt to access beyond end of device
[ 2488.755053] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2488.756335] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2488.806344] kworker/u4:5: attempt to access beyond end of device
[ 2488.806344] loop5: rw=1, sector=112, nr_sectors = 4 limit=40
[ 2488.808003] Buffer I/O error on dev loop5, logical block 28, lost async page write
[ 2488.809238] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2488.853442] Process accounting resumed
[ 2488.890789] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2488.964133] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777±_­à·c'ÄGÛÍfRàÏÔ	«¡³º•I˘~¯Ú™–Jt}‹UôàâôØÀj«NÕ•[°7žªhji€Êï™âÕРìÿÝþÙYbpl" or missing value
23:26:43 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc0200, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540))
setresuid(0x0, r4, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
getgroups(0x1, &(0x7f0000000440)=[<r6=>r2])
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r7}, {0x8, 0x4}, {0x8, 0x2, r7}, {0x8, 0x1, r7}, {0x8, 0x2, r7}, {0x8, 0x4}, {0x8, 0x0, r7}, {0x8, 0x5, r7}, {0x8, 0x7, r7}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
fsetxattr$system_posix_acl(r3, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x5}, [{0x2, 0x2, r1}, {0x2, 0x5, r4}, {0x2, 0x6, r1}, {0x2, 0x4, r1}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x6, r5}], {0x4, 0x4}, [{0x8, 0x2, r2}, {0x8, 0xe, r2}, {0x8, 0x4, r6}, {0x8, 0x1, r7}], {0x10, 0x4}, {0x20, 0x4}}, 0x74, 0x1)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, &(0x7f0000000100), 0x1000000, &(0x7f0000000340))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/41, 0x29}, {&(0x7f0000000280)=""/185, 0xb9}], 0x2, 0x7fff, 0x4)

23:26:43 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, <r0=>0x0}, &(0x7f00000004c0)=0xc)
mount$9p_unix(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000500)={'trans=unix,', {[{@access_uid={'access', 0x3d, r0}}, {@afid={'afid', 0x3d, 0x1}}, {@loose}, {@cache_fscache}, {@posixacl}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/211, 0xd3}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x100)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000004980), 0x468000, 0x0)
connect$unix(r2, &(0x7f00000049c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:43 executing program 4:
socket$nl_audit(0x10, 0x3, 0x9)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2504.921024] loop6: detected capacity change from 0 to 40
23:26:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x5, 0x1, 0xfd, 0x0, 0x7fffffff, 0x400, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x18140, 0xf1b, 0x8001, 0x5, 0x7, 0xfffffff8, 0x2, 0x0, 0x400, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4038f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x108)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xaad3)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:43 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
acct(0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0xa9232579592eab6c, 0x7fffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 71)

23:26:43 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}], 0x1, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2504.942778] loop4: detected capacity change from 0 to 40
[ 2504.960771] 9pnet_fd: p9_fd_create_unix (36058): problem connecting socket: ./file1: -2
[ 2505.014414] loop1: detected capacity change from 0 to 40
[ 2505.018188] loop5: detected capacity change from 0 to 40
[ 2505.021902] 9pnet_fd: p9_fd_create_unix (36064): problem connecting socket: ./file1: -111
[ 2505.028943] loop2: detected capacity change from 0 to 40
[ 2505.195931] bio_check_eod: 3 callbacks suppressed
[ 2505.195960] syz-executor.2: attempt to access beyond end of device
[ 2505.195960] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2505.198545] Buffer I/O error on dev loop2, logical block 10, lost async page write
23:26:43 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4ca1f11d1fc32654}, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x475f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2505.204215] syz-executor.4: attempt to access beyond end of device
[ 2505.204215] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2505.206278] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2505.259833] syz-executor.2: attempt to access beyond end of device
[ 2505.259833] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2505.261563] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2505.299376] syz-executor.1: attempt to access beyond end of device
[ 2505.299376] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2505.301330] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2505.370016] kworker/u4:5: attempt to access beyond end of device
[ 2505.370016] loop5: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2505.370229] syz-executor.6: attempt to access beyond end of device
[ 2505.370229] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2505.371708] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2505.375176] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:26:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000018000000", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
openat(r2, &(0x7f0000000040)='./file0\x00', 0x40040, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chroot(&(0x7f00000013c0)='./file0\x00')
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x1f, 0x8, 0xf1, 0x0, 0x0, 0x0, 0x10800, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xd8c, 0x100000000}, 0x10100, 0x6, 0x20, 0x5, 0x1000, 0x7, 0x4, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x10, r4, 0x3)
flistxattr(r2, &(0x7f00000003c0)=""/4096, 0x1000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x18801, 0x0)
ioctl$KDENABIO(r6, 0x4b36)

[ 2505.468297] syz-executor.1: attempt to access beyond end of device
[ 2505.468297] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2505.470144] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:26:43 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)

23:26:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 72)

23:26:43 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
recvmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000180), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/38, 0x26}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000600)=""/5, 0x5}], 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="010000001400000000080000aa72ee325dae370100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38}, 0x2000)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = memfd_secret(0x80000)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r6, r4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r6, {0x4, 0x8001}}, './file1\x00'})
openat(r2, &(0x7f0000000000)='./file0\x00', 0x26001, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2505.574914] loop5: detected capacity change from 0 to 40
23:26:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r0, r2, &(0x7f0000000000)=0x2, 0x80000001)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2505.712847] loop6: detected capacity change from 0 to 40
[ 2505.736345] loop1: detected capacity change from 0 to 40
[ 2505.801989] syz-executor.5: attempt to access beyond end of device
[ 2505.801989] loop5: rw=2049, sector=108, nr_sectors = 16 limit=40
[ 2505.811117] syz-executor.5: attempt to access beyond end of device
[ 2505.811117] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2505.813140] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2505.881985] syz-executor.5: attempt to access beyond end of device
[ 2505.881985] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2505.883231] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:26:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0)

[ 2505.929140] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2506.079214] Process accounting resumed
23:26:59 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x0, 0xee01}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2520.918609] loop1: detected capacity change from 0 to 40
[ 2520.925346] loop2: detected capacity change from 0 to 40
23:26:59 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={'trans=unix,', {[{@access_client}, {@cache_loose}, {@access_user}, {@version_L}], [{@euid_lt={'euid<', 0xee01}}]}})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:59 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/147, 0x93}, {&(0x7f0000000000)=""/69, 0x45}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000004bc0)=""/4096, 0x1000}], 0xa, &(0x7f0000000940)=[{&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000800)=""/118, 0x76}, {&(0x7f0000005bc0)=""/4096, 0x1000}, {&(0x7f0000000880)=""/159, 0x9f}], 0x8, 0x0)
lsetxattr$security_evm(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "3052af048234a38da04a7efca31dbdd5"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r0, r2, &(0x7f0000000000)=0x2, 0x80000001)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
sendmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2bab, @local, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="121e499010f2c378a6d28e168c014a1fc38a081d34ab3de7ba15f6c355c55092e581598133b0050c3fc0320766e823b522d0a27133bd0a16e3571e2a1d0d463ab6c96fc18d445d43989371ca0777f259ee8affb4257706fd67207e4db2bd8cad70af78f3c89c4e507fc1221dea2a4d84858edb30e1137be4076775b7a5fcf21a3696ad19f0d0572e9eb64a3e6697945bad07c56f2e17cfdc4fa9e7b87e5fcc89ee17f8a7c39a48d0d7d7a7eeef425e9456528bad91fc850a787e7e3c799062074a0305d342709fcbea731f0e67f6e66d3e42186bac93848331931f8cb53df313bab81284dd665dbebc482bc8caa1", 0xee}], 0x1}}], 0x1, 0x8000)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:59 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}], 0x1, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:26:59 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x2c8}}, './file1\x00'})
sendfile(r2, r1, 0x0, 0xfffffdef)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={<r4=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r8=>0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={r9, 0x3})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000))
pwritev(r11, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:26:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 73)

[ 2520.948292] loop5: detected capacity change from 0 to 40
[ 2520.990628] loop6: detected capacity change from 0 to 40
[ 2520.998298] loop4: detected capacity change from 0 to 40
[ 2521.006393] 9pnet_fd: p9_fd_create_unix (36729): problem connecting socket: ./file0: -111
[ 2521.034756] 9pnet_fd: p9_fd_create_unix (36755): problem connecting socket: ./file0: -111
[ 2521.036141] bio_check_eod: 3 callbacks suppressed
[ 2521.036154] syz-executor.2: attempt to access beyond end of device
[ 2521.036154] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.037990] buffer_io_error: 2 callbacks suppressed
[ 2521.038000] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2521.055514] syz-executor.5: attempt to access beyond end of device
[ 2521.055514] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.057025] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2521.078169] syz-executor.2: attempt to access beyond end of device
[ 2521.078169] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.079091] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2521.085165] syz-executor.1: attempt to access beyond end of device
[ 2521.085165] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.087104] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:26:59 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x7, 0x80, 0x0, 0x20, 0x2, 0x8, 0x0, 0x9, 0x88000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x800, 0x5, 0x1c, 0x2, 0x9, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2b64b838}, 0x0, 0x2, r0, 0x2)
r1 = fork()
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r2=>0x0)
pidfd_open(r2, 0x0)
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2521.150751] syz-executor.1: attempt to access beyond end of device
[ 2521.150751] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.151542] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:26:59 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0xfffff2f8, 0x0, 0x0, 0x4}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x1)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00')
lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$security_ima(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@ng={0x4, 0x7, "fc07aec3b3011e53f52af3ae23ba9b0d0655fefa"}, 0x16, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
unlink(&(0x7f0000000100)='./file0\x00')

23:26:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
fallocate(r0, 0x12, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffff0260}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)=0x3)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x1, 0x40, 0xc1, 0x0, 0x7fff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x4d}, 0x1034, 0x800, 0x4, 0x2, 0x7, 0x853, 0x811, 0x0, 0x6, 0x0, 0x5}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8)
sendfile(r4, r3, 0x0, 0xfffffdef)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x464100, 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2521.227508] syz-executor.4: attempt to access beyond end of device
[ 2521.227508] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2521.228950] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2521.247573] loop2: detected capacity change from 0 to 40
23:26:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b6466d8a02b000801090000000000000001", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x1000, &(0x7f00000003c0)="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", 0x3e, 0x0, &(0x7f0000000000)="00255d15dafda11e9509f49af9ef7e5d22e1b00f1abce85b30472961780521747268c77c2d14b2b440fe31192a97c23ef89984fb0f3048c48a1e5b243445"})

23:26:59 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x3, &(0x7f0000000480)=[{&(0x7f0000000180)="9f2d3f8edcc845ef5d74ad785105526674180009a1e08552a23a126c7b8f43523b4bbae9841abfb7a6cc7acea0f3be58f90e7d955af37740430fb2187b34621f049d71135543", 0x46, 0x7}, {&(0x7f0000000300)="cef6d9cdcae64fd75bcf97202db16e50951a20873b7d6b54670de2078f9f736cc4bbf13cc9c57dc350c9b9710fc585c20ba8e1979587546f40751a649b0e7e858e516af113d4941c9bf302d0594250f27ae0483c9136d4b9ea40e125704e763982b701a2e527945e58e1716307718d", 0x6f, 0x7ff}, {&(0x7f00000003c0)="2efe8b25180453cd049d5f41ae2a7e91beba7d7d5f66efe8d457caa0f774a74919620038cad6ea87df7c444bd0ff2086de0f632006ee24ab3026e281b7497499658519e74c31ca00037717c4576e3f138886f059fa58d61aa485244b9377a1419ed37da1bfdf63107c8da162b80a5f3350e746979bd955ef44cdb9b3bcb560e94a9ba8d7e4c4fa6ff21f8c096e7f5a7a06", 0x91, 0x4}], 0xcd1, &(0x7f0000000500)={[{@nonumtail}, {@utf8no}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@rodir}, {@utf8}, {@rodir}], [{@fsmagic={'fsmagic', 0x3d, 0x9}}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}]})
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0', [{0x20, '\\:]{$+-:'}, {0x20, '%)!'}], 0xa, "d878ccbbaa8e28f11e97b0f52c5155e90be6b276cb9b3111f6c2f68065b7e503737b34260a2d7be1d97d71cdd603954ff0b18f1c2cc7f37e591f8d377cc825c66b6ba843cd3bdcbd2f46a7e300d18d54d7010f39bfba48fc5c22bff69e27f95342dc39774eae1725f4"}, 0x81)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]})
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendfile(r2, r1, 0x0, 0xfffffdef)
setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)='system_u:object_r:faillog_t:s0\x00', 0x1f, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2521.297162] syz-executor.6: attempt to access beyond end of device
[ 2521.297162] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2521.299092] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2521.314947] Process accounting resumed
[ 2521.343360] loop1: detected capacity change from 0 to 40
[ 2521.353483] FAT-fs (loop1): bogus number of reserved sectors
[ 2521.354401] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2521.370352] syz-executor.2: attempt to access beyond end of device
[ 2521.370352] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.371518] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2521.383240] Process accounting resumed
[ 2521.436935] syz-executor.2: attempt to access beyond end of device
[ 2521.436935] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.438756] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2521.448397] loop5: detected capacity change from 0 to 40
[ 2521.473029] Process accounting resumed
23:26:59 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {0x0}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:26:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 74)

[ 2521.519582] tmpfs: Bad value for 'mpol'
23:26:59 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:26:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
bind$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:00 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x603}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x80000001, 0x0, "9f6e221b484c7b30acaa4b6a00"})
r1 = syz_io_uring_setup(0x137, &(0x7f00000001c0), &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000240))
io_uring_enter(r1, 0x100001, 0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000540))
close(0xffffffffffffffff)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000100))
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xc, 0xa0, 0xba, 0x7, 0x0, 0x7, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x101, 0x0, 0x3, 0x0, 0x3, 0x0, 0x6, 0x0, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
fcntl$getflags(r0, 0x3)
r2 = dup(0xffffffffffffffff)
fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
pipe(0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20028810)

23:27:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r0, r2, &(0x7f0000000000)=0x2, 0x80000001)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2521.718154] loop2: detected capacity change from 0 to 40
[ 2521.726014] loop6: detected capacity change from 0 to 40
[ 2521.758983] syz-executor.5: attempt to access beyond end of device
[ 2521.758983] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2521.760507] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2521.822022] tmpfs: Unknown parameter 'mpol€'
[ 2521.932144] loop4: detected capacity change from 0 to 40
23:27:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
fallocate(r0, 0x24, 0x5, 0x3f)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x1440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xeedb, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r6, r5, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000300)="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", 0xfb}], 0x1, 0x7fffff8, 0x4)

[ 2522.137460] loop2: detected capacity change from 0 to 40
[ 2522.189742] loop1: detected capacity change from 0 to 40
[ 2522.200809] FAT-fs (loop1): bogus number of reserved sectors
[ 2522.201602] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 2522.435488] Process accounting resumed
23:27:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
bind$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2538.100167] loop5: detected capacity change from 0 to 40
[ 2538.114146] bio_check_eod: 6 callbacks suppressed
[ 2538.114157] syz-executor.5: attempt to access beyond end of device
[ 2538.114157] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2538.115375] buffer_io_error: 5 callbacks suppressed
[ 2538.115384] Buffer I/O error on dev loop5, logical block 10, lost async page write
23:27:16 executing program 5:
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
openat(r3, &(0x7f0000000180)='./file1\x00', 0xb4800, 0x104)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1, 0x0)

23:27:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00', <r4=>0x0})
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, r4}, 0xc)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x2, 0xfffe, 0x800, 0x400, 0x5, 0x0, r4})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x20, 0x81, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105000, 0x2)
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:16 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x88, 0x19, 0x1f, 0x9, 0x0, 0xffff, 0x8110, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x7}, 0x3108, 0x2, 0xfffffff8, 0x5, 0x2, 0x9a, 0x40, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r0, 0x8)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:27:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
fork()
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:27:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 75)

23:27:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./file1\x00', 0x44)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e23, 0xf9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8f2b}, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4467}, 0x400, [0x1, 0x0, 0x1, 0xc2, 0x7, 0x6, 0xb0, 0x2]}, 0x5c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:16 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {0x0}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2538.123195] loop4: detected capacity change from 0 to 40
[ 2538.133935] syz-executor.4: attempt to access beyond end of device
[ 2538.133935] loop4: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2538.137144] loop1: detected capacity change from 0 to 40
[ 2538.139278] syz-executor.5: attempt to access beyond end of device
[ 2538.139278] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2538.140146] Buffer I/O error on dev loop5, logical block 10, lost async page write
23:27:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x4a}, {0x0, 0x0, 0x2800}], 0x100, &(0x7f0000000300)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x400)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000040), 0x100078, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'root'}}]}})

[ 2538.198127] loop2: detected capacity change from 0 to 40
[ 2538.204385] loop6: detected capacity change from 0 to 40
23:27:16 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x7)
chroot(&(0x7f0000000000)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x4000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80800)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
sendfile(r0, r2, &(0x7f0000000200)=0x200, 0x7)

23:27:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
sendmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2bab, @local, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="121e499010f2c378a6d28e168c014a1fc38a081d34ab3de7ba15f6c355c55092e581598133b0050c3fc0320766e823b522d0a27133bd0a16e3571e2a1d0d463ab6c96fc18d445d43989371ca0777f259ee8affb4257706fd67207e4db2bd8cad70af78f3c89c4e507fc1221dea2a4d84858edb30e1137be4076775b7a5fcf21a3696ad19f0d0572e9eb64a3e6697945bad07c56f2e17cfdc4fa9e7b87e5fcc89ee17f8a7c39a48d0d7d7a7eeef425e9456528bad91fc850a787e7e3c799062074a0305d342709fcbea731f0e67f6e66d3e42186bac93848331931f8cb53df313bab81284dd665dbebc482bc8caa1", 0xee}], 0x1}}], 0x1, 0x8000)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2538.235013] kworker/u4:4: attempt to access beyond end of device
[ 2538.235013] loop4: rw=1, sector=108, nr_sectors = 16 limit=40
[ 2538.236217] kworker/u4:4: attempt to access beyond end of device
[ 2538.236217] loop4: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2538.237029] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2538.291208] loop5: detected capacity change from 0 to 40
[ 2538.303128] syz-executor.1: attempt to access beyond end of device
[ 2538.303128] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2538.305189] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2538.319062] loop4: detected capacity change from 0 to 40
[ 2538.380332] syz-executor.1: attempt to access beyond end of device
[ 2538.380332] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2538.382259] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2538.406550] syz-executor.5: attempt to access beyond end of device
[ 2538.406550] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2538.408145] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:27:16 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x2, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="387d17857b6bf588d2367893ccfb2b7a277c82563e048ea0ad619f0cbb2c119c8a69b967408e3d4914715efd03fd5fd38b256a44d5b1cb069c7a93ed49286bf850265f96caa383ed80b58d179bffd3470795d75c37648d89cebff242526d12ef3fabdc61e3f5c8aaa070d7b3d56e1c158130d487b8dc43e3b55eece9ab9aeddc1d5046a1e09095ffa21d9fb7d6", 0x8d, 0x1}, {&(0x7f0000000300)="38e4b9b313a3d3ca661ffd3cb3e0c120b465d524f5fa1b2b26ee6d196594a32bd8fcb708688286ab1e38c5874bd09397dcd4e5a024acfd69f02378af2e382c4c3e01b5a6d680c20b35acf37bad3c2a0b72327f375a3ada445c9effefd19348b29e68bff59200cc39e258fb27d6c68c9c4817342fe74c0555907a1268d679ad15b8c4be3603e303606e9cdc367d", 0x8d, 0x100}, {&(0x7f00000003c0), 0x0, 0x8}], 0x40004, &(0x7f0000000480)={[{}, {}, {'}]{/\\'}, {':]'}, {',{*@'}, {'\\,,'}, {'p$'}, {'$\x05.{'}, {'$'}], [{@dont_appraise}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@context={'context', 0x3d, 'system_u'}}]})

[ 2538.448224] syz-executor.5: attempt to access beyond end of device
[ 2538.448224] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2538.449135] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2538.514195] syz-executor.4: attempt to access beyond end of device
[ 2538.514195] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2538.515468] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2538.563524] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2538.626554] Process accounting resumed
23:27:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 76)

23:27:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
sendmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2bab, @local, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="121e499010f2c378a6d28e168c014a1fc38a081d34ab3de7ba15f6c355c55092e581598133b0050c3fc0320766e823b522d0a27133bd0a16e3571e2a1d0d463ab6c96fc18d445d43989371ca0777f259ee8affb4257706fd67207e4db2bd8cad70af78f3c89c4e507fc1221dea2a4d84858edb30e1137be4076775b7a5fcf21a3696ad19f0d0572e9eb64a3e6697945bad07c56f2e17cfdc4fa9e7b87e5fcc89ee17f8a7c39a48d0d7d7a7eeef425e9456528bad91fc850a787e7e3c799062074a0305d342709fcbea731f0e67f6e66d3e42186bac93848331931f8cb53df313bab81284dd665dbebc482bc8caa1", 0xee}], 0x1}}], 0x1, 0x8000)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:30 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x180)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x1)

23:27:30 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = getuid()
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x8, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000300)="f5c3ff09ba9cf0ed8f84c19a6411437559c81548dad9798ebc4d2cf3785c2f4522397e105d2ebfcf1c5fe56fa20b77918054e33d7bd1377317c0afc8461366b69c8a39346f056aa8fe68b8d1ba7628bd0c304d2024f501de9bb0dfb65ddd20f220dcae8e51cb91b554331dbb8b6e4186d3a4b95f438aa88ad298b46768c75f45c66167513a42cd45360c843f14d139bd4096e556800dab08f2eefdc2e9f75173088c4f7c0cd6d07f9bb2cca19b48f5d8a97a4d7d5d671077236a618ce61e21e22de201104aff13840d9a42fe666d03ac42844b82e7cb9145", 0xd8, 0x2a6}, {&(0x7f0000000240)="d125a80674540d37e6462367531605fb56079894e1cc8c7ba95e3defeb46ccc4fc1d01845b893cd6daf398eee5f7b0a9986e25cf1e21c1", 0x37, 0x5}, {&(0x7f0000000400)="624273af35b6f7c9d55e2ebd8977fe4de4d90f723355cae2d505e473a787c52aa42428ada39acf7426f782cf7cace98bac97a6655b5e72830e920ce3aab62d31268eb6f93f5cba892a6c43769232c2c017cdda177e744340e48c5f69f98c23e75d5467c594ef7e24380fc2c0da9a4696a0013cabaed842bd16c95437dd7c902e4f41621e38d809d2dfb97b9a0b002c815a5592a50d87e83955155fe15a60062cdb8d", 0xa2, 0x6}, {&(0x7f00000004c0)="5dbd5e4045a796a62052a338fdbab1d848519368624a316d6192a30205c28170425bc9039be6a4f876021abda98aa1a543dea569c5983a97862c43f19236f5ef14d228d2be7dc28bb0fd5fa71cd88d8cacffffe3d3d26c3f353291744608f28d5d884454bbbe11295f7f81d3646598e477fea891eaefe207ed9e5c4c6b0ae954cfb64a902e6147d45513bdc981fb446b24c8c6150384de4faba061024c4c0208cf2c71f5ee2c86f93cd690d3b8ea77d6575fbbd2c277e5f996dd37453d4460a0cafc0275711ea43b4091e297cc6395e5e7d709d34051e321d936acb118814026cf9a0ead063a9c5e9d6187133ab7a582be6fd978", 0xf4}, {&(0x7f00000005c0)="709f3d3d6d73d0ea4f9be7dad195ecc138948416dfa9c52526a08a6ef80d728ce60642f0bd5c876664a1208bc752b813b0ad0eb5706d0544c1550eee3148f30ff08e28265371e47aed5f9d41b4e4048aaa0209595f50a1b846f3a1aaa58dc0485fbaa1e627cfab656de78014f08bb7195c058cac0bceaac551a812c748fb85278747b973d0cabd210fe501f4dd5ef536f12e379765fe2df33a7c752e0cd1731441240b371a461760b4fafa3488e81ac631206d0d19456c0bb9bc908ec96deb0c47ca82c0d50514e933d00f5bbe0909118d10201965843da4893a9bc3c963ee357d6741", 0xe3, 0x29b}], 0x24404, &(0x7f0000000740)={[{@nodots}, {@dots}, {@dots}, {@fat=@errors_remount}], [{@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@dont_hash}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, ',]+[%'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '%{!!]\\&\x96~'}}, {@uid_lt={'uid<', r0}}, {@smackfstransmute}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:27:30 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {0x0}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2551.840868] loop4: detected capacity change from 0 to 40
[ 2551.851238] loop1: detected capacity change from 0 to 40
[ 2551.852512] FAT-fs (loop1): Unrecognized mount option "00000000000000000000000" or missing value
23:27:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000180))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x9aea, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000000)={0x7fffffff, 0xffffffc1})

[ 2551.859837] loop5: detected capacity change from 0 to 40
[ 2551.884584] loop6: detected capacity change from 0 to 40
[ 2551.908922] loop2: detected capacity change from 0 to 40
23:27:30 executing program 0:
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000400)={0x4})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
r3 = dup2(r2, r0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x2, 0x10})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x5, 0x9, 0x0, 0x9, 0x0, 0xfffffffffffffe00, 0x2100, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x81, 0xd5}, 0x6800, 0x3, 0x8, 0x5, 0x10000, 0x4, 0x1, 0x0, 0x7, 0x0, 0xfffffffffffffffa}, 0x0, 0x3, r4, 0x2)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$int_out(r6, 0xfca0, &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="060000267012d275017c910000000000"])
fchdir(r0)

[ 2551.995175] bio_check_eod: 1 callbacks suppressed
[ 2551.995191] syz-executor.2: attempt to access beyond end of device
[ 2551.995191] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2551.996444] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2552.076403] syz-executor.5: attempt to access beyond end of device
[ 2552.076403] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2552.078627] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2552.149083] syz-executor.6: attempt to access beyond end of device
[ 2552.149083] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.150259] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2552.192132] syz-executor.5: attempt to access beyond end of device
[ 2552.192132] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2552.193950] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:27:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10000, 0x150)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 77)

23:27:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
sendmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2bab, @local, 0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f00000003c0)="121e499010f2c378a6d28e168c014a1fc38a081d34ab3de7ba15f6c355c55092e581598133b0050c3fc0320766e823b522d0a27133bd0a16e3571e2a1d0d463ab6c96fc18d445d43989371ca0777f259ee8affb4257706fd67207e4db2bd8cad70af78f3c89c4e507fc1221dea2a4d84858edb30e1137be4076775b7a5fcf21a3696ad19f0d0572e9eb64a3e6697945bad07c56f2e17cfdc4fa9e7b87e5fcc89ee17f8a7c39a48d0d7d7a7eeef425e9456528bad91fc850a787e7e3c799062074a0305d342709fcbea731f0e67f6e66d3e42186bac93848331931f8cb53df313bab81284dd665dbebc482bc8caa1", 0xee}], 0x1}}], 0x1, 0x8000)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2552.318370] loop2: detected capacity change from 0 to 40
23:27:30 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:27:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x1, 0x1, 0x2, 0x8, 0x0, 0x27, 0x195088, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f65, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10202, 0x7, 0x200, 0x5, 0x100000001, 0x1a61, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r0, 0x2)
r1 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2552.390114] loop4: detected capacity change from 0 to 40
[ 2552.422972] loop6: detected capacity change from 0 to 40
[ 2552.447163] syz-executor.2: attempt to access beyond end of device
[ 2552.447163] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.448317] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2552.464336] syz-executor.2: attempt to access beyond end of device
[ 2552.464336] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 2552.472532] syz-executor.2: attempt to access beyond end of device
[ 2552.472532] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2552.473991] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:27:30 executing program 5:
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x67, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 'ovf\x00', 0x15, 0x8, 0x32}, 0xffffffffffffffe9)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601ca02b00080100000440003200f801", 0x10}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r2 = syz_open_dev$hidraw(&(0x7f00000001c0), 0x7, 0x200000)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000340)={0x9, 0x10, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0]})
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x101}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ftruncate(r5, 0x3f)
write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x34709957, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r6, r3, 0x0, 0xfffffdef)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4000, @fd, 0x9, 0x1f, 0x0, 0x0, 0xffcb411bab791894, {0x3}}, 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r7, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2552.547128] loop5: detected capacity change from 0 to 40
[ 2552.568734] FAT-fs (loop5): bogus number of FAT structure
[ 2552.569161] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 2552.616904] Process accounting resumed
[ 2552.669365] syz-executor.4: attempt to access beyond end of device
[ 2552.669365] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.670509] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2552.677506] loop1: detected capacity change from 0 to 40
[ 2552.681846] FAT-fs (loop1): Unrecognized mount option "00000000000000000000000" or missing value
[ 2552.752205] syz-executor.6: attempt to access beyond end of device
[ 2552.752205] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2552.753230] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2553.369937] loop5: detected capacity change from 0 to 40
[ 2553.382670] FAT-fs (loop5): bogus number of FAT structure
[ 2553.383208] FAT-fs (loop5): Can't find a valid FAT filesystem
23:27:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
sendfile(r2, r3, &(0x7f0000000000)=0xff, 0x5)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:56 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f0000000640)}], 0x1, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:27:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 78)

23:27:56 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)="a8eddea14041e5482500cacf3f158e3ccb4c50ff0086035f720ffea73ef7244f22cece1c4186b32815a09163cf261a7381c2b75fd185eec778915f288dfbb52d4640ea6d19e8d793a5879244320db6a4e933756bd2631b2cc12c8cb104583bacb76e2dff1989a23208ae4c4db3e2c68d71433ae278182f7a2bbd342821721d295f0e779c9a7707e218e7326fb90dda1e3d4f3ac858b2ab9c7e2fcf441863e4dfe334e0efa534a5d9284b135c6d00e77a908a25a2b8688949aea916e3cae2e53d8f66362336ede3a72d9cdf9400c8f72f47", 0xd1}, {&(0x7f0000000000)="bee56f70b7d8ff8e0352", 0xa}, {&(0x7f0000000380)="e9b6c77314354e2b37ce85fb8ca68abefe997ae3706a622e170af2af746230cd40119b0a00580ee0e634581dc06b059f5d711a48a84b316fbab22ec6dd31aeae25ab867993b56161286262ce40d3bb1c026b570390a8625798fb76bc25d3e111d872f27cbd1c65c79b61d15054c4bcbaa24c64b2d8fecabbf0054b451ef05974fa8141a253fc7c9a6697a8c803e5", 0x8e}, {&(0x7f0000000440)="26266c2bc0c1c42d861df82594f825cdb86eda9c4d71013c821d49fc5bfe96a6dcc5306bf8bf875ddd5990e6562de891cb01e447bf38177cfbb9238a8908868baa251c565ea0c70b9ce39ec2a7e719c6078467f6f35264a28e36c025cb97c75ab67eb01dd7585c66ecee8f", 0x6b}, {&(0x7f0000000040)="ac7d", 0x2}], 0x5, 0x3d2b6988, 0x8)
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0xfffffffa)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x99c7}}, './file0\x00'})
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2578.318412] loop6: detected capacity change from 0 to 40
23:27:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc2, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2578.337569] loop5: detected capacity change from 0 to 40
23:27:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40252}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:27:56 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1, 0x3f, 0xbd, 0x6f, 0x0, 0x40, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x80, 0x6, 0x3, 0x3, 0x8, 0x4, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x10, r1, 0x8)

23:27:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10000, 0x150)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2578.473218] loop4: detected capacity change from 0 to 40
[ 2578.477157] loop1: detected capacity change from 0 to 40
[ 2578.485089] loop2: detected capacity change from 0 to 40
[ 2578.562224] syz-executor.5: attempt to access beyond end of device
[ 2578.562224] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2578.564140] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2578.644380] syz-executor.6: attempt to access beyond end of device
[ 2578.644380] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2578.646412] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2578.646478] syz-executor.1: attempt to access beyond end of device
[ 2578.646478] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2578.650213] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2578.706331] syz-executor.2: attempt to access beyond end of device
[ 2578.706331] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2578.708231] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2578.721814] syz-executor.1: attempt to access beyond end of device
[ 2578.721814] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2578.723521] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:27:57 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x4, 0x2, 0x0, 0x0, 0x8, 0x8001, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x28, 0x0, 0xb458, 0x9, 0x401, 0xbd, 0x7ff, 0x0, 0x1ff, 0x0, 0x2}, 0x0, 0x9, r1, 0xa)
r2 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:27:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 79)

23:27:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x5, 0x81, 0x20, 0x0, 0x7, 0x40800, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x100, 0xb800, 0x1, 0x8, 0x0, 0xa6cf, 0x5, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2578.946561] syz-executor.4: attempt to access beyond end of device
[ 2578.946561] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2578.948181] Buffer I/O error on dev loop4, logical block 10, lost async page write
23:27:57 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x410100, 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000040)='vfat\x00', 0x0, r2)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2578.982911] loop6: detected capacity change from 0 to 40
[ 2579.002190] loop5: detected capacity change from 0 to 40
23:27:57 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup(0xffffffffffffffff)
name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x9, 0x1, 0x6, 0xff, 0x1d, 0x9}}, &(0x7f00000001c0), 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1f}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
acct(0x0)

[ 2579.040237] loop1: detected capacity change from 0 to 40
23:27:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10000, 0x150)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2579.145369] syz-executor.5: attempt to access beyond end of device
[ 2579.145369] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2579.147269] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2579.205365] syz-executor.5: attempt to access beyond end of device
[ 2579.205365] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2579.207089] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2579.210398] syz-executor.1: attempt to access beyond end of device
[ 2579.210398] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2579.212289] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:27:57 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2579.298886] loop4: detected capacity change from 0 to 40
23:27:57 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x0, &(0x7f0000000340)={0x800000, 0x0, 0x1})
r4 = gettid()
r5 = getpid()
rt_tgsigqueueinfo(r5, r4, 0x1000000, &(0x7f0000000340)={0x35, 0xfffffffe, 0x9ef})
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x4000)
kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r0, &(0x7f0000000040)={r1, r6, 0x88})
sendfile(r2, r1, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fdfff8, 0x0)

[ 2579.313755] syz-executor.1: attempt to access beyond end of device
[ 2579.313755] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2579.315344] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:27:57 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', &(0x7f0000000740)={0x6000, 0x10, 0x2}, 0x18)
ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000780)={{r3}, "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"})
recvmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000580)=""/191, 0xbf}], 0x7, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x20)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2579.455216] loop2: detected capacity change from 0 to 40
[ 2579.561571] Process accounting resumed
23:27:57 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f0000000640)}], 0x1, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:27:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 80)

23:27:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaacc0, &(0x7f0000000000), 0x101098, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x8, 0xffffffff7fffffff, 0x3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
signalfd4(r1, &(0x7f0000000000)={[0x1f]}, 0x8, 0x80800)
r3 = eventfd2(0x5, 0x801)
fallocate(r3, 0x8, 0x10001, 0x100)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x242200, 0x84)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2, 0x3f, 0x7f, 0x5e, 0x0, 0x1, 0x20, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x1, 0x27, 0x81, 0x3, 0x9, 0x3, 0xff80, 0x0, 0x9, 0x0, 0x6472b9db}, 0x0, 0x7, 0xffffffffffffffff, 0x8)
fcntl$getown(r1, 0x9)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0xfffffffe)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000003c0)={{0x0, 0x0, 0x5, 0x1, 0x2, 0x1, 0x80000001, 0x9, 0x6, 0x5, 0x1000, 0x81, 0x9, 0x0, 0x4}})

23:27:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x2, r5}, {0x8, 0x1, r5}, {0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x0, r5}, {0x8, 0x5, r5}, {0x8, 0x7, r5}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x7, r3}, {0x2, 0x0, r4}], {0x4, 0x3}, [{0x8, 0x5, r5}], {0x10, 0xc}}, 0x3c, 0x2)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2579.704896] loop6: detected capacity change from 0 to 40
[ 2579.725589] loop1: detected capacity change from 0 to 40
23:27:58 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
timer_getoverrun(0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:27:58 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x8, 0x1, 0x81, 0xf3, 0x0, 0x8, 0x480, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3409, 0x2, @perf_config_ext={0x0, 0x5}, 0x4000, 0x1000, 0x55, 0x2, 0x80, 0x8, 0xfffc, 0x0, 0x4, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:27:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r1, &(0x7f0000001880)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/234, 0xea}, {&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f0000000540)=""/173, 0xad}, {&(0x7f0000000600)=""/113, 0x71}, {&(0x7f0000000680)=""/194, 0xc2}], 0x5, &(0x7f0000000800)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000008c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000a00)=""/116, 0x74}, {&(0x7f0000000a80)=""/80, 0x50}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000240)=""/63, 0x3f}, {&(0x7f0000000b00)=""/212, 0xd4}, {&(0x7f0000000c00)=""/10, 0xa}, {&(0x7f0000000c40)=""/205, 0xcd}, {&(0x7f0000000d40)=""/198, 0xc6}], 0x9, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c018000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001040)=""/62, 0x3e}, {&(0x7f0000001080)=""/113, 0x71}, {&(0x7f0000001100)=""/254, 0xfe}, {&(0x7f0000001200)}], 0x4, &(0x7f0000001280)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/91, 0x5b}], 0x1, &(0x7f0000001380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000013c0), 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/125, 0x7d}], 0x1}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001800), 0x0, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x7, 0x40000000, &(0x7f0000001a40))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x6, 0x5, 0x0, 0x3, 0x54028, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x300, 0x40, 0x2, 0x8, 0x2, 0x8, 0xe12, 0x0, 0x1, 0x0, 0x5}, r2, 0xa, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(r3, &(0x7f0000001200)='./file1/file0\x00', 0x40080, 0x40)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2579.930789] loop2: detected capacity change from 0 to 40
[ 2580.199017] Process accounting resumed
23:28:15 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:28:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10000, 0x150)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:15 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f0000000640)}], 0x1, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:28:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x7ff, 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1e)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)="003116c1072ce40dd0c7c166b45ca1f588bb89cf928c416d9fab8aafd11a0dbcf21ce2fd850bdd1fa016b546fdd24c69743401de280ac58815a9f67c097da0a4a29983cd55f35348618354d858d5645cbdc48f841187a071689be6543bbb23db74a9e985862e88ccec9af5d6e1501950dc8e48555992aa2484d968a685ec36cf392ac9b375820c6903bf256be0e90ae7e4c73894fc6c8fe3", 0x1}], 0x100000000000000e, 0x7fffff4, 0x0)

23:28:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x7ff, 0x0, 0x2, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:15 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000440)=""/166, 0xa6}], 0x4, 0x80000001, 0x2)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:28:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000340)=0xc)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r4}, {0x8, 0x4}, {0x8, 0x2, r4}, {0x8, 0x1, r4}, {0x8, 0x2, r4}, {0x8, 0x4}, {0x8, 0x0, r4}, {0x8, 0x5, r4}, {0x8, 0x7, r4}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000003c0)="c6c2bfc9b2c86afd268ce5db2c8121116f4c4b85d0b9d809ccfc2c56e87cd05df6d791ade0055b99be68683363ccee9023b23ade8eb6ccb8814bc8373b80b47ee18745ecef40fba9b3a0fd541144f88f3469e6e2080ac78466a420c9cc21b91f28a4392f049b3feb67640badade2428bdede4bdda1dcb528a996302ee624b387dedca9bd08f6d60dc520722731368fc2c77ae830bf87b1467677a3e778ea2abae6f2d4d16f", 0xa5}, {&(0x7f0000000480)="888cebefd1744335042e363ed98e13462139803c11975ab08f7da05fe81fa2f9d45bdb3d8eb28bebd0d51c27ed424b74c096b8bcff0598bbfc78383334e0c5d180ceba6515cead1eb2ed4bcbab14c32124e48e12190a925f0cea6f10da9de7030f1d99debd94a1a213af72f36fc488f846277943d25e849de04e8098a376673eade9ff8b", 0x84}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}], 0x40, 0x80}}, {{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000600)="10924e4d06abf3baa7a8c31a40b49700b245bdeee069879f1c1cc528b9a35dfcd90cff3bfdce8d74e5aac7b68990309d645e19e5b8d706186cc23f3ac38a5366a420044f0fda5b22dc3588ace5ae3d1420321211016a69485feee8a05fbfd25f50c609756758a03b9c343874fc272797a52d88e4ba4e409604b7b3c5f41b1a9afff10b76ca9cbead3aaeb6be50157fe0701ed93359ff84fc4857b04fa8610d07ae32f15a438e542c1a9d78b5ce16ec0e382866851b29bbef6efb9bd9fbe16a1e74780129124a49f11372281d5ffa93dfa5464c08ce244a", 0xd7}], 0x1, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)="7357a7828cfe78e678608ad07a5ccb280175905baf5dda3a304359c5405826e6dbbcfd235c5ebac86f8ab6f4257b644700ef63c6daac34484f00076aeb38069d", 0x40}, {&(0x7f0000000800)="51e6fb4c36abf810a5ccaaf5ec006c47c4aaeaf35f79689c5ce7a9318c3b6c8d0c46893e60d08ec8a21bb5a6324a2d39dff88e2df8fc19b8a077d3857ecdcfd056ceebd4e26199e5c52a225e4c86aeaee4f7bab662392006b121fc5e6908f90e25c97d144a834367074a5735ec0e48e8ed1dc054c2a86c54f22ccbbf0ab826d375f149d0cafc32a1091e29", 0x8b}], 0x2, 0x0, 0x0, 0x10}}], 0x3, 0x20000840)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r6 = epoll_create(0x4)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0002000})
ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000000)={{r1}, {@void, @actul_num={@void, 0x25c0, 0x54}}})

23:28:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 81)

[ 2597.244425] loop4: detected capacity change from 0 to 40
[ 2597.252449] loop6: detected capacity change from 0 to 40
[ 2597.267392] loop1: detected capacity change from 0 to 40
[ 2597.278953] loop5: detected capacity change from 0 to 40
[ 2597.328818] loop2: detected capacity change from 0 to 40
23:28:15 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x3, 0x400001)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x3}}, './file0\x00'})
open$dir(&(0x7f0000000000)='./file0\x00', 0x410000, 0x20)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0xfffffffffffffea1, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{}, {&(0x7f0000000180)=""/95, 0x5f}, {&(0x7f0000000300)=""/147, 0x93}, {&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000000100)=""/6, 0x6}], 0x5}, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={<r2=>0x0}, &(0x7f0000000680)=0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x20, 0x0, 0x4, 0xa1, 0x0, 0x8001, 0x2021, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000580), 0xb}, 0x48000, 0x1, 0x3, 0x0, 0xfffffffffffff800, 0xf7, 0x1000, 0x0, 0x6, 0x0, 0xcab}, r2, 0xd, r3, 0x8)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2597.405482] bio_check_eod: 7 callbacks suppressed
[ 2597.405497] syz-executor.5: attempt to access beyond end of device
[ 2597.405497] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2597.408403] buffer_io_error: 7 callbacks suppressed
[ 2597.408414] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2597.465506] syz-executor.5: attempt to access beyond end of device
[ 2597.465506] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2597.466595] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2597.473126] syz-executor.6: attempt to access beyond end of device
[ 2597.473126] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2597.474311] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:28:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x2, r5}, {0x8, 0x1, r5}, {0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x0, r5}, {0x8, 0x5, r5}, {0x8, 0x7, r5}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x7, r3}, {0x2, 0x0, r4}], {0x4, 0x3}, [{0x8, 0x5, r5}], {0x10, 0xc}}, 0x3c, 0x2)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2597.503571] syz-executor.2: attempt to access beyond end of device
[ 2597.503571] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2597.506102] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2597.509968] syz-executor.1: attempt to access beyond end of device
[ 2597.509968] loop1: rw=2049, sector=76, nr_sectors = 48 limit=40
[ 2597.511267] syz-executor.1: attempt to access beyond end of device
[ 2597.511267] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2597.512270] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:28:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180)=@sha1={0x1, "ff0e91fddab6f3df6e13505a64aaa731bd5a282d"}, 0x15, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffd}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2597.546191] syz-executor.1: attempt to access beyond end of device
[ 2597.546191] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2597.547155] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2597.577483] syz-executor.2: attempt to access beyond end of device
[ 2597.577483] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2597.579380] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:28:15 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
timer_getoverrun(0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:28:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 82)

23:28:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24, 0x3)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', <r2=>0x0, 0x29, 0x5, 0xb3, 0xffffffff, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x0, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r2, 0x2d, 0x0, 0x6, 0x6, 0x2, @private2, @empty, 0x8000, 0x80, 0x4c, 0x3}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2597.681542] loop5: detected capacity change from 0 to 40
[ 2597.733874] loop1: detected capacity change from 0 to 40
23:28:16 executing program 2:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040))
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x7a3040, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2597.772900] loop6: detected capacity change from 0 to 40
23:28:16 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
timer_getoverrun(0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2597.865939] syz-executor.1: attempt to access beyond end of device
[ 2597.865939] loop1: rw=2049, sector=108, nr_sectors = 16 limit=40
[ 2597.870401] syz-executor.5: attempt to access beyond end of device
[ 2597.870401] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2597.872039] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2597.872994] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2597.904298] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2598.116320] Process accounting resumed
23:28:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
sendfile(r4, r2, &(0x7f0000000180)=0x8f827b4, 0xb161)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:31 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x80, 0x20, 0x81, 0x3c, 0x0, 0x5, 0x86208, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10419, 0x8, 0x3, 0x2, 0x3ff, 0x4, 0x4, 0x0, 0x8f, 0x0, 0x5}, 0x0, 0x8, r0, 0x2)
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
r3 = getuid()
lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x2, r5}, {0x8, 0x1, r5}, {0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x0, r5}, {0x8, 0x5, r5}, {0x8, 0x7, r5}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
r6 = getpgid(r1)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x0, r3, r2, r4, r5, 0x40, 0x2be3}, 0x6, 0x1f, 0x5, 0x4, r6, r1, 0x2})
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:28:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0xe3)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd4(r2, &(0x7f0000000040)={[0xdd8]}, 0x8, 0x80800)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r6, r4)
close(r4)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x2, r5}, {0x8, 0x1, r5}, {0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x0, r5}, {0x8, 0x5, r5}, {0x8, 0x7, r5}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x7, r3}, {0x2, 0x0, r4}], {0x4, 0x3}, [{0x8, 0x5, r5}], {0x10, 0xc}}, 0x3c, 0x2)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 83)

23:28:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x10001, 0x0, &(0x7f0000000180)=[r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r5]}, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')

23:28:31 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:28:31 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x2c8}}, './file1\x00'})
sendfile(r2, r1, 0x0, 0xfffffdef)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={<r4=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r8=>0x0, ""/256, <r9=>0x0, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x5, "af2f1a9317bc6f"})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={r9, 0x3})
r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000))
pwritev(r11, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2613.197531] loop4: detected capacity change from 0 to 40
[ 2613.204156] loop2: detected capacity change from 0 to 40
[ 2613.206271] loop1: detected capacity change from 0 to 40
[ 2613.213195] loop5: detected capacity change from 0 to 40
[ 2613.215527] loop6: detected capacity change from 0 to 40
[ 2613.256207] bio_check_eod: 4 callbacks suppressed
[ 2613.256222] syz-executor.5: attempt to access beyond end of device
[ 2613.256222] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2613.286182] syz-executor.2: attempt to access beyond end of device
[ 2613.286182] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2613.287005] buffer_io_error: 2 callbacks suppressed
[ 2613.287016] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2613.333017] syz-executor.1: attempt to access beyond end of device
[ 2613.333017] loop1: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2613.366083] syz-executor.2: attempt to access beyond end of device
[ 2613.366083] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2613.366969] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2613.368805] syz-executor.5: attempt to access beyond end of device
[ 2613.368805] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2613.369607] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2613.401563] syz-executor.1: attempt to access beyond end of device
[ 2613.401563] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2613.402611] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:28:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x8, 0x5)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2613.556133] Process accounting resumed
[ 2613.556585] loop2: detected capacity change from 0 to 40
[ 2613.620115] syz-executor.6: attempt to access beyond end of device
[ 2613.620115] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2613.621455] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2613.670058] syz-executor.2: attempt to access beyond end of device
[ 2613.670058] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2613.672539] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2613.717909] syz-executor.2: attempt to access beyond end of device
[ 2613.717909] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2613.719469] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:28:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x2, r5}, {0x8, 0x1, r5}, {0x8, 0x2, r5}, {0x8, 0x4}, {0x8, 0x0, r5}, {0x8, 0x5, r5}, {0x8, 0x7, r5}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x7, r3}, {0x2, 0x0, r4}], {0x4, 0x3}, [{0x8, 0x5, r5}], {0x10, 0xc}}, 0x3c, 0x2)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000000))
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:48 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:28:48 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, '.\x00'})

23:28:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
sendfile(r1, r2, 0x0, 0x9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:48 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, 0xffffffffffffffff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = gettid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r5, 0x0, &(0x7f0000000340))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000003c0)="df0dd65ce987718abf28d89ea166655b038641b5f50a0dcdda62d473a3b8333f8f3c7b1c36ed83ab8f0cdc3cdec74bee12c1e94f9f7b3a21ea8bb5763b46364b7a134289d99d4d88d282672344744b436727dc64be4c52e228c35894855daceda98614714ed1613fffd6646fec6f95000e7a9683b91f4874aa37b97e021147f61f82c8081eda6d83115c13f2bf8f4e35fde98208d21518955aa6ddb6ec8b628d486ee05820507e4332688dc33a4e0881f06837cf0e95982b351b0f32bb915a903866c44709c3fbc949419cd98e07645ef09e4d1b8599d70775fdad49576777d0122f93780d6adeb1996a2b1f962996e47c80ce7588e8c364eb141393fe6d2918453d089de253a13f2b25bee375b810fbf6ffa1d6f11d8c4d84652d58d0c84b26cfb3339cc773b937534e0949d88dcd7b5eb6d9074155cea8048743bda017e99adb86e903bbd8fca369301498a0519befae0d92f5ef16ebf1bf286c383ba1ef95ca6f0611d30ad67d8813d78f126f6b6a49d1d0813a355153dac4b54b79ccaedccd61e96dbd31c4bb77add3911bc05ebaab281424773d3cbe1c3370ebdb7570648504ddb97e99d9ce6f8b235c538aefcd95b021f32dd78bc32ea7d189c49941226b8e8ed04af113bc902febb270fe9e45f91b0e46f34920372e52a48b1d3bac4b63388eae50f52d16e26363f2dbfa4f6840315737538209e14e479cb2e2fb5153c560cab9433425d8ee97a5a397bf3e2c48830895c0160633e00245cd83227f36da1a320f4520a5aa6b87f5d210309dd58e23f198b698cbc1b4acf26c8e02407c330a4f495427ad9622a9ebe07dbe3135adef6e513ee18ce71947dc79c60aad7afc846a7b7d61a0aa1998c60d9ea1fcf31b0b25fc1ce0d7b1df5d867a4846aefaa7c5ed066ebde1e15fb6009413c4bac09db7b088e9f752af462d240ed7510cd8cdeeb1edc1c5c50f408457b45f27b9d88c62689b06d07b0291c720a8b900779853aa2170c48f168a9a9317bdf85999509c011147ef9365bef44aaeeec3b8f5bdc8c1242d2160cd31934145631b6c70aa35e54060c3698b88bcbf1a507e3d8897d6208a7887d1c63c49db0ad600eb7d42bcfc30d94fdc605af3feca6035f15076930cca1259bcdf4f757ddbd3d4e88070d52835b8a91c271ba818d04d398701b004229cff029549652be0cb899625e7bdfd027fd732178c98aa353cea4da6d67672b68c51a5e020b80cd72a5131d706a4799e5b5b9809ae250f47f096d6eac7cba64ea7ec70d6172b00e9a65e0816c10db180cd2f5c3d66e668a373a0abfc5f964787ba6b61e59abcdf5bc5c55f7240bae660e3a004acb68537acbc93554fbc834792743ca5dc4d041569573317256ac169242b5ba516e3f04e4fde9089a73567b1856ece78b44edd6bc7dbc9ae2272a0e6dde59b6a5e1fe965032d20d98bd1f6ae129fbff99d37fa13e01c6dda6d0b1d47f713b84f1394f5e41b64ce70420de8d04acc7aca6398f18adfb03b5fd3374992a153be5b79f30ea21909f90f8134e4a863d685add732097f0b0bab4889ef42e25c59ef820b7698acc892ae84e879ad1dc7bcc20b57f07a2f4fd9d4a98bd21ef97b4b4d68ab1401ba52a5ae73b10de1beacaea07b3eb41aac051901c774bf56ef98e65e853c97ccd7f35634604992f51700ca215609d3888f5483f05fdd320c85b6d9f94ceecdb303bbd48ccf0ded3d3f51dc6102a456d01dfdba5b345243d78f6c8f901c7d8d2d619be39f79c6201287572a9a1987f743a64ee3f1554468d31e620e58c6cb63940b90d5b31abbfb3f8e97caa761306d606ebcb88c4792635d5917aea58f75a0c8c13388d56d52055fc76967d847669d2e88fbd85d280992a9e9e192bc0e30218c3b38cd74f35491000bb6ce741f28ab8750e77d2466802b69cae9c49aef385fefc8995c89e9d020c6626cd4e1c04947c074b69f9399022a35a94ea00b9e6cb2e479fab00ec6fa02662bc48ea50a48fb897f96257997f421e309f36457bca25a5c327d535288c824c4788b97e8f3cfa1c3ada37cec5a480690f797d8fc39e3a17dbdcb3ed1963553a5c312087ed96da6da8b2e0d0663d6b167dc9aac756bb0ca66170e949045fc1ee9263759006734a88e1608faebb63bd3d192548687d77f6d60e61aef8feeb4dbaf5ad9ce703d618743f0d05535265b75e19f7238ce5318b6a50d2a500edc0416abf0cd535382dd7ab53119669ffbd8146f83f3c50dee2b56ec7e678b62045d71442e58b00a715c0e8d5416027c9665f577ddf15239d23e12108a7d0856b03876da7c6aa8be38263272cfe50737f6f4ee68bd762424f4553e2cdbd9850fd5a6eafa8076c96b6f375d3dc32a350fe1fd4494077e82e91ffd569ea3889034fbcbd9ca46e079122eefacd9683e299bdc780a0620d17b19f46a684d8b3f5101d4d3f52457b35ae454295dd1cd969fe85c69544d210f5f702aed6e612c30dc81b771b76f138a3b28b31fca766c300f5b0405520d810d95df3cfe0180816c3d5b344830ebd25c75dd90aa08fdb46a0a4e6c21c1616533d31b5e0b158bffc45d25431399b4327cd33a73aae8d4a2c78684601fdca518805e70d0100bdc5115b9e0651bea9bc7ad8ddf94e66efd3b6259e1a66c3190a73db077d6d4f11a1e29ca1d3791a5830ea898b36a409e80cd430a50e91495cff12a0f3833d8eff4a658ba7589fb53b6d2254e6c8a9284c727b436ad196850d3db1233d79c90c49876909e286472fe504ad6f3a212ca85a68620adf6b42735a4b30a7b684b8edf7573c5c7136bfd3e6d73f5b23c623c2bdc042bd3ea03fe089f72f8bff950070dd7cc7da565e35fcf8012afb469b92677edf752aa7476d954c16378e2f8ca0d7cfdf4bf83982429c9ca9919f689aeddc1ae23fd5897a33bd82782aa59aec03228c5c8f33ba184c0c684736eb2ac8805e5a0b90ccbc1fbf47a764fdff13eeb3e11ffe33758cc817e0902dc7280c5a4799e21e44b016f1b39ec7df04d35655e024654172bf24895821c8c6975adeed85d18e1ea735ff078ac7345f64677ebcb21e5abab1d51e654ffbf869d457e9215ae8d200e0cf7b64d9d6bd6a998333d97e17e022fb3163b0b8aad7f2b8c1da433ab1e18af780c358e59e9dc419c10c5e025da0f248e775d2e2b01b10e5bc9b38f7e01af5a7afcbd075a65fce39719a691a06807b68a3aa891edf888163b632e30ad44d001018d866327f3d7ff9599d3670fc41a768787a53f4fa39ba1dd8b11e877e7e53b1d5a5f112e30ea9c1532eaf3162a4cee75ff2c6a996030dbdc8faed81e03f55c68db980ad90ee893d3dfdc9af76712d0968d8333b3648e008a07a45eb5b57d2ff3935dd1d48c8b0f7151bcc3a5fa1f8e21a736b84b24bfda652bc51066fffabe227a5f6956e382c03d900cf9ede817a64899a2041261a6c1ca80eb96b3f5887331a2b10530a4d807fbb54fa2218adf36c7ed5dd1383932843777c72305deba648894bca83d1a54bcdb03f37924c53c42799543c733ddf884d9507b057fa5a8522edf6071c4fbf3db1e93fd8b7e73a70715ef85b95b1038223204a438156890bbed375411e1c1d49b491200bff546bb619f2af2f962773eaef237ab9dedb64a3a237e3ccd74f456a61c46d69fc7ec5aaa0330c65c509ba3df4e5194261ff32f78c160022b7338d2289ad5dfb5e5f5cf7302cebef7da592197483d980211e55f647b0a035c8874c807e382d2b2dab3a93cb28bb7869a9e25a405fb009a84541d1de7b94b719173a76a3414ebf8382cc8edfac3fe1f30db56f072e91911de8da223710994977f88b086b2086b29a7b3d8bfccfd232f0f33814a87c059c841436e2b37370897bdb62980b99cd5ca6a5af6e556d12a3fc4c984c969c9dc519206b0b0a26a0ef03a78d33efcc51c9ceb2b51c5a4143460314b98385ab1a9ab199f81b4ffcb3d232432bad055709b85b7189743d12843debe60ec60b8ee46abdd0ef5336ed5b94be23eb9dbbfb817d078fcdad9b280ac67ce2603b26fd0d554a07746d5a6c03821c24d7f3bf9f5e2358e26a9b9b36af1f023fc4f0e8cc8068dfab6f6d1018831e6ebb159b6301ba5a8c72c5be6eb204a53002315a592f46b499ac0efc797129de5b7843b3ad6f0ef17c5d143921c1424e4d1c24f84f9e2ec09fb2e8930c992ced82e186e2acf4f841078f15e38b0f43c47fb0e893a8d566721de24e2cb5229cef7bb9a43f39b4484ffc260d190d26eef54bc7d918fab7fac3cc96419185fb53a81224689c15a75c3c939a9acf849446f2151e1399dbfe75bcf91739f8267551a6504095293eea953ca35f9d549a15d9c765d57b7f1471d94a164717c20d88ed180f9131cc864ab686a701a516fc9b29cec29dac3922b3abe9776204f08b812f27162c20221466c5c53c7487f5bc52c7a9431fa6fb23f9e2ef89e1fe196f1077bd2b1f79799218d87fcd4b51896fcf381935e2a604beddcb9925e11667f6528edbe4757ca32ec69943335f56af2f85e6eee815a64898b6b160e0af44904f21f3f971da4eae959d998d2ffcba18bfe888aa9324fb0b667675296f5d755d942b451c4bcc4156cbd5f0942d5886195570ab06996e13e48ee9bde0954e07eb8491ddf81c763e7c5a39777e469925213dc5ed56b5c7937fcab7387a257dccd1e02dedbeea90267eba62b1103836a336b808b8529988653da544871940da4240d80a9f45a2c86d7718d1de7fefb5a57d3f103cd954a7edd869241fcfa7120cbf3dad7a2d765fc19bf5847d6a9c3c7e6f41ded7224bcfbfa5cd2ef1776f349fd7e2602509ec6ebcac422da23e5103562b3bf34e63a339e584f876738650acae9866bb53f64d217051f0305ad318f39eb1900128fbce54a093902c1bd35aa7bca11b3307f303b01955d7f6ea1a534b4adfd6fe41062946cb377b260669389f59da214306f755b8b06e1d20d0f19c251be41fa8c0751e8d169a76128a9a302c54ff9a7f5f067eed11c1439ddb2a4db97739bcc6d01b14316e7e1a890a07313f3c21ca6ab360484cba3064b3084ff93b6147d123e26d7fc323cf5420d4def27663586944f8341c4db79ef1fd84834f5df34f67b6ffdb1d7bd1583f13a5ab1631473b7892c84efdcd33f37fc550a36a41d19143849f8f4b89f9ad9a7b317681c624a4e493852772d0f8ee80526ba4d6fc8929edcc278adf67edd12e2b77c88578d563b4190b5df4d4f67bdfbf0d2a9805c39b23907a2683f95aa3159c29c2452df41a42bf283f27ee76c4fa65e15857d29d78f3d2dc4b12aaab3d5fcad673fc4164b9f04ebb6c25a2b05d5053a5d3a49a18c999695c4cd9fbbd6f3bd8b9f6e2b29d02369e84b4ea8b2035610f55cde996db7475716e372c1525ba8804fecbd98259c66bb0b051f562e0041ba4062a03fb47fc1a43054685434820b6e9ec67ad7e88f57326403e29b129ffa544c4f237789fb8d9044b919220224678bfee29c1574977e135bf0c514bf83b91a691ec343b5284f155f98e16913d0ebab83f86212713b1bf31438a2f6208a4005b8b79bd250cdcbd9ce62eafd81e9e33177bbc8f193d61248d11da533ceef6a2fc9b577e2af61473f0f26ff5d2bd6f9fef8eb43ca4b50148adbde076458540279306b5fec38d35f919e1640ed79443f3fbed408ce7aa8fd928ecc8b9cf56fd6b01f93787527ca0bd4ea26ea60b27b8d3c3ea068053228f74fd5fa96e5a5dbdaf86bbd2ea71742d036f9a43199b2ec0617ce2a065a647e6a78d6461e7357b0da1721f5207246220c4acb6e998b0aa5", 0x1000}, {&(0x7f0000000040)="d4ec96dd5793f213a6b0f45a1554187eb788cb962a8ae439b6ecb405ba0023fef0", 0x21}, {&(0x7f00000013c0)="82a38280aba7eb3e175d453da2bd34880f64eb150d33dcfca02b49bbdc32b706d1cffb4c641cac0c1a1c1b30838b1827ef4e5a19ec35d53315cd4e52a7de0108d6621a5c1026c6777009bc79acb1a7268952824682f4634951e0a48a7b188c5566ea74c3ff02d39d63d24f092e8f61e360885e83d097a6fe31fcb6919988c236861c97e316444f7c624a65f90b44d1601984c00b3bc2097a08518d2ca7ea05cb630c9c89ca7439c76f777d0fe720c43ee561fef13d392b8fd6349c95900f0ee9bb6ec3b9eb2319", 0xc7}], 0x3, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r1]}}, @rights={{0x38, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee00}}}], 0x100, 0xc0}}], 0x1, 0x1)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x280300, 0x114)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r7, r1, 0x0, 0xfffffdef)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r8, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24, 0x3)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', <r2=>0x0, 0x29, 0x5, 0xb3, 0xffffffff, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x0, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r2, 0x2d, 0x0, 0x6, 0x6, 0x2, @private2, @empty, 0x8000, 0x80, 0x4c, 0x3}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2630.133158] loop4: detected capacity change from 0 to 40
[ 2630.138027] loop2: detected capacity change from 0 to 40
[ 2630.146777] loop5: detected capacity change from 0 to 40
23:28:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 84)

[ 2630.197156] loop1: detected capacity change from 0 to 40
[ 2630.202592] syz-executor.5: attempt to access beyond end of device
[ 2630.202592] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2630.204042] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2630.205176] loop6: detected capacity change from 0 to 40
[ 2630.239192] syz-executor.5: attempt to access beyond end of device
[ 2630.239192] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2630.240265] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2630.311291] syz-executor.2: attempt to access beyond end of device
[ 2630.311291] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2630.312521] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:28:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chdir(&(0x7f0000000000)='./file2\x00')
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2630.328433] syz-executor.4: attempt to access beyond end of device
[ 2630.328433] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2630.329956] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2630.375236] syz-executor.2: attempt to access beyond end of device
[ 2630.375236] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2630.376151] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2630.377379] syz-executor.1: attempt to access beyond end of device
[ 2630.377379] loop1: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2630.381905] syz-executor.1: attempt to access beyond end of device
[ 2630.381905] loop1: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2630.382759] Buffer I/O error on dev loop1, logical block 26, lost async page write
[ 2630.445330] syz-executor.1: attempt to access beyond end of device
[ 2630.445330] loop1: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2630.446208] Buffer I/O error on dev loop1, logical block 26, lost async page write
23:28:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24, 0x3)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', <r2=>0x0, 0x29, 0x5, 0xb3, 0xffffffff, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x0, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r2, 0x2d, 0x0, 0x6, 0x6, 0x2, @private2, @empty, 0x8000, 0x80, 0x4c, 0x3}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2630.533979] kworker/u4:3: attempt to access beyond end of device
[ 2630.533979] loop1: rw=1, sector=108, nr_sectors = 16 limit=40
[ 2630.534923] kworker/u4:3: attempt to access beyond end of device
[ 2630.534923] loop1: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2630.535981] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2630.543362] loop5: detected capacity change from 0 to 40
23:28:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket(0x6, 0x6, 0x9d29)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
ioctl$FITHAW(r0, 0xc0045878)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3)

[ 2630.575471] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2630.590577] Process accounting resumed
23:28:48 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2630.629103] loop1: detected capacity change from 0 to 40
23:28:49 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
io_uring_enter(r1, 0x6c70, 0x3f8c, 0x2, &(0x7f0000000040)={[0x6]}, 0x8)
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2630.735769] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:28:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x743, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1010c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendfile(r3, r4, 0x0, 0x10000027f)
perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, r5}}, 0x7f)

23:28:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 85)

[ 2630.785037] loop2: detected capacity change from 0 to 40
23:28:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:sshd_var_run_t:s0\x00', 0x24, 0x3)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', <r2=>0x0, 0x29, 0x5, 0xb3, 0xffffffff, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x0, 0xff}})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r2, 0x2d, 0x0, 0x6, 0x6, 0x2, @private2, @empty, 0x8000, 0x80, 0x4c, 0x3}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2630.941467] loop4: detected capacity change from 0 to 40
[ 2631.004304] loop6: detected capacity change from 0 to 40
[ 2631.104921] Process accounting resumed
23:28:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x10001, 0x0, &(0x7f0000000180)=[r1, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r5]}, 0x9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')

23:28:49 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = signalfd4(r2, &(0x7f0000000000)={[0x90]}, 0x8, 0x80800)
openat(r3, &(0x7f0000000040)='./file1\x00', 0xe81, 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r4, &(0x7f0000000240)='./file0\x00', 0x2001, 0x86)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x24400, 0x0)
openat(r6, &(0x7f00000001c0)='./file0\x00', 0x2c00, 0x20)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x3c)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:49 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x100)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:28:49 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2631.227445] loop1: detected capacity change from 0 to 40
[ 2631.232939] loop5: detected capacity change from 0 to 40
23:28:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 86)

23:28:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
openat(r1, &(0x7f0000000240)='./file1\x00', 0x4000, 0x4)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x0, 0x1f, &(0x7f0000000000)="e5afbeef40cc207a8b818043569f420d9dc552e5e507ee7a7a3cdf64d17839", 0x1}, {0x80, 0x1000, &(0x7f00000003c0)="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"}, {0x75, 0xa5, &(0x7f00000013c0)="5cba9447a424e59917e8012e5cc87dcb49dd8ef037f23325cce0ac52a2c55899712d77a7a095236f6e8580b986280700c2ad0e561708e793af5e50888c0d09dab7e4c479c125ea38acb85684b592ecf95d9ea25b164c6f84710466d748cebced6d7f1961affb2b11e45443c64ed7699f5e11f1e87025d3f703e9dddeadc65237ada256aa2f094c5beff21d346e47ef3fe7edcd09ac6d7b478ac59941740fcfd2449a69bd00", 0x1}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(r3)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2631.309132] loop2: detected capacity change from 0 to 40
[ 2631.440293] loop4: detected capacity change from 0 to 40
[ 2631.442921] loop6: detected capacity change from 0 to 40
[ 2631.753169] Process accounting resumed
23:29:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000400)=""/122, 0x7a}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000580)=""/43, 0x2b}, {&(0x7f00000005c0)=""/8, 0x8}], 0x9, &(0x7f0000000740)=""/231, 0xe7}, 0x1}, {{&(0x7f0000000840)=@rc={0x1f, @none}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/226, 0xe2}, {&(0x7f00000009c0)=""/242, 0xf2}, {&(0x7f0000000600)=""/17, 0x11}], 0x3, &(0x7f0000001bc0)=""/4096, 0x1000}, 0x4}], 0x2, 0x0, &(0x7f0000000b00)={0x0, 0x989680})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002c40)='./file1\x00', 0x101000, 0x40)

23:29:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x3ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:29:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 87)

23:29:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00', <r5=>0x0})
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, r5}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r5, 0x2f, 0x6, 0x5, 0x80, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, 0x20, 0x7, 0x80000000, 0x9}})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:29:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x8000000400000000}, 0x0, 0x0, 0x0, 0x0, 0x8e08, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x8)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
sendto(r2, &(0x7f0000000240)="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", 0xfb, 0x0, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x10)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2648.497694] loop5: detected capacity change from 0 to 40
[ 2648.521701] loop2: detected capacity change from 0 to 40
[ 2648.523803] loop1: detected capacity change from 0 to 40
[ 2648.554294] loop6: detected capacity change from 0 to 40
23:29:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="601c646f0008010102000440002000f801f914b1baf9981b378cb9f838216c64486c73fbc74526dfb28e29e49ef553ec3a7bb9ac59085a7d48bdfc6d7effb72cb91ed9c4b451275428fc996985490203000000000000006709", 0x59}, {0x0, 0x0, 0x2800}], 0x24010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x725}, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x1, 0xe0, &(0x7f00000003c0)="1b4b51f65f25be9e2420cbc85dae62f0e6f669746d6ec8bf205e00c5c59922b866a13ca32548b3a700089188ca0283b892082e77e81e2a60b7ef122d5c36ee7a6b607b90d2bf2724f55bc188bbfde7cb86aa5dda7f61157d949e09aabca159288b0d2836254ea830cf56a24bf7fb674c106112943b19c60d6d2768f039a87b9f8dc6dbdab97b7ed91abb33ba6c5955e898637de623e03773398ec090b3d6dcf21c2cd5112410fdde013cbcebfcd227922a82e4372713a23c6ea2e8691448913cde9e2b51dc86626a4a7ac392727fd52b8aeeb45ee96d242ee622940cdbc301cb"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:29:06 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000180)={{0x0, 0x3, 0x7f, 0x2, 0x2}, 0x28d, 0x5, 0x81})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
acct(&(0x7f0000000000)='./file0\x00')

23:29:06 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2648.633006] bio_check_eod: 20 callbacks suppressed
[ 2648.633025] syz-executor.1: attempt to access beyond end of device
[ 2648.633025] loop1: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2648.677323] Process accounting resumed
23:29:07 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2000, &(0x7f0000000780)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x4}}, {@access_uid={'access', 0x3d, r0}}, {@msize={'msize', 0x3d, 0x1}}, {@afid={'afid', 0x3d, 0x7}}, {@loose}], [{@dont_hash}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security.ima\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@measure}, {@euid_gt={'euid>', 0xee01}}, {@measure}, {@fowner_eq={'fowner', 0x3d, r1}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000001000000180000005fbe9521b5f704c62f11e6d9edbc14ce49108915f671de34525409f2a59693d66cefef7430a45e0192530a", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="0303130000000d00704446fc479a86c7722dd80fab0ef8f986586bca2d59825c6eb8de2aaf3fe25516c6048af97b83a3123cac71a77bda2b94c5386f0703d67efb712fb7e032ac7ead633e4897bccde438252a90b4245ca0c0a53ad5b759405e23c72805433b24776948bcd82920da59acc7163dd8f022739444d201943cb0af9fbbe239df"], 0x79, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x541041, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0xbb, 0x0, 0x100000001, 0x900, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10, 0x2, 0xa8, 0x8, 0x3, 0x5, 0x7, 0x0, 0x100, 0x0, 0x7ff}, 0xffffffffffffffff, 0x10, r2, 0x8)

[ 2648.715717] syz-executor.1: attempt to access beyond end of device
[ 2648.715717] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2648.716873] buffer_io_error: 15 callbacks suppressed
[ 2648.716883] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2648.738885] kworker/u4:12: attempt to access beyond end of device
[ 2648.738885] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2648.739836] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:29:07 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:29:07 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
sendfile(r0, r3, &(0x7f0000000000)=0x9, 0x7f)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2648.817381] loop2: detected capacity change from 0 to 40
23:29:07 executing program 1:
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, r2}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2648.837013] syz-executor.6: attempt to access beyond end of device
[ 2648.837013] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2648.838248] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2648.852310] syz-executor.2: attempt to access beyond end of device
[ 2648.852310] loop2: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2648.891929] syz-executor.2: attempt to access beyond end of device
[ 2648.891929] loop2: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2648.892884] Buffer I/O error on dev loop2, logical block 26, lost async page write
[ 2648.899505] syz-executor.2: attempt to access beyond end of device
[ 2648.899505] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2648.900527] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:29:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 88)

23:29:07 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
acct(&(0x7f0000000000)='./file0\x00')

23:29:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2020010, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hdaudio', 0x440000, 0x4)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x94, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0)

[ 2649.026846] loop2: detected capacity change from 0 to 40
[ 2649.052428] loop6: detected capacity change from 0 to 40
[ 2649.124553] Process accounting resumed
23:29:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000540), 0x0, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000580)={0x0, <r3=>0x0})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000005c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x4, "1b2a8c02a0a0a4"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000015c0)={{r4, 0x8, 0x7, 0x4, 0x2000000000000000, 0x4438, 0x2, 0x400, 0x9, 0x3ff, 0x5, 0x6, 0xb9, 0x1, 0x7}})
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380), 0x0, 0x7fffff8, 0x1)
r6 = getpgrp(r3)
clone3(&(0x7f00000004c0)={0x10000000, 0xfffffffffffffffe, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000240), {0x35}, &(0x7f0000000300)=""/205, 0xcd, &(0x7f0000000400)=""/77, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff, r6, 0x0, r6, r6], 0x7, {r5}}, 0x58)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0x23, 0x40, 0x0, 0x0, 0x800, 0x1, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x5880, 0x7, 0x2, 0x8, 0x9, 0x3, 0x2, 0x0, 0x4, 0x0, 0x40}, r7, 0xd, r1, 0x8)

[ 2649.226906] loop4: detected capacity change from 0 to 40
[ 2649.286089] Process accounting resumed
[ 2649.333931] loop5: detected capacity change from 0 to 40
[ 2649.344098] syz-executor.6: attempt to access beyond end of device
[ 2649.344098] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2649.345353] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2649.382114] syz-executor.4: attempt to access beyond end of device
[ 2649.382114] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2649.383273] Buffer I/O error on dev loop4, logical block 10, lost async page write
23:29:07 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xe840, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
r2 = gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x81, 0x6, 0x81, 0x0, 0x1, 0x40004, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp, 0x410, 0x81, 0xea07, 0x5, 0x401, 0x189, 0x3, 0x0, 0x8000, 0x0, 0xfffffffffffffffd}, r2, 0x8, r0, 0xa)
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:29:07 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:29:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 89)

[ 2649.512468] loop6: detected capacity change from 0 to 40
23:29:07 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x8000000400000000}, 0x0, 0x0, 0x0, 0x0, 0x8e08, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x8)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
sendto(r2, &(0x7f0000000240)="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", 0xfb, 0x0, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x10)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2649.747038] syz-executor.6: attempt to access beyond end of device
[ 2649.747038] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2649.748165] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2649.781617] Process accounting resumed
[ 2649.864597] loop2: detected capacity change from 0 to 40
23:29:26 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x8000000400000000}, 0x0, 0x0, 0x0, 0x0, 0x8e08, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x8)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
sendto(r2, &(0x7f0000000240)="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", 0xfb, 0x0, 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x10)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:29:26 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r4 = signalfd4(r0, &(0x7f0000000000)={[0x101]}, 0x8, 0xc00)
sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@getae={0xb4, 0x1f, 0x1, 0x70bd27, 0x25dfdbfe, {{@in=@loopback, 0x4d5, 0x2, 0x3c}, @in=@empty, 0x1, 0x3506}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x2, 0x7, 0x3}}, @tfcpad={0x8, 0x16, 0x9}, @tmpl={0x44, 0x5, [{{@in6=@local, 0x4d5, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x2, 0x2, 0x7, 0x7abdbf67, 0x6451f7d9, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)

23:29:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a015c8601000000201ee6d50c7000"}, 0x11, 0x0)
sendto$unix(0xffffffffffffffff, &(0x7f0000000bc0)="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", 0x1000, 0x80, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@v1={0x2, "ea75159bf66b950297458ec9eba460"}, 0x10, 0x2)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:29:26 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2ac82, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=unix,accRss=client,dfltgid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6163636573733d636c69656e742c6e6f657874656e642c736d61636b6673726f6f743d21252d1f5c2c2c736d61636b6673666c6f6f723d232c61707072616973652c61707072616973655f747970653d696d617369672c646566636f6e746578743d73746166665f752c7365636c6162656c2c736d61636b66736465663d2e2c646566636f6e746578743d757365725f752c00"])
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xb)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:29:26 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:29:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 90)

[ 2668.073375] loop2: detected capacity change from 0 to 40
[ 2668.075492] loop6: detected capacity change from 0 to 40
23:29:26 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
sendfile(r4, r5, &(0x7f0000000040)=0xfffffffffffffffc, 0xc29c)
sendfile(r2, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:29:26 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = dup2(r1, r0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0xce, 0x6, 0xe9, 0x0, 0x100000001, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x10, 0x80, 0x9, 0x8, 0x800, 0xff, 0x5, 0x0, 0x6, 0x0, 0x81}, r2, 0xf, r3, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x9, [0x3, 0x5fdbd61e, 0x5, 0x1, 0x1, 0x7]})
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x280)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080))
mount_setattr(r5, &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)={0x100004, 0xf2, 0x120000, {r6}}, 0x20)

[ 2668.134563] loop1: detected capacity change from 0 to 40
[ 2668.196453] loop5: detected capacity change from 0 to 40
23:29:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2020010, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hdaudio', 0x440000, 0x4)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x94, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0)

[ 2668.284256] syz-executor.2: attempt to access beyond end of device
[ 2668.284256] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2668.286077] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2668.304924] syz-executor.1: attempt to access beyond end of device
[ 2668.304924] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2668.305923] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2668.319994] syz-executor.2: attempt to access beyond end of device
[ 2668.319994] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2668.321800] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2668.356066] syz-executor.6: attempt to access beyond end of device
[ 2668.356066] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2668.357286] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2668.361813] syz-executor.5: attempt to access beyond end of device
[ 2668.361813] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2668.366466] loop4: detected capacity change from 0 to 40
[ 2668.374529] syz-executor.5: attempt to access beyond end of device
[ 2668.374529] loop5: rw=2049, sector=108, nr_sectors = 16 limit=40
[ 2668.387191] syz-executor.5: attempt to access beyond end of device
[ 2668.387191] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2668.388460] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2668.412466] syz-executor.1: attempt to access beyond end of device
[ 2668.412466] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2668.413541] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:29:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2668.453054] syz-executor.5: attempt to access beyond end of device
[ 2668.453054] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2668.454902] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2668.478888] syz-executor.5: attempt to access beyond end of device
[ 2668.478888] loop5: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2668.480001] Buffer I/O error on dev loop5, logical block 26, lost async page write
[ 2668.724198] Process accounting resumed
23:29:42 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1f, 0x9, 0x1, 0x3, 0x0, 0x80000001, 0x40012, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x200}, 0x1052, 0x3, 0x3, 0x7, 0x200, 0x4, 0xfe00, 0x0, 0x60, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1)

23:29:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000000)='./file1\x00', 0x600000, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:29:42 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = dup2(r1, r0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0xce, 0x6, 0xe9, 0x0, 0x100000001, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x10, 0x80, 0x9, 0x8, 0x800, 0xff, 0x5, 0x0, 0x6, 0x0, 0x81}, r2, 0xf, r3, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x9, [0x3, 0x5fdbd61e, 0x5, 0x1, 0x1, 0x7]})
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x280)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080))
mount_setattr(r5, &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)={0x100004, 0xf2, 0x120000, {r6}}, 0x20)

23:29:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2020010, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hdaudio', 0x440000, 0x4)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x94, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0)

23:29:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:29:42 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:29:42 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x7, 0x600)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1f, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x4a000, 0x9, 0x33, 0x4, 0x5, 0x4b09, 0x5, 0x0, 0x1}, 0x0, 0x3, r0, 0x2)
r1 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r3}, {0x8, 0x4}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x2, r3}, {0x8, 0x4}, {0x8, 0x0, r3}, {0x8, 0x5, r3}, {0x8, 0x7, r3}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
lchown(&(0x7f0000000100)='./file0/file0\x00', r2, r3)
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
openat(r4, &(0x7f0000000040)='./file0/file0\x00', 0x19bc40, 0x10)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(r4, &(0x7f0000000180)='./file0/file0\x00', 0x200000, 0x0)

23:29:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 91)

[ 2683.828144] loop5: detected capacity change from 0 to 40
[ 2683.830147] loop2: detected capacity change from 0 to 40
[ 2683.834549] loop6: detected capacity change from 0 to 40
[ 2683.836487] loop4: detected capacity change from 0 to 40
[ 2683.841446] loop1: detected capacity change from 0 to 40
[ 2684.018800] syz-executor.5: attempt to access beyond end of device
[ 2684.018800] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2684.020127] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2684.032378] syz-executor.1: attempt to access beyond end of device
[ 2684.032378] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2684.033560] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2684.059127] syz-executor.6: attempt to access beyond end of device
[ 2684.059127] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2684.060217] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2684.093329] syz-executor.5: attempt to access beyond end of device
[ 2684.093329] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2684.095116] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2684.118396] syz-executor.1: attempt to access beyond end of device
[ 2684.118396] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2684.119254] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2684.190915] kworker/u4:1: attempt to access beyond end of device
[ 2684.190915] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2684.191737] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2684.391473] Process accounting resumed
23:30:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 92)

23:30:00 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = dup2(r1, r0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0xce, 0x6, 0xe9, 0x0, 0x100000001, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x10, 0x80, 0x9, 0x8, 0x800, 0xff, 0x5, 0x0, 0x6, 0x0, 0x81}, r2, 0xf, r3, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x9, [0x3, 0x5fdbd61e, 0x5, 0x1, 0x1, 0x7]})
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x280)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080))
mount_setattr(r5, &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)={0x100004, 0xf2, 0x120000, {r6}}, 0x20)

23:30:00 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:30:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/diskstats\x00', 0x0, 0x0)
r6 = epoll_create(0x4)
r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)={0xa0002000})
r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r8, r6)
io_submit(0x0, 0x4, &(0x7f00000014c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x4cc4, 0xffffffffffffffff, &(0x7f00000003c0)="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", 0x1000, 0x4, 0x0, 0x1, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x1ff, r2, &(0x7f0000000040)="b7ddfc69a72eca4b24695034dc77c28c506698679c3f4d2fde8c6164b98629e77830118d43dfa0dd3cc69654ec97", 0x2e, 0x9, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x81, r3, &(0x7f0000000240)="417d7d129689d354344f5835c5ab", 0xe, 0x1, 0x0, 0x2, r5}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x5, 0x7fff, r8, &(0x7f00000013c0)="55efa76bc1ce518e2fc79b5d5fcf385e423c4f1b4d6c7aacf18f81004db97d0b767cc07447b129c7cc2317435fa8db47de363e09833175d55141169dc03027c2bbfa44c49883487a955ddad288a51f838824ff75a411db51a68a4c02885c74b783b96c8c4278c226d2e2dcf559e12156df88597f58ab48ce68b723c38fd9ede6b6c8a683aa287cc22e183a57633d257ea5c493", 0x93, 0x0, 0x0, 0x2, r3}])

23:30:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2, {0xfffffffffffffeff}}, './file0\x00'})
openat(r3, &(0x7f00000001c0)='./file0\x00', 0x2c080, 0x80)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xac8d00, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x1000, "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"}, &(0x7f0000000040)=0x1024)

23:30:00 executing program 5:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:00 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080))
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:30:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x2020010, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES16])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hdaudio', 0x440000, 0x4)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x94, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0)

[ 2702.365429] loop6: detected capacity change from 0 to 40
[ 2702.395469] loop2: detected capacity change from 0 to 40
[ 2702.397824] loop4: detected capacity change from 0 to 40
[ 2702.401405] loop1: detected capacity change from 0 to 40
[ 2702.515395] syz-executor.1: attempt to access beyond end of device
[ 2702.515395] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2702.516952] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2702.540191] syz-executor.2: attempt to access beyond end of device
[ 2702.540191] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2702.541267] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2702.593068] syz-executor.6: attempt to access beyond end of device
[ 2702.593068] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2702.594345] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2702.598934] syz-executor.2: attempt to access beyond end of device
[ 2702.598934] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2702.599791] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2702.642974] syz-executor.1: attempt to access beyond end of device
[ 2702.642974] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2702.643845] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:30:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1f, 0xff, 0x3, 0x3, 0x0, 0x800, 0x400, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x5, 0xab7c}, 0x4000, 0x800, 0x7, 0x0, 0x10000, 0x7, 0x438, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x1)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1f, 0x9, 0x1, 0x3, 0x0, 0x80000001, 0x40012, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x200}, 0x1052, 0x3, 0x3, 0x7, 0x200, 0x4, 0xfe00, 0x0, 0x60, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1)

23:30:01 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
r1 = gettid()
r2 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f0000000580)=[{&(0x7f00000003c0)="18a1682f07486860b8dff1c88e6b6ada08691700b4bb9cde67c8aad35476ca8939aebde483e055d0168123f82380663f819ef4a0103c3b9d60aa2e33f3ccf805e21fc8a4e8bc9aff050f3955a03a578b6f4c2c9cb0e1e9c7339b61df2fc26a11873607eee995dd645f1e3a400036b20ee0c64c0ef740d85cdedd745298d7d479bb75958fb63247be1deef726c82ebcc3f5a69169f1811d1796ad36fd3b6f77d1007026dc52f31f9447043abf2081eaf8fba63d3089701451875b62da9dcd5b3adbde993e45469c34ca86b7a5622806d48f6156084a803970a8ca2554fd2ce998414db754e9fb336aa93e06fecd42ce62b6355aa08f959f", 0xf7, 0x7}, {&(0x7f0000000280)="dd98c17e345906bfe11e3089c7259e43277acb81998f4ae82a9211984ca349f0e4f2e1304b87f42cfb48f73cd41bd3398dee7d47bdb9a5bb578a609248a4b7eec0b32c51fb8d0b56c3c12c2994af15678a237ffe66feb16b69efa22c7d733a80c674ab90c170f0775506a415316072c1e788cfdb9fa6ed28204c", 0x7a, 0x2}, {&(0x7f00000004c0)="1863ff87dc815b28364a335e8b1600c907780f92dbc60626900faa54a686b830abc7fa2f2cfc0096d9151ebe61888c515040b7384561f40aa5d8f382fe3ed5836a8018932bf7eafa37422e4e80774bd5c1b051c40b00847e4466a6bf2f822a461866f37210d4b7b25a5ce9cce2f028f16378f8d48717e32d9d1fb3f1fdb3b5fa2a92c805c2ba0f3d447c7a3bef64b9e69d14aa673f7371dfef5ecca2cacb64ec70e9dc9aa62737de0d614c6da03914093c", 0xb1, 0x43}, {&(0x7f0000000680)="bb68a0dc055fd4322b15ac6ca3ccb2c34f066fc7cdea0a789008eefc731171937f1b5715f85ea3c4e82d6e4719cb22cf93f50bdfa45acfdec290762c8d56bccf4ee986d73d4b20378cc0228742f836ce5f361c6187c832b7589f9819bcf889e1796652570f06ab2741b47a9760052b9f49fff4e1de449ff8f396df0de6c7ca7577feed23f29dd98748a622db3e5869c412348335f1e36431cd278a6bcf47d815b681e6574bc5903645e07b3e48429c335dcd885e3fed3cbef75c6492f1cf490792e6075267f9f2d49ed5277a377774a15973127f9dadf5d1cff88f33ce61c59fde54d8bcc0f4c17baee8ad8610a6a975167204f2", 0xf4, 0x3}, {&(0x7f0000000780)="2660a786d786a06acc22ad4b8aebf6bc281c2fcf79faba36e3ab67150a8dcba4420c04de55b2b22fe9a465ab88acea0faede9242fa5aa5ba9b3c7329255d78775671acddba1b373ffcc3973c00294984a227d64ef8a36abdbf642bc868f44665dddecc58c81603ee0a213bf584b2e5abeedc7e24b376287bb9e13386a98d3f65e60150a7581dbc3975a853ef2fb964875762ed6bdfa7d770af0b7b6cb426ee934afb8b94a7bdf3550ce6094763b8aaa8e69406920b744197e720533ea0c820a68165d85246870353408eebb436ed23596429cae468c6f46f93a4b83aa90de4361c85dc5068", 0xe5, 0x8001}], 0x300400, &(0x7f0000000180)={[{'-(/]'}, {'security.evm\x00'}], [{@permit_directio}, {@fsname={'fsname', 0x3d, 'security.evm\x00'}}]})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000300))
r3 = getpid()
rt_tgsigqueueinfo(r3, r1, 0x0, &(0x7f0000000340))
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1f, 0x0, @tid=r1})
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2702.756167] loop5: detected capacity change from 0 to 40
23:30:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2702.784027] loop4: detected capacity change from 0 to 40
23:30:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 93)

23:30:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendfile(0xffffffffffffffff, r0, &(0x7f00000025c0)=0x38fa, 0x902)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$security_selinux(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0), &(0x7f0000000300)='system_u:object_r:lirc_device_t:s0\x00', 0x23, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r2, &(0x7f0000002540)={&(0x7f00000003c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/114, 0x72}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3, &(0x7f00000024c0)=""/67, 0x43}, 0x10101)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
write$P9_RREADDIR(r4, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x5, [{{0x4, 0x0, 0x1}, 0x4, 0x81, 0x7, './file1'}, {{0x4, 0x4, 0x6}, 0xffffffffffff2a7b, 0x80, 0x7, './file1'}]}}, 0x49)
sendfile(r2, r1, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
close(r4)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2702.854499] syz-executor.5: attempt to access beyond end of device
[ 2702.854499] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2702.855558] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2702.874794] loop6: detected capacity change from 0 to 40
[ 2702.910866] loop2: detected capacity change from 0 to 40
[ 2702.934302] syz-executor.5: attempt to access beyond end of device
[ 2702.934302] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2702.936148] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2702.953272] syz-executor.4: attempt to access beyond end of device
[ 2702.953272] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2702.954543] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2702.994726] loop1: detected capacity change from 0 to 40
[ 2703.031524] syz-executor.2: attempt to access beyond end of device
[ 2703.031524] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2703.032910] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2703.042497] syz-executor.6: attempt to access beyond end of device
[ 2703.042497] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2703.043552] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:30:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1f, 0x9, 0x1, 0x3, 0x0, 0x80000001, 0x40012, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x200}, 0x1052, 0x3, 0x3, 0x7, 0x200, 0x4, 0xfe00, 0x0, 0x60, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1)

[ 2703.067484] Process accounting resumed
23:30:01 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {0x0}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:30:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 94)

[ 2703.132322] loop4: detected capacity change from 0 to 40
[ 2703.194882] loop6: detected capacity change from 0 to 40
23:30:01 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = dup2(r1, r0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0xce, 0x6, 0xe9, 0x0, 0x100000001, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x10, 0x80, 0x9, 0x8, 0x800, 0xff, 0x5, 0x0, 0x6, 0x0, 0x81}, r2, 0xf, r3, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x9, [0x3, 0x5fdbd61e, 0x5, 0x1, 0x1, 0x7]})
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x280)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080))
mount_setattr(r5, &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)={0x100004, 0xf2, 0x120000, {r6}}, 0x20)

23:30:01 executing program 5:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r5, 0x1000})

23:30:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fcntl$getown(r2, 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x7f, 0xe, 0x1, 0x0, 0x1, 0x20200, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x10100, 0x4c8f, 0xbc, 0x7, 0x800, 0x400, 0xdebd, 0x0, 0x10001, 0x0, 0x9}, r3, 0xb, r4, 0x2)
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:01 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:30:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1f, 0x9, 0x1, 0x3, 0x0, 0x80000001, 0x40012, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x200}, 0x1052, 0x3, 0x3, 0x7, 0x200, 0x4, 0xfe00, 0x0, 0x60, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1)

[ 2703.484479] loop4: detected capacity change from 0 to 40
[ 2703.509944] loop2: detected capacity change from 0 to 40
23:30:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 95)

23:30:01 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x1000, 0x0, 0x4, 0x4, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
sendfile(r0, r5, &(0x7f0000000040)=0x7, 0x6)

[ 2703.680028] loop1: detected capacity change from 0 to 40
[ 2703.716462] loop6: detected capacity change from 0 to 40
[ 2703.755961] Process accounting resumed
23:30:18 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:30:18 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f0000000300)='./file1\x00', 0x206002, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4100, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x4, 0xffffff71, 0x0, 0x97, 0xfd, 0xe0, 0x0, 0x9, 0x40, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x4, 0x48e1f4e1}, 0x10d0, 0x1, 0x8000000, 0x7, 0xffff, 0x8, 0x1, 0x0, 0x7f, 0x0, 0x4}, r6, 0x10, r5, 0x8)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r7, r4)
fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:18 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {0x0}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:30:18 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
r2 = gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000340))
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB="bd09000000"])
r5 = epoll_create(0x4)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0002000})
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r7, r5)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r4, &(0x7f0000000040)={r5, r0, 0x9})
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x404800, 0x0)

23:30:18 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00', <r1=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, r1}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r2=>0x0, 0x29, 0x2, 0x1, 0x1, 0x74, @empty, @private0, 0x80, 0x8000, 0x6, 0x37}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0xd4, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x352}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1000, 0xf8, 0x6, 0x28d}, {0x3ff, 0x41, 0x5, 0x8}]}}}]}}]}, 0xd4}}, 0x800)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080))
pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000000)="75a62b6e64a307ed4b526430c150bc78cd7cdbcff6be9f6fda87eac7ec7f36a951df46b70c2929d859dbeb592df44158d7c82ed7439d9ffa1dd03d9fb84780d374d6a1f4106b6b05bd42682408245bc66b736bb35d8a2726adf1a5ffb38d2201715ce1f6ce1c8a3bb296bdfa3ea7ebfea089c9a82419e97622429236bfc8", 0x7e}], 0x1, 0x1, 0x3f)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
ioctl$FIONCLEX(r3, 0x5450)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x3, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
write$binfmt_aout(r5, &(0x7f0000000000)={{0x108, 0x2d, 0x27, 0x1c7, 0x384, 0x10001, 0x24, 0x3bc}, "51b01b68041311e8be4e0b777eaa92fe9ae026f9a8d1401020e828"}, 0x3b)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4)

23:30:18 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 96)

23:30:18 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
sendfile(r4, r5, &(0x7f0000000040)=0xfffffffffffffffc, 0xc29c)
sendfile(r2, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2720.340737] loop6: detected capacity change from 0 to 40
[ 2720.351593] loop5: detected capacity change from 0 to 40
[ 2720.372897] FAULT_INJECTION: forcing a failure.
[ 2720.372897] name failslab, interval 1, probability 0, space 0, times 0
[ 2720.373859] CPU: 1 PID: 43266 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221208 #1
[ 2720.374378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2720.374896] Call Trace:
[ 2720.375067]  <TASK>
[ 2720.375219]  dump_stack_lvl+0x8f/0xb7
[ 2720.375482]  should_fail_ex.cold+0x5/0xa
[ 2720.375764]  should_failslab+0x9/0x20
[ 2720.376019]  __kmem_cache_alloc_node+0x5b/0x400
[ 2720.376325]  ? iter_file_splice_write+0x169/0xcb0
[ 2720.376646]  ? iter_file_splice_write+0x169/0xcb0
[ 2720.376960]  __kmalloc+0x46/0xc0
[ 2720.377200]  iter_file_splice_write+0x169/0xcb0
[ 2720.377506]  ? generic_file_read_iter+0x330/0x550
[ 2720.377833]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2720.378158]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2720.378536]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2720.378883]  ? lockdep_hardirqs_on+0x7d/0x100
[ 2720.379186]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2720.379554]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2720.379890]  direct_splice_actor+0x113/0x180
[ 2720.380182]  splice_direct_to_actor+0x33a/0x8c0
[ 2720.380490]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2720.380813]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2720.381143]  ? security_file_permission+0xb5/0xe0
[ 2720.381466]  do_splice_direct+0x1bc/0x290
[ 2720.381737]  ? __pfx_do_splice_direct+0x10/0x10
[ 2720.382072]  ? lock_is_held_type+0xdb/0x130
[ 2720.382372]  do_sendfile+0xb1d/0x1280
[ 2720.382643]  ? __pfx_do_sendfile+0x10/0x10
[ 2720.382939]  __x64_sys_sendfile64+0x248/0x2a0
[ 2720.383236]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2720.383558]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2720.383891]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2720.384226]  do_syscall_64+0x3f/0x90
[ 2720.384475]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2720.384803] RIP: 0033:0x7f076f651b19
[ 2720.385061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2720.386157] RSP: 002b:00007f076cbc7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2720.386638] RAX: ffffffffffffffda RBX: 00007f076f764f60 RCX: 00007f076f651b19
[ 2720.387077] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2720.387513] RBP: 00007f076cbc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2720.387951] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2720.388390] R13: 00007ffc52d32f1f R14: 00007f076cbc7300 R15: 0000000000022000
[ 2720.388845]  </TASK>
[ 2720.402220] loop2: detected capacity change from 0 to 40
[ 2720.423438] Process accounting resumed
[ 2720.440907] loop1: detected capacity change from 0 to 40
[ 2720.445943] bio_check_eod: 11 callbacks suppressed
[ 2720.445964] syz-executor.5: attempt to access beyond end of device
[ 2720.445964] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2720.452438] loop4: detected capacity change from 0 to 40
23:30:18 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2720.589163] syz-executor.5: attempt to access beyond end of device
[ 2720.589163] loop5: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2720.590720] buffer_io_error: 11 callbacks suppressed
[ 2720.590737] Buffer I/O error on dev loop5, logical block 26, lost async page write
23:30:18 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 97)

[ 2720.649030] syz-executor.2: attempt to access beyond end of device
[ 2720.649030] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2720.651093] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2720.708304] perf: interrupt took too long (9870 > 9851), lowering kernel.perf_event_max_sample_rate to 20000
[ 2720.769405] Process accounting resumed
[ 2720.772044] loop6: detected capacity change from 0 to 40
[ 2720.776941] kworker/u4:5: attempt to access beyond end of device
[ 2720.776941] loop5: rw=1, sector=108, nr_sectors = 16 limit=40
[ 2720.778551] kworker/u4:5: attempt to access beyond end of device
[ 2720.778551] loop5: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2720.779990] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:30:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143842, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
lseek(r1, 0x3ff, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
pwritev(r4, &(0x7f0000000040), 0x0, 0x7fffff8, 0x4000000)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x202000, 0x1d)

[ 2720.850332] syz-executor.2: attempt to access beyond end of device
[ 2720.850332] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2720.852127] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:30:19 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fork()
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x94, 0xff, 0x5, 0x4, 0x0, 0x101, 0x8c089, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x10000, 0x9, 0x7, 0x8, 0x2, 0x401, 0x1f, 0x0, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0xb, r0, 0x2)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:30:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x3)
sendfile(r1, r0, 0x0, 0xfffffdef)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2720.952438] loop5: detected capacity change from 0 to 40
23:30:19 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x111080, 0xc2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendto(r1, &(0x7f0000000000)="521cc3483ef624f7ffe9fa9bfec6b8da", 0x10, 0x40010, &(0x7f0000000180)=@nfc={0x27, 0x1, 0x0, 0x5}, 0x80)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r6, r4)
sendfile(r6, r3, 0x0, 0x7)
openat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x1e1000, 0x53d4e5732ea44c70)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r7, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2721.045189] FAULT_INJECTION: forcing a failure.
[ 2721.045189] name failslab, interval 1, probability 0, space 0, times 0
[ 2721.046931] CPU: 0 PID: 43456 Comm: syz-executor.6 Not tainted 6.1.0-rc8-next-20221208 #1
[ 2721.047937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2721.048940] Call Trace:
[ 2721.049277]  <TASK>
[ 2721.049570]  dump_stack_lvl+0x8f/0xb7
[ 2721.050072]  should_fail_ex.cold+0x5/0xa
[ 2721.050619]  should_failslab+0x9/0x20
[ 2721.051122]  __kmem_cache_alloc_node+0x5b/0x400
[ 2721.051729]  ? iter_file_splice_write+0x169/0xcb0
[ 2721.052352]  ? iter_file_splice_write+0x169/0xcb0
[ 2721.052965]  __kmalloc+0x46/0xc0
[ 2721.053425]  iter_file_splice_write+0x169/0xcb0
23:30:19 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r1}, {0x8, 0x4}, {0x8, 0x2, r1}, {0x8, 0x1, r1}, {0x8, 0x2, r1}, {0x8, 0x4}, {0x8, 0x0, r1}, {0x8, 0x5, r1}, {0x8, 0x7, r1}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
chown(&(0x7f0000000740)='./file0\x00', 0x0, r1)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="28fd024c3ff8c2b78456b6f56557428780e6a921", 0x14}, {&(0x7f0000000180)="b00ca31162ea6f33b69170ab26d1698255aaa0d673df88f6fd08813b7f9347a7dcef608f795a5ccd88e328ad5cd4461610131a7f7d5b70d2b4d92ed67d0558c8380ca981ca", 0x45}, {&(0x7f0000000040)="a1456187567af35590fa42e3aa5f1a5e81f357c3e9f88eebc6f1628deb4935e6ec30887a71886830e761a1b4d6ad74eb29b601edc6aed70817", 0x39}, {&(0x7f00000003c0)="ebac025e1054559d06b0abba609ec740559cc14cc8a196cc68e126d5306dfc9c9f78f6614036ed7ae1095e880e315e5df7545346ea152330f1f15fbe5518b88fbeb4b6332ecdaf8c51663d17e6054941b5ffd37c2fb15aba37c823e7e83fbbecf6df69ccf008abd90553f4f0b9b97972fb2531a764bac691573c70a4d329625ffd584e36a25cee1015e3d292c406a3af3cf7d12690c6c40270102cdc3f98ab836ff944b1603dfd068a7e3d5ae05998876aaf9699b672918d2a39db3d5be949d44e466e073b07d7a192fb1b479f8b35acf29956a3de2ffcbfd0c298a13a", 0xdd}, {&(0x7f00000004c0)="b8a201aa72e4acc260ab2ef9f7806ab9a6255ce97266fd038ff94892c58a97e606abcecd9d936818d8ee0be076b07de3b8026d31bb0b5ab93f49bb22272098e2f2674cbc87353a6581f0268d2ee8968bbfc4242146a8c95a942beb66ae000cb621fa17807bfbb92b4639af2b1cc5dd47a54d206dd8813b7af8651cca78bd1dedf0ef7536345f9eac6f084e7777cdb88d3e6197b130d206d58b1810a336c02b2e60321c74af8c3ddb86ceb1fe4ae6bdffb615c0ead9881696b563", 0xba}, {&(0x7f0000000580)="83a1ddf3099b11e00d3c13ba2eea0c311500f5ffbb99d228389688a0a812d54df8b5fd0865ababc1b474decc22fb92c1b1a03e39a688f58722b1f8d66841cc53429c989761cd0d344fdb23903a44ee4bdbeabc994098ffb3f4202b56a7530ae85810e31403f3e4cc9a1459d8d60f58a5df0a1441767d83a6cb69e51e31b643ed2032489f663b0f761c93b134329f4b1c690442420dc6ceb0dff9235d10dced7f917582d4f5aa1051cf223ae2fd5cd2c850b5e36395e541377ce87fda1d41c6a1f4a2c9", 0xc3}, {&(0x7f0000000680)="30c12d1e422aa41f7c6840fd7389b13b3dd7cb2c068d96de7ee5746a580635c2d7e71d4de7dfe9a11ed4941d2383b478068ad3bc2ecce68c061603757bb46d49eeb7881568fdf27af9240cc456dcc785cac23bc773dbdd15d24ced02f6d4698889dbd3119bdb9598cc8fc76bb123390d10668845cc1b3dc6cfbc23119d9788dc2a517632c7dca9fa05d2f7f2d89068875dd4f9514c33bd168386f75e59b5def2f93cb0faaaa99402336480", 0xab}], 0x7)
readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000740), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = open$dir(&(0x7f0000000800)='./file0\x00', 0xf27ab27d46d76969, 0x0)
openat(r4, &(0x7f0000000840)='\x00', 0x8000, 0x5)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2721.054022]  ? generic_file_read_iter+0x330/0x550
[ 2721.054870]  ? generic_file_splice_read+0x1bc/0x4d0
[ 2721.055495]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2721.056147]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 2721.056821]  ? inode_security+0x105/0x140
[ 2721.057375]  ? security_file_permission+0xb5/0xe0
[ 2721.057992]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2721.058654]  direct_splice_actor+0x113/0x180
[ 2721.059227]  splice_direct_to_actor+0x33a/0x8c0
[ 2721.059836]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2721.060460]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2721.061121]  ? security_file_permission+0xb5/0xe0
[ 2721.061741]  do_splice_direct+0x1bc/0x290
[ 2721.062273]  ? __pfx_do_splice_direct+0x10/0x10
[ 2721.062916]  ? lock_is_held_type+0xdb/0x130
[ 2721.063487]  do_sendfile+0xb1d/0x1280
[ 2721.064005]  ? __pfx_do_sendfile+0x10/0x10
[ 2721.064574]  __x64_sys_sendfile64+0x248/0x2a0
[ 2721.065144]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2721.065769]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2721.066424]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2721.067096]  do_syscall_64+0x3f/0x90
[ 2721.067585]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2721.068238] RIP: 0033:0x7f076f651b19
[ 2721.068706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2721.070902] RSP: 002b:00007f076cbc7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2721.071850] RAX: ffffffffffffffda RBX: 00007f076f764f60 RCX: 00007f076f651b19
[ 2721.072719] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2721.073591] RBP: 00007f076cbc71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2721.074475] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 2721.075349] R13: 00007ffc52d32f1f R14: 00007f076cbc7300 R15: 0000000000022000
[ 2721.076238]  </TASK>
[ 2721.094473] syz-executor.5: attempt to access beyond end of device
[ 2721.094473] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2721.096317] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2721.113569] syz-executor.5: attempt to access beyond end of device
[ 2721.113569] loop5: rw=2049, sector=44, nr_sectors = 4 limit=40
[ 2721.189596] syz-executor.5: attempt to access beyond end of device
[ 2721.189596] loop5: rw=2049, sector=44, nr_sectors = 20 limit=40
[ 2721.204172] loop1: detected capacity change from 0 to 40
[ 2721.263607] loop2: detected capacity change from 0 to 40
[ 2721.466225] syz-executor.2: attempt to access beyond end of device
[ 2721.466225] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2721.467579] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2721.468230] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2721.561499] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2721.609489] Process accounting resumed
[ 2739.482027] loop5: detected capacity change from 0 to 40
23:30:37 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
sendfile(r4, r5, &(0x7f0000000040)=0xfffffffffffffffc, 0xc29c)
sendfile(r2, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x3)
sendfile(r1, r0, 0x0, 0xfffffdef)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2801}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40101, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
r5 = eventfd2(0xc8a6, 0x0)
sendfile(r4, r5, &(0x7f0000000000)=0x2, 0x1400000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x501043, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:37 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {0x0}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:30:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x2001f, 0x8}}, './file0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, r4, 0x1}, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r5=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000480)=0x14)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa8, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0xa8a41443c68caaf1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r7, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 98)

23:30:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:30:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=""/60)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2739.493099] loop2: detected capacity change from 0 to 40
[ 2739.507835] loop1: detected capacity change from 0 to 40
[ 2739.522983] loop4: detected capacity change from 0 to 40
[ 2739.558385] loop6: detected capacity change from 0 to 40
[ 2739.629540] bio_check_eod: 2 callbacks suppressed
[ 2739.629556] syz-executor.1: attempt to access beyond end of device
[ 2739.629556] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2739.631292] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2739.698574] syz-executor.5: attempt to access beyond end of device
[ 2739.698574] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2739.700621] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:30:38 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f0000000300)='./file1\x00', 0x206002, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4100, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x4, 0xffffff71, 0x0, 0x97, 0xfd, 0xe0, 0x0, 0x9, 0x40, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x4, 0x48e1f4e1}, 0x10d0, 0x1, 0x8000000, 0x7, 0xffff, 0x8, 0x1, 0x0, 0x7f, 0x0, 0x4}, r6, 0x10, r5, 0x8)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r7, r4)
fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2739.713127] syz-executor.1: attempt to access beyond end of device
[ 2739.713127] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2739.714917] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2739.753334] syz-executor.5: attempt to access beyond end of device
[ 2739.753334] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2739.754261] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2739.812996] syz-executor.4: attempt to access beyond end of device
[ 2739.812996] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.814087] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2739.825188] syz-executor.2: attempt to access beyond end of device
[ 2739.825188] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.827152] Buffer I/O error on dev loop2, logical block 10, lost async page write
23:30:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001080), 0x8, 0x100)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:38 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000200000002, 0x18508, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x3030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
pwritev(r5, &(0x7f0000000000), 0x0, 0x2, 0x3)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2739.944110] syz-executor.6: attempt to access beyond end of device
[ 2739.944110] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.946122] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2739.956130] syz-executor.2: attempt to access beyond end of device
[ 2739.956130] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2739.957391] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2739.971055] loop5: detected capacity change from 0 to 40
23:30:38 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x80000)

[ 2740.057105] Process accounting resumed
[ 2740.123537] loop1: detected capacity change from 0 to 40
[ 2740.131182] syz-executor.5: attempt to access beyond end of device
[ 2740.131182] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2740.132893] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2740.186590] syz-executor.5: attempt to access beyond end of device
[ 2740.186590] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2740.188873] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:30:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0) (fail_nth: 1)

23:30:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000000)="601c6d6b646f7366d8a02b00080101000200002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
sendfile(r0, r3, 0x0, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x3)
sendfile(r1, r0, 0x0, 0xfffffdef)
pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:55 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:30:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 99)

23:30:55 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0) (fail_nth: 1)

[ 2756.920195] loop1: detected capacity change from 0 to 40
[ 2756.925362] loop5: detected capacity change from 0 to 40
23:30:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000003c0)=@v2={0x3, 0x2, 0x3, 0x1, 0x1000, "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"}, 0x1009, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
chroot(&(0x7f0000000180)='./file1\x00')
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2756.938130] FAULT_INJECTION: forcing a failure.
[ 2756.938130] name failslab, interval 1, probability 0, space 0, times 0
[ 2756.939659] CPU: 1 PID: 44068 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221208 #1
[ 2756.940878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2756.941937] Call Trace:
[ 2756.942293]  <TASK>
[ 2756.942610]  dump_stack_lvl+0x8f/0xb7
[ 2756.943164]  should_fail_ex.cold+0x5/0xa
[ 2756.943739]  ? getname_flags.part.0+0x50/0x4f0
[ 2756.944377]  should_failslab+0x9/0x20
[ 2756.944910]  kmem_cache_alloc+0x5a/0x410
[ 2756.945481]  getname_flags.part.0+0x50/0x4f0
[ 2756.946108]  getname_flags+0x9e/0xf0
[ 2756.946640]  user_path_at_empty+0x2f/0x70
[ 2756.947238]  __x64_sys_umount+0xfc/0x190
[ 2756.947813]  ? __pfx___x64_sys_umount+0x10/0x10
[ 2756.948446]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2756.949159]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2756.949877]  do_syscall_64+0x3f/0x90
[ 2756.950416]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2756.951132] RIP: 0033:0x7fe39ddd9b19
[ 2756.951652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2756.954031] RSP: 002b:00007fe39b34f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2756.955062] RAX: ffffffffffffffda RBX: 00007fe39deecf60 RCX: 00007fe39ddd9b19
[ 2756.956022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
[ 2756.956976] RBP: 00007fe39b34f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2756.957941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2756.958916] R13: 00007ffd18936f9f R14: 00007fe39b34f300 R15: 0000000000022000
[ 2756.959902]  </TASK>
[ 2756.985549] loop2: detected capacity change from 0 to 40
[ 2756.990285] loop6: detected capacity change from 0 to 40
[ 2757.058586] bio_check_eod: 2 callbacks suppressed
[ 2757.058600] syz-executor.5: attempt to access beyond end of device
[ 2757.058600] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2757.060107] buffer_io_error: 2 callbacks suppressed
[ 2757.060117] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:30:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:55 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
acct(&(0x7f0000000000)='./file1\x00')
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0x8, 0x3f, 0x3, 0x0, 0xfff, 0x8000, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x18}, 0x10, 0x1, 0x80000001, 0x9, 0x7, 0x7, 0xffff, 0x0, 0x4, 0x0, 0x7fff}, 0x0, 0xc, r2, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2757.247332] syz-executor.6: attempt to access beyond end of device
[ 2757.247332] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2757.249439] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2757.257583] loop1: detected capacity change from 0 to 40
[ 2757.268155] loop5: detected capacity change from 0 to 40
[ 2757.313559] Process accounting resumed
23:30:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="02", 0x1}], 0x1, 0x7fffff8, 0x0)

23:30:55 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:30:55 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0) (fail_nth: 2)

[ 2757.374325] syz-executor.5: attempt to access beyond end of device
[ 2757.374325] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2757.375420] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2757.382263] kworker/u4:5: attempt to access beyond end of device
[ 2757.382263] loop2: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2757.383964] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2757.415502] syz-executor.5: attempt to access beyond end of device
[ 2757.415502] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2757.416936] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2757.421534] syz-executor.1: attempt to access beyond end of device
[ 2757.421534] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2757.423369] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:30:55 executing program 2:
ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000800)={0x6, 0x0, 0x20, 0x81, 0x6, 0x89})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x4042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, <r1=>0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r2=>0x0})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340))
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f00000004c0))
r4 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x30000004})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x3d})
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001600), 0x400000, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560c, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r6 = clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="f046df88e4c5b2489658588c7e280f81bf0edf8b9e112e640a7cbe98db6f60039123e1486b040c4e754febae57a464ce6dfe35f9b3f18002231e8341d97a70ccaf29bc8fc5170c91b5b3862a4db4c0910da6f83a7fb63add31b503762b0018e959db8f58692c70702c146d2572deb0d04b1dc5c7f632de7bdb228f273764ba6770916596131f7446f55d", @ANYRESOCT, @ANYRESDEC=r2, @ANYRES64=r6, @ANYRES64=r1])

23:30:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 100)

[ 2757.486844] syz-executor.1: attempt to access beyond end of device
[ 2757.486844] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2757.487743] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2757.621587] Process accounting resumed
[ 2757.657911] loop6: detected capacity change from 0 to 40
[ 2757.719053] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ01777777777777777777777ðF߈äŲH–XXŒ~(�¿ß‹ž.d
[ 2757.719053] |¾˜Ûo`‘#áHkNuOë®W¤dÎmþ5ù³ñ€#ƒAÙzp̯)¼�Å‘µ³†*M´À‘¦ø:¶:Ý1µv+" or missing value
[ 2757.864567] syz-executor.6: attempt to access beyond end of device
[ 2757.864567] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2757.867261] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2758.431592] Bluetooth: hci0: Opcode 0x c03 failed: -4
[ 2758.436121] Bluetooth: hci0: Opcode 0x c03 failed: -4
23:31:15 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
sendfile(r0, r3, 0x0, 0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup3(r0, r2, 0x0)
openat(r3, &(0x7f0000000000)='./file2\x00', 0xc042, 0xa)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:15 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0) (fail_nth: 3)

23:31:15 executing program 5:
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xd4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xba}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc6}}]}, 0xd4}}, 0xc850)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000500)='./file1/file0\x00', 0xe, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:15 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:15 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
mount$cgroup2(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x88000, &(0x7f0000000400)={[{@subsystem='cpuacct'}, {@memory_localevents}, {}, {@subsystem='net_prio'}, {@subsystem='devices'}, {@memory_localevents}, {}, {@subsystem='io'}, {@memory_localevents}]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0xc0000, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x402080, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:31:15 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2777.667403] FAULT_INJECTION: forcing a failure.
[ 2777.667403] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2777.669002] CPU: 1 PID: 44421 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221208 #1
[ 2777.670055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2777.670383] loop2: detected capacity change from 0 to 40
[ 2777.671038] Call Trace:
[ 2777.671048]  <TASK>
[ 2777.671060]  dump_stack_lvl+0x8f/0xb7
[ 2777.671103]  should_fail_ex.cold+0x5/0xa
[ 2777.673449]  strncpy_from_user+0x38/0x500
[ 2777.674004]  getname_flags.part.0+0x95/0x4f0
[ 2777.674607]  getname_flags+0x9e/0xf0
[ 2777.675138]  user_path_at_empty+0x2f/0x70
[ 2777.675708]  __x64_sys_umount+0xfc/0x190
[ 2777.676264]  ? __pfx___x64_sys_umount+0x10/0x10
[ 2777.676897]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2777.677305] loop5: detected capacity change from 0 to 40
[ 2777.677572]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2777.678906]  do_syscall_64+0x3f/0x90
[ 2777.679432]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2777.680118] RIP: 0033:0x7fe39ddd9b19
[ 2777.680606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2777.682778] RSP: 002b:00007fe39b34f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2777.683766] RAX: ffffffffffffffda RBX: 00007fe39deecf60 RCX: 00007fe39ddd9b19
[ 2777.684678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140
[ 2777.685603] RBP: 00007fe39b34f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2777.686524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2777.687459] R13: 00007ffd18936f9f R14: 00007fe39b34f300 R15: 0000000000022000
[ 2777.688394]  </TASK>
[ 2777.725744] loop6: detected capacity change from 0 to 40
[ 2777.731220] loop1: detected capacity change from 0 to 40
[ 2777.861589] syz-executor.5: attempt to access beyond end of device
[ 2777.861589] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2777.863931] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2777.871944] syz-executor.2: attempt to access beyond end of device
[ 2777.871944] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2777.873914] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2777.911212] syz-executor.5: attempt to access beyond end of device
[ 2777.911212] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2777.912858] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2777.915969] syz-executor.2: attempt to access beyond end of device
[ 2777.915969] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2777.917593] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:31:16 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0) (fail_nth: 4)

[ 2777.952102] syz-executor.1: attempt to access beyond end of device
[ 2777.952102] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2777.954032] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:31:16 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0) (fail_nth: 1)

[ 2778.017160] syz-executor.1: attempt to access beyond end of device
[ 2778.017160] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2778.018867] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:31:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="04", 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2778.083215] syz-executor.6: attempt to access beyond end of device
[ 2778.083215] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2778.085148] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2778.096377] FAULT_INJECTION: forcing a failure.
[ 2778.096377] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2778.098503] CPU: 1 PID: 44611 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221208 #1
[ 2778.099734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2778.100945] Call Trace:
[ 2778.101347]  <TASK>
[ 2778.101707]  dump_stack_lvl+0x8f/0xb7
[ 2778.102313]  should_fail_ex.cold+0x5/0xa
23:31:16 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000))
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = syz_mount_image$nfs(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', 0x3, 0x1, &(0x7f0000000340)=[{&(0x7f00000003c0)="70871a3e2e9272da58a6f01c3b373e90a446f8c4f820e3b3e52d6e8053b382e6c418c12f2877eaa5ddcb3ca6f6c2276954de9884bb66a4e071ba554582732bd2653b6575e1b2", 0x46, 0x2}], 0x4000, &(0x7f0000000440)={[{'-]['}, {'vfat\x00'}, {'vfat\x00'}, {'vfat\x00'}], [{@fsname={'fsname', 0x3d, '+,@'}}]})
readv(r4, &(0x7f0000000640)=[{&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000600)=""/1, 0x1}], 0x3)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2778.102978]  _copy_to_user+0x30/0x1c0
[ 2778.103727]  simple_read_from_buffer+0xd0/0x170
[ 2778.104493]  proc_fail_nth_read+0x19c/0x230
[ 2778.105181]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2778.105938]  ? security_file_permission+0xb5/0xe0
[ 2778.106701]  vfs_read+0x2e1/0x9f0
23:31:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x128}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2778.107273]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2778.108133]  ? __pfx_vfs_read+0x10/0x10
[ 2778.108769]  ? __fget_files+0x270/0x450
[ 2778.109418]  ksys_read+0x12b/0x260
[ 2778.109985]  ? __pfx_ksys_read+0x10/0x10
[ 2778.110614]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2778.111395]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2778.112168]  do_syscall_64+0x3f/0x90
[ 2778.112740]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2778.113503] RIP: 0033:0x7fe39dd8c69c
[ 2778.114064] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2778.116641] RSP: 002b:00007fe39b34f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2778.117735] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe39dd8c69c
[ 2778.118761] RDX: 000000000000000f RSI: 00007fe39b34f1e0 RDI: 0000000000000003
[ 2778.119794] RBP: 00007fe39b34f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2778.120820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2778.121836] R13: 00007ffd18936f9f R14: 00007fe39b34f300 R15: 0000000000022000
[ 2778.122930]  </TASK>
[ 2778.212776] loop2: detected capacity change from 0 to 40
23:31:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x1a820}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
write$binfmt_aout(r2, &(0x7f00000003c0)={{0x107, 0x8, 0x1, 0x389, 0x3a8, 0x3, 0x364, 0x3}, "26c3fc47506e5ab89e6f72c424fea06d76c048daa42ef262196d70d4429ec04bd7bfd638a5d6a7bfa7b042896dc451344d66e455ca2e4179ac4910435522d3ffe1fd6e7f3e15161f98de5e364e6d14260632", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x972)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2778.263325] loop5: detected capacity change from 0 to 40
23:31:16 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:31:16 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2778.383754] loop1: detected capacity change from 0 to 40
[ 2778.428585] syz-executor.2: attempt to access beyond end of device
[ 2778.428585] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2778.432099] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2778.442442] syz-executor.5: attempt to access beyond end of device
[ 2778.442442] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2778.444983] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:31:16 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mknodat(r0, &(0x7f0000000600)='./file0\x00', 0x8000, 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mount_setattr(r1, &(0x7f0000000240)='./file1\x00', 0x9100, &(0x7f00000003c0)={0x7, 0x1, 0x80000, {r1}}, 0x20)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r1, &(0x7f0000000040)={0x200, 0x31, 0x11}, &(0x7f0000000180)='./file1\x00', 0x18, 0x0, 0x23456}, 0x3ff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)="f13a", 0x2}, {&(0x7f0000000480)="b3242fc8b7eb8668729bccbb8823fc5323cffe957f7150176d08aca680e23068ee2c36261a97228b3a81b343e028ff5476a059186634437d9ff3a9435877e0e9624f27be15f24e589b72795615b4c0961cf9c7fc466983d77c7b43c3cd373051a94d47a961bf40671529cbbfbe26aa9f1f712fb577d2a15712", 0x79}, {&(0x7f0000000500)="eb430f3eae120e628a839e8c33442ac072cae15577c1fc788a849784c7048bb5145d2945be06138d7fe1d0e0ae393a7812af29b12ffb9fec09ae6002576f16b0a886cf36da4339269ad3e0268211fbfd460a50dc7510ea1cbae2aaeed15799e26e348747b86cb7e0c29dde4d8c459489a1052dcbf6c425d1381a13a46dd912e9297cf37c0f571719a8e9de2d38e147b838fde1cc039482a7e3e3145c081f8cd25455", 0xa2}], 0x3)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r3, &(0x7f0000000400)='./file0\x00', 0x10200, 0x101)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x6, 0x6, 0x1f, 0x40, 0x0, 0xfffffffffffffff7, 0x900, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000640), 0x2}, 0x8000, 0x2, 0x6, 0x1, 0x0, 0x81, 0x244, 0x0, 0x8a7, 0x0, 0x200}, 0x0, 0xe, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2778.500540] syz-executor.2: attempt to access beyond end of device
[ 2778.500540] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2778.502288] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2778.539583] loop6: detected capacity change from 0 to 40
[ 2778.546991] Process accounting resumed
23:31:16 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {0x0}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:31:16 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

23:31:16 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

[ 2779.059477] Process accounting resumed
23:31:34 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {0x0}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:31:34 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
utimensat(r0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5187c581bd049b94, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r3, &(0x7f0000000040)='./file1\x00', 0x0, 0x5)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x7fffffff}, 0x4020, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = epoll_create(0x4)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0002000})
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x4, 0x3f, 0x2d, 0x8000, 0x4d, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x7fff, 0x3}})
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200102, 0x8)

23:31:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="05", 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x92)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:34 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:31:34 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:31:34 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r2, &(0x7f00000001c0)='./file2\x00', 0x408000, 0x25)
r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file1/file0\x00', 0x0, 0x11)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=""/161)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x40, 0x18a00)
setresuid(0x0, 0x0, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r6}, {0x8, 0x4}, {0x8, 0x2, r6}, {0x8, 0x1, r6}, {0x8, 0x2, r6}, {0x8, 0x4}, {0x8, 0x0, r6}, {0x8, 0x5, r6}, {0x8, 0x7, r6}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
r7 = getuid()
sendmmsg$unix(r0, &(0x7f0000004d80)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000480)="e23020de76404e3006a0298819dfa55a03cdb6fdaa1689bb255dffb0dff6965e60030df89514d4af93505b7eb74b2c859d483fdd6df1ea871ddf6a78a7b8775cd4d396246a44e1d5582c351540b6e317577e106f938815123463737e2bea1f72714ddf6ed2bd575927553a026ef8c8746ce201bed04cce593dd93741c355f485cdf23b55936f0e2ac345f6cb2fff30566ce80a115f92ad40feb08ca5172eda", 0x9f}, {&(0x7f0000000540)="5781a8d7c0607e86636febd8b0ec87a603af2ab57c50b8581169931fb44f7e48e981bdd0e64715752fd9be1a97f0a55e6d35c42f9cf5a5e4f7cb14dfe704daecebc38fc449dccf8611d80e2dea011a9be787ff89deca3f077c940456732858b275de68fb5a80318f45ccf682f29949512bf76eb991a2b83acc05a24312ca20dee2ee9b00533d920c9332ff83eeac56377d423fcd6b0720e8e8b43d69d9442e6eb9dcadef65f3facd62188998699b06e498b6919fb5da6821b00b1f71d8165bf0de06a3e2447becda69", 0xc9}], 0x2, &(0x7f0000004c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r3, r5, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}], 0xd0, 0x4000040}}], 0x1, 0x8000)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x5, 0xa, &(0x7f00000008c0)=[{&(0x7f00000003c0)="ca685df17a4f49550baeaa86a308e999e06d3080dfea83639084209f8406683d1dd892a2e26d186e9c5d17a1ac73cf7bbea2084165e6f5298ef9bbe335f804", 0x3f, 0x28d}, {&(0x7f0000000400)="6799a3bfe100b0cf79199909fd7348dcb0811894cb2350936972d5b24005aba8347fb4cf6d9075e8d23cd3f24fb738c712761947858ec51ca19c381332b60386e4e8324c19141f8151e542cb5d9b5085ac3bb5150fa5a57a75", 0x59, 0x101}, {&(0x7f0000000480)="8d3f75ef66c6bf8b58cd3ce89049e62373f09f9ade328c498453f06b3a93e997ae317a387b6554700043283e36bdc19ab425e01402fc225e5e64c5a2f57d01ac4c70cb48809176080c26a36e4ac133383cafcf8c9a46cbd041992cfbe25537bd2f859ad5f52bac5ea336ef570c30ae30588a16e1370a9391f2b8707637d2d998bb9be8c2f274fa8e5e9201e8d8359011bd4795029c86bd68f2ddd91ca7959b", 0x9f, 0x3}, {&(0x7f0000000540)="c7b1212885485633362c5e14b5a1ea702160e3d022a1bd0c78de039f6bb7049372aaa2f00a9c825ec5ef8af52f844801b57a79e0ab412d7ac755a9071ee5b30e3cf3b5f72b92f5b9a150839cd4602b7d22aaafc18dfa52220881e4c9341cba592ac587252603a51486878b87fa186de07e9f69a1cb40b62575fbb45e151f36f3cc5f0687f399fb764af84934dbea64be56c6b570b103", 0x96, 0xfa}, {&(0x7f0000000600)="abf511", 0x3, 0x2}, {&(0x7f0000000640)="8f86da758b3c05d419e768040e5f009b87d34b09dea8fde991ba672d3561096d5291c979e52bba0893", 0x29, 0x8f6}, {&(0x7f0000000680)="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", 0xfa, 0x4}, {&(0x7f0000000780)="f5", 0x1, 0x7}, {&(0x7f00000007c0)="a9711b12dfa41d0eb7f1049d5da68d475713f205187cd56819c0291734dbf1acceb8bf57a06c5f39d301c4fddcde810dcbcc82581c3ce79c58f86fe297ef1cc77e0b02353647e648355915e9945ab0458c580bdae8b24bcdfa1dcf6a85a78ef8e0aec9f133ae310060310053fcd4b97c7e6a", 0x72, 0x328a958}, {&(0x7f0000000840)="628d38caf62289b259c50587f551057a8cd64ef2e24fe2a8c08167f01922ce6fef8264ac2f71c91e2f867d6071b6bb95333dfa877ecf1f4496611f9fe977cb45fb9eca34b0c130e21819c373788e60535a1f0d5e2490b840f732ee", 0x5b, 0x1}], 0x2802000, &(0x7f00000009c0)=ANY=[@ANYBLOB="6e66732c6e6f646f74732c6e6f640474732c6e6f636173652c636865636b3d72656c617865642c646f74732c63686edea68c6e6f726d616c2c6e6f646f74732c646f74732c646566636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d24235e29217b5d2c657569643c", @ANYRESDEC=r1, @ANYBLOB=',appraise,subj_role=!9!,dont_hash,smackfshat=^^\\*:[,\x00'])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmod(r0, 0x62)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', 'vfat\x00'})
sendfile(r2, r0, 0x0, 0xfffffdef)

[ 2795.905447] loop2: detected capacity change from 0 to 40
[ 2795.911974] loop6: detected capacity change from 0 to 40
[ 2795.918334] loop1: detected capacity change from 0 to 40
[ 2795.941586] loop5: detected capacity change from 0 to 40
[ 2796.031603] bio_check_eod: 5 callbacks suppressed
[ 2796.032271] syz-executor.2: attempt to access beyond end of device
[ 2796.032271] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2796.033320] buffer_io_error: 3 callbacks suppressed
[ 2796.033330] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:31:34 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x8)

23:31:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="06", 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2796.066038] syz-executor.5: attempt to access beyond end of device
[ 2796.066038] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
23:31:34 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x8)

[ 2796.068986] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2796.091542] syz-executor.6: attempt to access beyond end of device
[ 2796.091542] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2796.092954] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:31:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open(&(0x7f0000000000)='./file1\x00', 0x40, 0x104)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x2)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2796.143510] syz-executor.6: attempt to access beyond end of device
[ 2796.143510] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2796.144563] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2796.171014] syz-executor.5: attempt to access beyond end of device
[ 2796.171014] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2796.172968] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2796.209834] loop2: detected capacity change from 0 to 40
[ 2796.280004] kworker/u4:9: attempt to access beyond end of device
[ 2796.280004] loop1: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2796.281339] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:31:34 executing program 1:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x2)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r2}, './file0/file0\x00'})
openat(r4, &(0x7f0000000240)='./file1\x00', 0x2000c0, 0x105)
mknod(&(0x7f0000000180)='./file0\x00', 0x8009, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2796.314990] syz-executor.2: attempt to access beyond end of device
[ 2796.314990] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2796.316055] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2796.337421] syz-executor.2: attempt to access beyond end of device
[ 2796.337421] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2796.338570] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2796.367508] loop1: detected capacity change from 0 to 40
[ 2796.437503] syz-executor.1: attempt to access beyond end of device
[ 2796.437503] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2796.438554] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2796.461417] Process accounting resumed
[ 2796.468726] syz-executor.1: attempt to access beyond end of device
[ 2796.468726] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2796.469560] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:31:48 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x40000)

23:31:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000000)=[{&(0x7f00000003c0)="8339694bf946e1e46d0d2a7453a40da15c2ba0d15bcc5f406603af0e9b9fb2e7bf2f235fe1a2ed62a9c5ae1f61c862f1efe015bceebcff081a23980c5809e5b8b2699d9346b1cd5380aed4d4a5a0b47eebc040edd9d729e87d07223a9fa3b22b5f2445b72be69cf8cc1a226c488ce4cc34be36195b35e269485969772ad9f9db59cca8e8519f7b85375ce778890675d54f23a3c3d22f7e3a426bb331bcfa500ecd5cb86fc4f9", 0xa6}], 0x1, 0x7, 0x0)

23:31:48 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {0x0}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:31:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x76, 0x40000}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2810.216382] loop5: detected capacity change from 0 to 40
23:31:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r1)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d35", 0xad}], 0x3, r1)
r2 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a011043f2ec2cd82b71275b2aad4f99fce01a095307bf59006", 0xffd7fffe}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='trusted\x00', 0x0)
r3 = add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000980), 0x0, 0x0)
statx(r0, &(0x7f0000000000)='./file1\x00', 0x400, 0x40, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
statx(r0, &(0x7f0000000400)='./file1\x00', 0x6000, 0x7ff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
keyctl$chown(0x4, r3, r4, r5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe)
syz_io_uring_setup(0x822d2, &(0x7f0000000800)={0x0, 0x2799, 0x0, 0x6, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f00000005c0))
perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7fe, 0xc9f3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
r6 = request_key(&(0x7f0000000700)='rxrpc\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f00000007c0)='\x00', 0xfffffffffffffff9)
keyctl$reject(0x13, r2, 0x400, 0x200, r6)

23:31:48 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003c40)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000003d40)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003d80)={0x0, 0x0, <r4=>0x0}, &(0x7f0000003dc0)=0xc)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
recvmsg$unix(r1, &(0x7f0000004f40)={&(0x7f0000003e00), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003e80)=""/4096, 0x1000}], 0x1, &(0x7f0000004ec0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r6=>0x0}}}, @rights={{0x10}}], 0x80}, 0x40010062)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000005100)={&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00), 0x0, &(0x7f0000004f80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r6}}}], 0x150, 0x20008895}, 0x4000)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fstat(r7, &(0x7f00000003c0))
sendfile(r2, r1, 0x0, 0xfffffdef)

23:31:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\b', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:48 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x40000)

[ 2810.232885] loop6: detected capacity change from 0 to 40
[ 2810.235856] loop2: detected capacity change from 0 to 40
[ 2810.284155] loop1: detected capacity change from 0 to 1024
[ 2810.300088] FAT-fs (loop1): bogus number of reserved sectors
[ 2810.300981] FAT-fs (loop1): Can't find a valid FAT filesystem
23:31:48 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x80000)

23:31:48 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x80000)

23:31:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc1, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2810.443190] syz-executor.5: attempt to access beyond end of device
[ 2810.443190] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2810.444323] Buffer I/O error on dev loop5, logical block 10, lost async page write
23:31:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\t', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2810.510064] syz-executor.6: attempt to access beyond end of device
[ 2810.510064] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2810.511255] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2810.557439] loop2: detected capacity change from 0 to 40
23:31:48 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x1000000)

23:31:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x40, 0x3, 0x0, 0x3, 0x0, 0xfe7, 0x8000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp, 0x48, 0x0, 0x2eca, 0x4, 0x2, 0x7fff, 0x3, 0x0, 0xa093, 0x0, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
connect$bt_sco(r2, &(0x7f0000000240), 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:31:49 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b56f438dfb52d9bacc4cc1800257a1bdea55259c92766ad4cde2593d60a82c44904d4d07e73f8f48c52b3c0492ee5a172626ea51ba1006000000124cb3d22f07e87dc2a46b6ffafb62a4e5e4e0fb87bb7955da2bd08c52a12c31537279a515be7792"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = io_uring_setup(0x454c, &(0x7f0000000240))
io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00')
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4)
getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

23:31:49 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x1000000)

[ 2810.731460] Process accounting resumed
[ 2810.746051] loop5: detected capacity change from 0 to 40
[ 2810.750152] loop6: detected capacity change from 0 to 40
23:31:49 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:31:49 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x400, 0x20000)
sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x100, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file1', './file1'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2004000}, 0x8080)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r4=>r3, {0x0, 0xffffffffffffffff}}, './file0\x00'})
ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000340)=0x3e)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2810.882505] loop2: detected capacity change from 0 to 40
[ 2810.893313] syz-executor.5: attempt to access beyond end of device
[ 2810.893313] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2810.894306] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2810.943069] syz-executor.5: attempt to access beyond end of device
[ 2810.943069] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2810.944006] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2810.969948] syz-executor.2: attempt to access beyond end of device
[ 2810.969948] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2810.971099] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2810.978460] syz-executor.2: attempt to access beyond end of device
[ 2810.978460] loop2: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 2810.981985] syz-executor.2: attempt to access beyond end of device
[ 2810.981985] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2810.983021] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2810.998060] syz-executor.2: attempt to access beyond end of device
[ 2810.998060] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2810.999200] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2811.116797] loop1: detected capacity change from 0 to 1024
[ 2811.121461] Process accounting resumed
[ 2811.123352] FAT-fs (loop1): bogus number of reserved sectors
[ 2811.123951] FAT-fs (loop1): Can't find a valid FAT filesystem
23:32:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
lgetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r1, @ANYRESDEC=r3, @ANYRESOCT=r3], 0x0, 0xa)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)

[ 2826.576389] loop1: detected capacity change from 0 to 40
23:32:04 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2000000)

23:32:04 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\f', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:04 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:32:04 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x2000000)

23:32:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=<r3=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x8, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = epoll_create(0x4)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0002000})
fcntl$dupfd(r0, 0x406, r6)

23:32:04 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000040)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2a)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
poll(&(0x7f0000000180)=[{r5, 0x81}, {r0, 0x42}, {0xffffffffffffffff, 0x1000}, {r2, 0x120}, {r2, 0x80}], 0x5, 0x5)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x4403}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x210002, 0x0)
ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000300)=0x1)

[ 2826.626864] loop5: detected capacity change from 0 to 40
[ 2826.653485] loop6: detected capacity change from 0 to 40
[ 2826.663000] loop2: detected capacity change from 0 to 40
[ 2826.709585] syz-executor.5: attempt to access beyond end of device
[ 2826.709585] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2826.710471] Buffer I/O error on dev loop5, logical block 10, lost async page write
23:32:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2826.762465] syz-executor.5: attempt to access beyond end of device
[ 2826.762465] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2826.763360] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:32:05 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x8cffffff)

23:32:05 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x8cffffff)

[ 2826.794937] loop1: detected capacity change from 0 to 40
[ 2826.850876] syz-executor.1: attempt to access beyond end of device
[ 2826.850876] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2826.851796] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2826.878507] syz-executor.1: attempt to access beyond end of device
[ 2826.878507] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2826.879478] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2826.881879] syz-executor.6: attempt to access beyond end of device
[ 2826.881879] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2826.883091] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:32:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000180)={0x7, {0xc, 0x5, 0xffffffffcbc23e25, 0x1, 0x80000000}})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r6 = open$dir(&(0x7f0000000000)='./file1\x00', 0x20000, 0x80)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000040)={0x20000002})

[ 2826.933405] syz-executor.2: attempt to access beyond end of device
[ 2826.933405] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2826.935401] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:32:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x217e903ba75c4b38, 0x4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = gettid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x9c, 0xbb, 0x1f, 0x0, 0x0, 0x6, 0x40080, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180)}, 0x100, 0x0, 0x3, 0x5, 0x100000001, 0x10001, 0x1, 0x0, 0x81, 0x0, 0x9}, r3, 0x5, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000040)={0x2, 0x10001})

[ 2826.982955] syz-executor.2: attempt to access beyond end of device
[ 2826.982955] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2826.984204] Buffer I/O error on dev loop2, logical block 31, lost async page write
23:32:05 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0xf6ffffff)

[ 2827.034542] loop5: detected capacity change from 0 to 40
[ 2827.048844] loop1: detected capacity change from 0 to 40
[ 2827.188430] syz-executor.1: attempt to access beyond end of device
[ 2827.188430] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2827.190512] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2827.243258] syz-executor.5: attempt to access beyond end of device
[ 2827.243258] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2827.245197] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2827.260439] syz-executor.5: attempt to access beyond end of device
[ 2827.260439] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2827.262021] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2827.292999] Process accounting resumed
23:32:22 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xf6ffffff)

23:32:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001740)="601cff0740e36d036d6b646f7366d8a02b00080101000440002000b801", 0x1d}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
openat(r3, &(0x7f0000000000)='./file1\x00', 0x164280, 0x12)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000040))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080))
preadv2(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/110, 0x6e}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/199, 0xc7}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f00000014c0)=""/135, 0x87}, {&(0x7f0000001580)=""/103, 0x67}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000001600)=""/165, 0xa5}], 0x8, 0x0, 0x7, 0x1c)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x49f6, 0x29}}, './file1\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="0e470ca3811a41fce310", 0xa}], 0x1, 0x7fffff8, 0x0)

23:32:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
r5 = epoll_create(0x4)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0002000})
write$bt_hci(0xffffffffffffffff, 0x0, 0xffffffc8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)

23:32:22 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0xffffff8c)

23:32:22 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:32:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:22 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x800, 0x11)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2843.824838] loop1: detected capacity change from 0 to 40
[ 2843.827924] loop6: detected capacity change from 0 to 40
[ 2843.836452] loop5: detected capacity change from 0 to 40
23:32:22 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xffffff8c)

[ 2844.046053] bio_check_eod: 1 callbacks suppressed
[ 2844.046077] syz-executor.1: attempt to access beyond end of device
[ 2844.046077] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2844.048946] buffer_io_error: 1 callbacks suppressed
[ 2844.048964] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2844.096021] syz-executor.5: attempt to access beyond end of device
[ 2844.096021] loop5: rw=2049, sector=92, nr_sectors = 32 limit=40
[ 2844.118132] syz-executor.1: attempt to access beyond end of device
[ 2844.118132] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2844.119166] syz-executor.5: attempt to access beyond end of device
[ 2844.119166] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2844.119839] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2844.121555] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2844.177421] syz-executor.5: attempt to access beyond end of device
[ 2844.177421] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2844.179233] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:32:22 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0xfffffff6)

[ 2844.244603] syz-executor.6: attempt to access beyond end of device
[ 2844.244603] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2844.246999] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:32:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000180)=""/114, 0x72, 0x40000000, &(0x7f0000000040)={0x11, 0xf6, 0x0, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x80000001, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x3f, 0x1, 0x6, 0x7f, 0x0, 0x3, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000240)}, 0x10000, 0x2, 0x4, 0x0, 0x100, 0x9, 0x2, 0x0, 0x6, 0x0, 0x2}, 0xffffffffffffffff, 0x10, r1, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
accept4$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14, 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="0e", 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:22 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xfffffff6)

[ 2844.379485] syz-executor.6: attempt to access beyond end of device
[ 2844.379485] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
23:32:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x22e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2844.381117] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2844.456972] loop1: detected capacity change from 0 to 40
[ 2844.574822] loop5: detected capacity change from 0 to 40
[ 2844.597199] syz-executor.1: attempt to access beyond end of device
[ 2844.597199] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2844.599052] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2844.622270] syz-executor.1: attempt to access beyond end of device
[ 2844.622270] loop1: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2844.680470] syz-executor.1: attempt to access beyond end of device
[ 2844.680470] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2844.682603] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2844.690188] Buffer I/O error on dev loop5, logical block 10, lost async page write
23:32:23 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x1000000000000)

[ 2844.756081] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:32:23 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000001c0)={0x9, 0x10, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0]})
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg$unix(r0, &(0x7f0000004b80)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000012c0)=""/62, 0x3e}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/55, 0x37}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/37, 0x25}], 0x8}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001000)=[{&(0x7f0000000980)=""/206, 0xce}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f0000000b40)=""/228, 0xe4}, {&(0x7f0000000c40)=""/251, 0xfb}, {&(0x7f0000000d40)=""/77, 0x4d}, {&(0x7f0000000dc0)=""/223, 0xdf}, {&(0x7f0000000ec0)=""/239, 0xef}, {&(0x7f0000000fc0)=""/14, 0xe}], 0x8, &(0x7f0000001080)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000001100), 0x6e, &(0x7f0000001280)=[{&(0x7f0000001180)=""/103, 0x67}, {&(0x7f0000001200)=""/92, 0x5c}], 0x2, &(0x7f0000004e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000001400), 0x6e, &(0x7f0000002700)=[{&(0x7f0000001480)=""/205, 0xcd}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/13, 0xd}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/230, 0xe6}], 0x5, &(0x7f0000002780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/212, 0xd4}, {&(0x7f0000002900)=""/251, 0xfb}], 0x2, &(0x7f0000002a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000002ac0), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002b40)=""/225, 0xe1}], 0x1, &(0x7f0000002c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000002d80)=""/186, 0xba}, {&(0x7f0000002e40)=""/153, 0x99}, {&(0x7f0000002f00)=""/109, 0x6d}], 0x3, &(0x7f0000002fc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/139, 0x8b}], 0x2, &(0x7f0000004140)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000041c0)=@abs, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004240)=""/121, 0x79}, {&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/233, 0xe9}], 0x3, &(0x7f0000004f80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000000000000020000009790bd19897780bb74db59e2fa2781379bca2d9e5f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150}}, {{&(0x7f0000004600), 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004680)=""/77, 0x4d}, {&(0x7f0000004700)=""/209, 0xd1}, {&(0x7f0000004800)=""/108, 0x6c}, {&(0x7f0000004880)=""/168, 0xa8}, {&(0x7f0000004940)=""/163, 0xa3}, {&(0x7f0000004a00)=""/73, 0x49}], 0x6, &(0x7f0000004b00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}], 0xa, 0x12102, &(0x7f0000004e00)={0x77359400})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2844.871190] loop6: detected capacity change from 0 to 40
[ 2845.028471] Process accounting resumed
23:32:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a04001461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb7db7ece49122ff500aa8d843434e1eb6944e898196af83dd1c4a552ef59cd609b1993eb62feec0f2e14cb20f55f49773ad784898b1cafa4fbbea88bd05d884c908af7ef971ee012376e3371e4682b9861776a68d7816a66fd859e6eaba40afea58bf66570004c3d8252ca6be7ff473f3a657b18c514a4df63aedc6a8b12cdb482773180d991bf4c85bf493d8e0"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8, 0x0)
r1 = socket$inet(0x2, 0x800, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

23:32:38 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {0x0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:32:38 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4000000000000)

23:32:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'})
r3 = openat(r1, &(0x7f0000000300)='./file1\x00', 0x101002, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x20, 0xff, 0x1, 0x0, 0x7175, 0x80008, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x114, 0xe6b, 0x5, 0x8, 0x8, 0xfffffffc, 0x5, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x1)
sendfile(r4, r3, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:38 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="10", 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x80000000, 0x4, &(0x7f00000014c0)=[{&(0x7f0000000180)="d7d25f4e3208024e6aae0c1bd9612012e6a18d2b8148d87d1e331a68b7af5200a984f4032ff810c9638879ba529eb584f5", 0x31, 0x1}, {&(0x7f0000000300)="b4af396e30bded2bba6c5f8fe659823a25e33a68c16ce00a2513a719dcbae1f4c0e981e40231ddcb10443fcaf9efc101d2a3fe44a0d6a6cf3bbe7eb23317e6d9390e7e38a0781b87ebddc0ee548d0da09f48dd243e58bb632efe768c49c2de80917e130444da1d66348ddc7b", 0x6c, 0xffffffffffffffb2}, {&(0x7f00000003c0)="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", 0x1000, 0x7}, {&(0x7f00000013c0)="010f095dd6d7a0112e5d063e887f98ab94f191d201918c30cb6ccdad6482cb6b77b602cd6fbba13a9d8fef90aea4963a36bcfc7f309088bdbe7f51dcf17b0e85edd5c7b494fe95457e51316c2447df80409a249ab08b459af0138dddd035a265fc3d4cfcd78522cbeeeaa2e38533e5aab1fcf42978c20231a4727948d247128f87567726c0f8a3c433647b7826a9a2dcc05ce84fcf1472365658f9cd8ad43df306b42f20a07311c5aa3f7f42801cf9fc9c1d437da736b946a8221ab598dffeee4f8ad86efb8bdd3a4f8f7167f7b6bfc16fc95710f72e3b0e1526075b73682d07c00abb7336fd98ecde3ba18432d393e74eb2", 0xf2, 0x200}], 0x40, &(0x7f0000001540)={[{@gid={'gid', 0x3d, 0xee00}}, {@huge_within_size}, {@uid={'uid', 0x3d, 0xee00}}], [{@hash}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}]})
openat(r3, &(0x7f00000001c0)='./file0\x00', 0x8240, 0x110)

23:32:38 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x1000000000000)

23:32:38 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x6, 0x9, 0x39, 0x0, 0xff, 0x200, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0x4}, 0x40000, 0xffffffff7fffffff, 0x7, 0x8, 0x8, 0x800, 0x101, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0x3, r0, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2860.321422] loop1: detected capacity change from 0 to 40
[ 2860.329956] loop5: detected capacity change from 0 to 40
[ 2860.331511] loop6: detected capacity change from 0 to 40
[ 2860.454741] bio_check_eod: 3 callbacks suppressed
[ 2860.454770] syz-executor.5: attempt to access beyond end of device
[ 2860.454770] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
23:32:38 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x8000000000000)

[ 2860.571560] syz-executor.1: attempt to access beyond end of device
[ 2860.571560] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2860.574023] buffer_io_error: 1 callbacks suppressed
[ 2860.574040] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:32:38 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="12", 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:39 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4000000000000)

23:32:39 executing program 5:
mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x30, 0xffffffffffffffff, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2860.753359] kworker/u4:0: attempt to access beyond end of device
[ 2860.753359] loop5: rw=1, sector=108, nr_sectors = 16 limit=40
[ 2860.755906] kworker/u4:0: attempt to access beyond end of device
[ 2860.755906] loop5: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2860.757517] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:32:39 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000340)='./file0\x00', 0x200840, 0x10)
openat(r0, &(0x7f0000000300)='./file0\x00', 0x60000, 0x84)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="9b205f8f8161c65a8047edaa8f2898b658a8", 0x12, 0x7fff}], 0x3002400, &(0x7f0000000240)={[{@shortname_mixed}, {@utf8}], [{@dont_appraise}, {@appraise_type}]})
close(r4)

23:32:39 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x100000000000000)

[ 2860.968278] loop5: detected capacity change from 0 to 40
23:32:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
utimensat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)={{0x0, 0xea60}, {r1, r2/1000+60000}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)

[ 2861.071337] loop1: detected capacity change from 0 to 40
23:32:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='d', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2861.176165] loop6: detected capacity change from 0 to 40
[ 2861.190543] syz-executor.5: attempt to access beyond end of device
[ 2861.190543] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2861.192348] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:32:39 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x8000000000000)

[ 2861.264778] syz-executor.5: attempt to access beyond end of device
[ 2861.264778] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2861.266235] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2861.271022] syz-executor.1: attempt to access beyond end of device
[ 2861.271022] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2861.273524] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2861.352507] syz-executor.1: attempt to access beyond end of device
[ 2861.352507] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2861.354485] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2861.383604] syz-executor.6: attempt to access beyond end of device
[ 2861.383604] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2861.385500] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2861.519192] Process accounting resumed
23:32:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='x', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:53 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x100000000000000)

23:32:53 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x200000000000000)

23:32:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x301000, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0)
openat(r4, &(0x7f0000000040)='./file0\x00', 0x210803, 0xc0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
chdir(&(0x7f0000000180)='./file1\x00')

23:32:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000008c0)={0xb7, 0xe7}, 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
sendfile(r2, r1, &(0x7f0000000040)=0x4, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff6b3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = eventfd(0x6)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
dup2(r4, r5)
sendfile(r1, r0, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
pwritev(r3, &(0x7f00000007c0)=[{&(0x7f0000000240)="2fed15beb1ee93d88b7793abd7946e8483e5d6c926abeca3e0d66e6ad93de5d1d383874fc76a4ea8ae5d6079439150f8f6db2e09bf2a19aed30e03ec92c88b92fed9a040784bcb5dc2fba58b611ddb8c6d62c2b079fd225fcd9ada1a2b2f", 0x5e}, {&(0x7f00000002c0)="c5bf1fa4e18c01225363e17f95f42cc8a103e8297ced", 0x16}, {&(0x7f0000000300)="cb8c26254c2e2d7786c387581f14aa7b0e9c7432bb676564d6f2f65f0212f69e00f1b7847448e6c6d05b52bbb2809861c27297a04100de7e1fcf42809a1831e759915930e1935d7d3f5e1b", 0x4b}, {&(0x7f00000003c0)="a336e3e98c18e14fad595407558a3c350c8d905f210eb7955c93931072a24df105b8eae90506b1dd51b4438731daa5d0f0c07bab7565dc4dcad934bf63c471def2c9aec3adb22ce66f1a3e4105efdc02436923c17b0ad885ca168b613beff20bc9fd67a4dbd9bc023c5aaf2dc89cafa3123a7b17d94531901130a27268cfcc1b917c4e5a2b8e3df66e51881626cabb828a10e7cec573fa3e75dd089238c9c0886641264193d828a867c0ca8fa55e6311911aa4cf4012424a102749dc409f8e5048a368599ecd29d8f88083aab55aa5618d79b4a9f7ba1cd12d1fce7ca16dcb554cdbb3b7fd325e2f9e7f67c01fc9", 0xee}, {&(0x7f00000004c0)="f590dde648f3c0720d2fcbdc2b8cfd6ec6c8b67bf9affd7f73618a6efab6fd4e795e689e894dcad62b4d59b98fb0433cf57ec74aa776a8534e6798142085e333de7a78f345b12b15bdf2e1b2cdcc8d316d7adfd5544198bcef55be8efe5214e8a1d0889441d982", 0x67}, {&(0x7f0000000540)="0bfbc055afba41f03926b364b2943c3387918928a91fcfa62a5d6d61082b419341753f9ef87f026d7d0125e64130c2f00bc8f3b6e02f324c775d6dec6de4840f3904b9a247f91ebbbf6334f77e234ba62e3e246da05fd5ab007f78a9fb2bee1092f9f306116ef293e860910b38263f3008075a4e615f4c8ffa222a5f27b299c0fcf681b7675c320515c7d3468a33efd0487ac4cd98f027f5dfe6c37174f55e9f0ca2accbcb0ccad71072da74bc6275f65947ca6c60493952eedcc727dc740636e9e38d0e60795d15d39b59f1b32eac1e44b9bca1a7e13ce6364bbeef5d6f24a9b954c7a01d45f550", 0xe8}, {&(0x7f0000000640)="4690a9348d34614ce6fd758bfed410b6e89e16fc4d71ffb2ecf64bcc8b5da0769087dc2ea43d9537f5623d4aa01248dd48c04627", 0x34}, {&(0x7f0000000680)="df7b2d620ab9ac300e4bb2bc6ec8c51b1a108eb9fbade3e3dd72b01b648253d03ad1a9aaddf5fa298a53", 0x2a}, {&(0x7f00000006c0)="c51529e1bce5b01ddf36c93bb9c294afade21e3030379dc67987da3b7be556db1cd8", 0x22}, {&(0x7f0000000700)="184ce90a6d2e92211c68c8b299d8d375dfddada6bb896020ce793aafe7c6b10341774401ca88c211bb673b8208123a4d34da176889b70f6bd835c0ed446b05bd5ce6b0991722b52585e3ab5236f9d51ab504b193f1bb05a0205df8b1eb4388ef9cda2d070d8db82a1ed2fd29bfb28411ee8394f4e468aaee8edcd6e4c982fd7f0813d5d3365b0bf5b89dd9ff695fee4a55c33d427acdbf", 0x97}], 0xa, 0x8, 0x0)

23:32:53 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {0x0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:32:53 executing program 5:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:53 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
linkat(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1c00)
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288200b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(r2, &(0x7f0000000100)='./file0\x00', 0x101042, 0x20)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
sendfile(r3, r5, 0x0, 0xfffffdef)

[ 2875.521697] loop1: detected capacity change from 0 to 40
[ 2875.547503] loop6: detected capacity change from 0 to 40
[ 2875.743127] syz-executor.1: attempt to access beyond end of device
[ 2875.743127] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2875.745202] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:32:54 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x8cffffff00000000)

[ 2875.861229] syz-executor.1: attempt to access beyond end of device
[ 2875.861229] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2875.863054] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:32:54 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x200000000000000)

23:32:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="ca", 0x1}], 0x1, 0x7fffff8, 0x0)

23:32:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000300)='./file0\x00', 0x218002, 0xe4be980ea83dd662)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x80)

23:32:54 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xf6ffffff00000000)

[ 2876.175022] loop1: detected capacity change from 0 to 40
23:32:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x42415, &(0x7f00000001c0)=ANY=[@ANYRESOCT])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r2, r3, 0x1})
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x7, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfe, 0x0, 0x8b, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2876.251703] loop6: detected capacity change from 0 to 264192
[ 2876.370470] loop6: detected capacity change from 0 to 264192
[ 2876.395226] syz-executor.1: attempt to access beyond end of device
[ 2876.395226] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2876.397979] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2876.465584] syz-executor.1: attempt to access beyond end of device
[ 2876.465584] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2876.467368] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:32:54 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x8cffffff00000000)

23:32:54 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xffffffff00000000)

[ 2876.571190] Process accounting resumed
23:32:54 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {0x0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:32:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2876.787964] loop6: detected capacity change from 0 to 40
[ 2876.962330] syz-executor.6: attempt to access beyond end of device
[ 2876.962330] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2876.964555] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2877.096556] Process accounting resumed
23:33:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="0e", 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:12 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:33:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
openat(r1, &(0x7f0000000300)='./file0\x00', 0x400040, 0x12a)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, <r3=>0x0}, &(0x7f0000000480)=0xc)
mount$cgroup2(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x38000, &(0x7f00000004c0)={[{@memory_recursiveprot}, {@subsystem='net'}, {}, {}, {}, {}], [{@subj_type={'subj_type', 0x3d, 'vfav\x01\x93\x8bLi@\xf9\xde\x01\x00\x00\x00\x00\x00\x00\x00\x1a?\xd8\xb2ME\x8c\xa4\x1a\x0eJg\xb0\xfa\xfbTEl\xa0:\xfb\xf3\x1b#\xe8\xed\xb0y\xc7\x00\x00\x00\x00\x00'}}, {@audit}, {@fowner_lt={'fowner<', r3}}, {@euid_lt={'euid<', r2}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x648000, 0x3)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
sendfile(r4, r0, 0x0, 0x190000000000000)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'})
sendfile(r1, r0, 0x0, 0xfffffdef)

23:33:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xff, 0x95, &(0x7f0000000180)=[{&(0x7f0000000500)="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"/314, 0x17, 0x3}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1, 0x5, &(0x7f0000000440)=[{&(0x7f0000000180)="e4bf560a65f8418991d158de4c90fd270e67c13660b03677a96aad73a1a4b484b8fcfc570a81f8a508e390e6b491500ce8cf2d62508aff32e0a9b4058b890d2736c1a732e114b625f6ac66b6af3ea3360f90b01c05adba9a009b6da5e2297faf5c000cf2d178c5c30cc4e2d040a89014e967", 0x72, 0x4}, {&(0x7f0000000300)="4e37eb304f49b390b25883ea9a5e1164e2377b35aa9644010689b76075feda6dcc19a4dcb40fc57e1305762102ffba1437396c2a45822520066c6fe58dda3828e7d7a4983ad810831a155d49386a2b0e465152141c18f187939cd62016fa0e", 0x5f, 0x10000000000000}, {&(0x7f0000000240)="0c8f98", 0x3}, {&(0x7f00000003c0)="ac0de81f0f2e9cf9c0834ef469cc665be9191e76cf0180226afe14848510384092b44f9424d963f232fe33691d465e8273706a6e8e896fc75488577db48f2b2b", 0x40, 0x3}, {&(0x7f0000000400)="5815d6da12dabcea29010cc2d07f2c0489cb9484e8ee39a2bb1be6cbe088af673c30b0890745bbc42e309e8f19ce", 0x2e, 0xfffffffffffffffd}], 0x200880, &(0x7f00000004c0)={[{'vfat\x00'}, {',+[-'}, {'vfat\x00'}], [{@dont_hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@hash}, {@fsname={'fsname', 0x3d, '\xac@^$,#'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}]})
openat(r2, &(0x7f0000000540)='./file0/../file0\x00', 0x1, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:12 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4910}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, 0xffffffffffffffff, 0x1000)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x100)

23:33:12 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0xf6ffffff00000000)

[ 2894.148279] loop1: detected capacity change from 0 to 40
[ 2894.201578] loop6: detected capacity change from 0 to 40
[ 2894.213930] loop5: detected capacity change from 0 to 40
[ 2894.319248] syz-executor.1: attempt to access beyond end of device
[ 2894.319248] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2894.321118] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2894.355175] syz-executor.1: attempt to access beyond end of device
[ 2894.355175] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2894.356912] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2894.450124] syz-executor.6: attempt to access beyond end of device
[ 2894.450124] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2894.451771] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:33:12 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="31d8a45f43d8defabcede62b23", 0xd}, {&(0x7f00000009c0)="74e881660712f4816590567a60859b03e5", 0x11}, {&(0x7f0000000a00)="057d8808d76ab87e7cd6d9213de4869d1122fd104317978214f7377cc0013110bc3cacb11ece219c086f10506ffed17d10316b144106e9a53ac467dda40a803f102e68a3d21848ff9f8610e901cbd34a4b33679ca623705b0c0ebfbff258680c47663d318d47d1b60f8ae3495840380d64b9c22da36b5284e50ac720d9", 0x7d}], 0x3, 0xd47e, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
acct(&(0x7f0000000ac0)='./file0/file0\x00')
recvmsg$unix(r0, &(0x7f0000000740)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)=""/249, 0xf9}], 0x2, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x10000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x7ff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x8c0)
fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x3044, &(0x7f0000000cc0)={'trans=unix,', {[{@noextend}, {@version_L}, {@access_uid={'access', 0x3d, r3}}], [{@dont_measure}, {@smackfsdef}, {@euid_lt={'euid<', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@smackfsdef={'smackfsdef', 0x3d, ',-#-\xe0)^:\\'}}, {@uid_lt={'uid<', r6}}]}})
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$9p_unix(&(0x7f0000000780)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x1000080, &(0x7f0000000840)={'trans=unix,', {[{@access_user}, {@version_9p2000}, {@fscache}, {@version_9p2000}, {@nodevmap}], [{@measure}, {@pcr={'pcr', 0x3d, 0x5}}, {@smackfshat={'smackfshat', 0x3d, 'noextend'}}, {@appraise_type}, {@euid_lt={'euid<', r7}}, {@subj_type={'subj_type', 0x3d, '.'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}})

23:33:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
setxattr$incfs_metadata(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000180)="b3048106ade9770cda363aadb1d4b3aae036c73bec7076dd74a5ea31f671e88eecf5e41290b21da8e8437262e2db5af0cdf231248bda927e93ffcb0fcfcce1c62c93c2cf4a675f476f03d32464b7c4c5c0034481c9b645f511b9ec515d57839f0097796cc2599669", 0x68, 0x1)

23:33:12 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0xffffffff00000000)

[ 2894.621576] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
23:33:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2894.688245] loop1: detected capacity change from 0 to 40
[ 2894.730342] kworker/u4:8: attempt to access beyond end of device
[ 2894.730342] loop5: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2894.732146] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:33:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0xc4)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:33:13 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = fcntl$getown(r0, 0x9)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x4, 0x2, 0x8, 0x0, 0x80000000, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfb, 0x0, @perf_config_ext={0xffff, 0x8}, 0x10000, 0x0, 0x3, 0x4, 0xfffffffffffffffa, 0x4, 0x9}, r1, 0x6, r2, 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ftruncate(r2, 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(r4, r3, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080))
openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x100, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080))
openat(r6, &(0x7f00000000c0)='./file0\x00', 0x10600, 0x10)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2894.877349] syz-executor.1: attempt to access beyond end of device
[ 2894.877349] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2894.881415] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2894.911399] loop6: detected capacity change from 0 to 40
[ 2894.925220] loop5: detected capacity change from 0 to 40
[ 2895.003691] syz-executor.1: attempt to access beyond end of device
[ 2895.003691] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2895.005666] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2895.143146] syz-executor.5: attempt to access beyond end of device
[ 2895.143146] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2895.202175] syz-executor.5: attempt to access beyond end of device
[ 2895.202175] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2895.203967] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2895.304388] Process accounting resumed
23:33:31 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:33:31 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'})

23:33:31 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xb4, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x72}, @void, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0x6a, 0xc5, "ce3b42e739bc615dcc08a97bb3da69ecc4f395e7122126c6500014f69712724eb9e2e1af85b3e69c5b65f944ee5317bd0499db9a538cb47f39c54b17ed733548fe3f69ce9d421031fa59c8db4784690b7e2f0daefbb09ca1524479025ae96d07a217466ab5cd"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1112c3, 0x20)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r5, &(0x7f0000000000)='./file0\x00', 0x42080, 0x8)

23:33:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x42100, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000180)=@md5={0x1, "f9202033a4f33816f157a0920a88adf7"}, 0x11, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x12)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})

23:33:31 executing program 4:
mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x6, 0x200000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file0\x00'})

23:33:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0xdb8f, 0x2, &(0x7f0000000300)=[{&(0x7f00000003c0)="51a153d4ba427d1967276727d8be533e7187b28299186fd3405de7a5e89646233c824a770f781da7bca22c336b9ce5c8f3dd1b1cbef1031216e5e9e465acb7707b3bb33a8c1320de11350805145392846b6944fbe70a90ebaff849ca1f48ed6a6892684e4b3f7da72a590c637e2bb86b104e2ae4292aff97bed1159cba736387f55bb8018ee5dbbb124ffeb14cd0a7c724f05dedf0bcd3d36716310206a352f63561e119549653eab9e2fa3b134e82891117820df4df906949fa722b9b84b81b", 0xc0, 0x4d2710cf}, {&(0x7f0000000480)="988713e5302a4097fd9c619160cf5159edcec90799c91baae2891c1a03f0c71c68b8cfe2ef41cdcfa54be954e628844e7e7c789a38a07efd2118d4aebbd7a0ec87db87cc2e8ed8442c069e8c02716eecef58a7db18cbe975e7f1b77d992e673b53325a2a286f8e75c9ec4a90e8c069306f02754444ea33ce5fbb9aaf35be5a1977ba81c849339fd9f00aeadf47aacb68e530d315bd35e1108bf2f587e10e72109f67b271874dba1f464c9dd3c08526d978f9fd6b04d5d489304cdd2e809e6cbb8ca894aa9d34a6306bab6e1ba3f7ffc0748ec07591f91b62467bddb1b8e6f7c84fabeee6c459173d3b092188850f45bd8dbaa74e4e98e0", 0xf7, 0x8}], 0x40400, &(0x7f0000000340)=ANY=[@ANYBLOB="61a77072616973655f747970653d696d617369672c736d61636b66736861743d76666174002c00"])
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$CDROMPLAYTRKIND(0xffffffffffffffff, 0x5304, &(0x7f0000000180)={0x4, 0x1f, 0x1f, 0x6})
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000640))
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000000))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x3f, 0xa6, 0x5, 0xc, @local, @private2, 0x10, 0x700, 0x20, 0x7}})

23:33:31 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='\'}{^+\x00', &(0x7f0000000240)='vfat\x00', &(0x7f00000003c0)='vfat\x00', &(0x7f0000000400)='vfat\x00', &(0x7f0000000440)='vfat\x00'], &(0x7f0000000580)=[&(0x7f00000004c0)='vfat\x00', &(0x7f0000000500)='w-:\x00', &(0x7f0000000540)='}\x00'], 0x1000)
r3 = gettid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r3, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x3f, 0xea, 0x3, 0xff, 0x0, 0x5, 0x46080, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x100000, 0x1, @perf_config_ext={0x4, 0x3}, 0x0, 0x1ff, 0x6, 0x3, 0x4, 0x1000, 0x5, 0x0, 0x4, 0x0, 0x9}, r3, 0xd, r2, 0x1)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0xfe, 0x0, 0x10, 0x4, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000640), 0x1}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2912.700475] loop6: detected capacity change from 0 to 40
[ 2912.741189] loop1: detected capacity change from 0 to 40
[ 2912.776105] loop5: detected capacity change from 0 to 40
[ 2912.800371] syz-executor.6: attempt to access beyond end of device
[ 2912.800371] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2912.801383] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2912.850229] syz-executor.6: attempt to access beyond end of device
[ 2912.850229] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2912.852027] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2912.862092] syz-executor.5: attempt to access beyond end of device
[ 2912.862092] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2912.863674] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2912.920148] syz-executor.1: attempt to access beyond end of device
[ 2912.920148] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2912.921241] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2912.927933] syz-executor.5: attempt to access beyond end of device
[ 2912.927933] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2912.928805] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:33:31 executing program 4:
ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000001c0)={0x2, "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"})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0xfffeffff, 0x0, 0x0, 0x64f, 0x400})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000, &(0x7f0000000180)={[{@name}, {@clone_children}, {@name={'name', 0x3d, '/'}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}]})
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:33:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:31 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x8, &(0x7f0000001580)}, 0x2003)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2913.000491] syz-executor.1: attempt to access beyond end of device
[ 2913.000491] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2913.001467] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:33:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
perf_event_open(&(0x7f0000001b40)={0x5, 0x80, 0x2, 0xab, 0x6, 0x81, 0x0, 0x8000, 0x0, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x68b6, 0x1f}, 0x53844723ded14488, 0xfffffffffffff000, 0x5, 0x7, 0x45b8574d, 0x3, 0x4, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x10, 0xffffffffffffffff, 0x1)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001cc0)="cef1ee529638aca55ddd1361cc7ee9eaea6b5dc56b403e45e70c233268cb069f7408799e002bed74b6b44a518e83149cbe8569ffc8a947a1ea8438bfaa2b5d7a19ef01ba9c27ebfff48cf9d33237e3b3073ade983cd8ad8dfa5fc5c5528f2bbcdeca4328ca4c6c098f950933864ad64e51e09acbf1", 0x75}, {&(0x7f00000003c0)="4f7da6e31ea21027eb5ee4b03c4aceef63ce6667af97f841a74d193a6f762c37c0df12ba1be335f1ba434fb6f42f4ea611051008dfe4831c36427785a78bf4c599242e0669b74f89619e0d9bca139cf3f97bdde6dc4850ad0c86847e0251322eed68b68ce2d7f4a8b5abfc05b21abcb6f0c31cb717854988726843a471aa651deeeb41b7d0ae64ff4c5c9777d9ce60d838a21414a9d95f3d383489ec7c6fe79c3341a2", 0xa3}, {&(0x7f0000001bc0)="0f5f0190dd7e2c0e2e12a98da09628da47af5da736ec3ceab48e704b3030d8dbfa700adf34b55c187211495fa7d0346299aec99843a6a1dbd599da136820de35cca30186576b3493305aa1aeabba22fd8570f0595bfc4ecd07cd627fcf73b63ac8a63dd593ae052cc04fdb230af046290d3101f3b610e51c43126066a81db12a68026e1c5c2d86ce805be4ecd6caea4e43d64fa5f9da7cee11b5befc540becaa6441f4cdf37d02ea901d4526cfbdc9361e6822848fcf3d21695fe193b5d363f31b4f800fbd9b0d32890061aff994aee4ce287737742f2d73734333fd074817a1de022d5a9c4742", 0xe7}, {&(0x7f0000000580)="c81f62ebc85e78db8f32b44ba65defb8970f512ceef225ce2ab392744fed5633e152d63b63d05efaa469e61d61fc4c42abdf467f066d912673ab3029e323380927a5f390b2ad6a1c10c2045712773c8c828a04eeef965eacb71eb72c1e77ba0cbccd2e6e022e36b9730e4d0e6e668ef91550f729ad86e357a094f3b1bb4c2e98fcdd20dcb2aec2040f", 0x89}, {&(0x7f0000000180)="a2b78386e5cd337a3449bcf73e4071bdf8554dece5056c1cb0436cba7aa450412ebdee4e4dd23f6d0296f4a0b46207c65966d9fb211cc1bf4c2bef4b4e18005b49088a2582e8754c64ac54c178496fedb4ee5eb32dd0f68339caa3b2", 0x5c}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="b8ab29e18b1af58221dc6f331874e01fc1adfce76cded63bec6063e8bc0da927862bfda29fd175f8cf82bcb95a55dc6addd03d0294c18af00e6377b0aca172827d9ce2e8130ee98f8575db433d3b7053eb23852fc48ee2efdf6db33c5d634d1135a2423719f63d63fc9d32e5dd901d37777bdaee824aad7c865d4f5d7e708a0d1fe915ca901e3beb7c59f083ce1c6fd2ef997bb39ddf296e7cdbf90bb8cd199d68b12df565d43481b2e5683c87423337cb49d77693e4cdc6774793f48e33605fd047173524e4380eb9b5426531a8d122209cf8004c1c7a7d58214a626e80a7a5ced0bd8c5fa973eedc08c3ddc1cbf31e885e6b2f0ada69d0", 0xf8}, {&(0x7f0000001740)="8a561df7ea3f471cabb0211ccda16de48140b8ffd6faff43062cb06665e6d269fbb9f2ad9eba39a36a375d8919ceac05c723734be3bc358bfaef36ab63313d2ecaad761d15f3983d247aed0045a509f5b933640c9e30882e3e62", 0x5a}, {&(0x7f00000017c0)="f420ee655d2320022a2bc342cb49500b940c8d40d6abc301030a1a7c173d22b00164bbb73959485fbe3eafde4914ae6043db2783afb27a25ea80985794ce0e3c1d5d", 0x42}, {&(0x7f0000001840)="d8f59bc9ac6e82591117a29d922c0026d366ee2ba06ebb555f6fd02b587364f09200e29cfbe3fd1b8e276318a93c7744f3e5cad426f9915018015cfff1368cc56c34c22524c9252017f52287c2e2007d4c20ead9b1b227f5060565b681d5bb247741aea84e4d6200baa377caf6506071bd82462be41ab3dc5fe732027a88e126beb9720c318bd9512f63204c3dd7a6e908f0bc9c39b26d459d83f0440fb16432a285cb882abdf52cdfb99e2659ec67c2431982cf9e0b704b4c04d5de3a3d9242f65dc549596aba5958e7e21e635306da3d43e2af26123021a2843c6cf7f4494e7fd24a2d00adba4d8d", 0xe9}], 0xa, &(0x7f0000001a00)=ANY=[@ANYBLOB="14000000000000000000000002000000e20000000000000011000000000000000000000001000000040000000000000014000000000000000000000002000000010000000000000014000000000000030000000002000000cb08000000000000400000000000000000000000070000008623ffffffff010202070f50cf8a640604b192050a0dca775d77e965480106e8cf010501860bf07405a8343f245ca00014000000000000000000000001000000fbffffff00000000110000000000000000000000010000000600000000000000"], 0xd0}, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

23:33:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x5, 0x0, 0x8, 0x0, 0x8000, 0x5110, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x48, 0x9, 0xfffffff7, 0x2, 0x200, 0xb4b, 0x76, 0x0, 0x73d253e4, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r0, 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2913.093394] loop6: detected capacity change from 0 to 40
23:33:31 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x1000040, &(0x7f0000000240)=ANY=[@ANYBLOB="11987472616e733d756e69782c64656275673d3078303030303030303030303030303030332c7063723d30303030303030303030303030303030303035342c6d61736b3d5e4d41595f524541442c66736d616769633d3078303030303030303030303030303030312c00"])
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:33:31 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2913.194248] loop5: detected capacity change from 0 to 40
[ 2913.270199] 9pnet_virtio: no channels available for device ./file0
[ 2913.275595] loop1: detected capacity change from 0 to 40
[ 2913.296405] Process accounting resumed
[ 2913.348027] syz-executor.6: attempt to access beyond end of device
[ 2913.348027] loop6: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2913.363017] syz-executor.5: attempt to access beyond end of device
[ 2913.363017] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2913.365005] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2913.376874] syz-executor.6: attempt to access beyond end of device
[ 2913.376874] loop6: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2913.377769] Buffer I/O error on dev loop6, logical block 26, lost async page write
[ 2913.385551] syz-executor.1: attempt to access beyond end of device
[ 2913.385551] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2913.386597] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2913.411218] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:33:47 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x3, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:33:47 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x3, 0x74, 0x66, 0x3f, 0x0, 0x1ff, 0x808, 0x10, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0x2}, 0x8401, 0x5, 0x1, 0x0, 0xfffffffffffffff9, 0xda, 0x5, 0x0, 0x6, 0x0, 0xb7}, 0xffffffffffffffff, 0x3, r0, 0x9)
acct(&(0x7f0000000000)='./file0\x00')

23:33:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
write(r1, &(0x7f00000003c0)="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", 0x1000)

23:33:48 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x186, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80000000, 0xb510})
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000040)=0x1, 0x4)
sendto(r0, &(0x7f0000000280)="ee3bc48c71ffa43c048897aef8d277337f04332ffb70654305187a1a01f94cf6a3218494667c7b5693e61b624e4a6a2de76244610545c7daa91f32b2550409e9e430359ba094da74e03f64690a8cb3ac93f1e81a26c00a8796b42d46a77d17267a923f700d2c4f69bae83624692d7cd3f5c8df9cf0cfa2873de584b66c4840b22c2365d9208c98d91c668a2862d689d0cb8cb39e", 0x94, 0xc010, &(0x7f0000000340)=@caif=@rfm={0x25, 0x5, "01770911920fa6b0cf9a6f6b2b34fce1"}, 0x80)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03800067fbff0400e50000000000", @ANYRES32=0x0, @ANYBLOB="9cd5b7087bd7abc755c2fe38f83c0e73a93673161755d7241b2e5a37c1dd1c1582f888881902b25df740222af6fdf8a64c92c7312748b4321cdb1aae308eb7f6307313a015b81f2085ce7fbdf3fea9dce95f"], 0x20}, 0x1, 0x0, 0x0, 0x844}, 0x50)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x48000}, 0x880)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x80, 0x0, @mcast2, 0x2}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$sock(r3, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@in={0xa, 0x4e23, @local}, 0x88, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x25}}], 0x18}}], 0x1, 0x0)

23:33:48 executing program 6:
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="0c3ed9d70d4e5e25cbc0c052f2aa007cc36e65b9bc44e0ef2cf802b9060b107f82d3d5854ff288124645a17d897eea8773737b1f03399c72ac2957ce3f5fa535530abf83803dc94f7a9e87af3da23e29465ca753545d4b7c01451c1a7e6aec61025a5c65659c1d672980495fadfbae95707542c726eda39f6f718e4ce718588b9191d19b89963a884f29c06c636c587881691f6041196b858a773fe20bb877932d4823e80344755ef91e807cf3372eb2a6f365e6364202a4acde9556bf260a3e4197902511d1a8f9d6b43509f9049f77b81cda7eb9f70c7317facca96a7a906c5126b9bd60f8ba47", @ANYRES32, @ANYBLOB="2131476dcdbe4c8b7c81c4b2f45516dc3eea6a5515ec89e317923059ed68c7efe8d676c16fbc9e21aa6f664c67b0bd5bba49a2789e0ada655e5e49d81e21f7b015e4aeec283b9db37e27243478ad9f858de0152913d125577080970d9db03c032d8353413bdc46a1355b5537a2f4fce17e618603f13e2b9b23c0d169254b5bc4af7aff2556ae078ab62edfcc9cbcd7854d188f92a88f777a", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES16], 0x6c}, 0x1, 0x0, 0x0, 0x28000000}, 0xc00c825)
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x18001, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
epoll_create(0x400)
sendfile(r0, r3, &(0x7f0000000040)=0x5, 0xf966)

23:33:48 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, 0xffffffffffffffff)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000180))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0xd4584000)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x551cc0, 0x12)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname(r1, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f00000013c0)=0x80)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', 0x8000, 0xf8)
sendfile(r1, r0, 0x0, 0xfffffdef)
sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="52148d9df99c5a92228e4cde668946b4672cdc8b79a1496186125158fea73bacda059e76ad3878d5036f81d6dba723dd240560d33a1a80e54b03dcb718ddaba034c994fabdd1b55e0b855a8818a3b4fec9aac712cea880e60a6a6d41e61c48c795efd4d8a2d0959fddcb4f68bc57cf5b92fd1cb0b1e64e", 0x77}, {&(0x7f00000003c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x8}, 0x40000)
chdir(&(0x7f0000000000)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = inotify_init1(0x80000)
pwritev(r3, &(0x7f00000025c0)=[{&(0x7f0000001400)="e189f9cf336b71a33853d2a187a5e26823e63c78e192d65e2c77ccf6cbd3932b800ff3", 0x23}, {&(0x7f0000001440)="8a128ebaac8ef7865dd6b23f47bbfe0fa379b16739b10ff211f705e8a3f9e7f083a0f8c2722262e67e274d72642f6ce414d210439004d6212a7f6bfdc7b1695f775a771d5907bcc5ac47f3200629693b4f7b8b2ef8655dbe7a3fe6b756e05a071d38cc0e411399c0a3edbb3577ef730741fa8d3cb6c7706a84ee47eafc1608430647b5cbec9fb0f04d51018ab6ff", 0x8e}, {&(0x7f0000001500)="36c547c9b305c987b4f73fb512a7b7e3b7f82fd044e4b2df2f9536e7c3dd4381d3e853efa7d7df5bc080c6005fd842ce16c970ddd513092414b17696ecf2eb48114b8029b7681a212ab39ed9f16577b6f032439416f5b57b0d3da3f2a8f7dd905b1ba5b4d4b8d70e067fb882fe11603bbf5aad8d8a27cf9322ce43fd69c66182eb884b", 0x83}, {&(0x7f00000015c0)="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", 0x1000}], 0x4, 0x8000, 0x20)
close(r2)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2929.704376] loop5: detected capacity change from 0 to 40
[ 2929.729837] loop6: detected capacity change from 0 to 40
[ 2929.761056] Process accounting resumed
[ 2929.766113] loop1: detected capacity change from 0 to 40
[ 2929.808235] bio_check_eod: 2 callbacks suppressed
[ 2929.808263] syz-executor.1: attempt to access beyond end of device
[ 2929.808263] loop1: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2929.877528] syz-executor.1: attempt to access beyond end of device
[ 2929.877528] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2929.879767] buffer_io_error: 1 callbacks suppressed
[ 2929.879787] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2929.885066] Process accounting resumed
23:33:48 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8, 0x1)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x7, 0x8, 0x1000})
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2929.917000] syz-executor.5: attempt to access beyond end of device
[ 2929.917000] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2929.919102] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2929.994244] syz-executor.5: attempt to access beyond end of device
[ 2929.994244] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2929.996095] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:33:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
truncate(&(0x7f0000000000)='./file0/file0\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2930.143106] syz-executor.6: attempt to access beyond end of device
[ 2930.143106] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2930.145109] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2930.176724] loop1: detected capacity change from 0 to 40
[ 2930.205459] syz-executor.6: attempt to access beyond end of device
[ 2930.205459] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2930.210411] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:33:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:33:48 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r0=>0x0)
getresuid(&(0x7f0000000200), &(0x7f0000000240)=<r1=>0x0, 0xfffffffffffffffe)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x8088, &(0x7f0000000280)={'trans=unix,', {[{@access_any}, {@cachetag={'cachetag', 0x3d, '.+'}}, {@aname={'aname', 0x3d, '-{/.](,)'}}, {@access_any}], [{@uid_gt={'uid>', r0}}, {@fowner_eq={'fowner', 0x3d, r1}}]}})

23:33:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
preadv2(r3, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000180)=""/76, 0x4c}, {&(0x7f00000004c0)=""/208, 0xd0}], 0x4, 0x10001, 0x456, 0x16)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2930.341557] syz-executor.1: attempt to access beyond end of device
[ 2930.341557] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2930.343926] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2930.384931] 9pnet_fd: p9_fd_create_unix (50457): problem connecting socket: ./file0: -111
23:33:48 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
getresgid(&(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000240))
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r3}, {0x8, 0x4}, {0x8, 0x2, r3}, {0x8, 0x1, r3}, {0x8, 0x2, r3}, {0x8, 0x4}, {0x8, 0x0, r3}, {0x8, 0x5, r3}, {0x8, 0x7, r3}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r4}, {0x8, 0x4}, {0x8, 0x2, r4}, {0x8, 0x1, r4}, {0x8, 0x2, r4}, {0x8, 0x4}, {0x8, 0x0, r4}, {0x8, 0x5, r4}, {0x8, 0x7, r4}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [{0x2, 0x5, r0}, {0x2, 0x4, 0xee01}, {0x2, 0x0, r1}], {0x4, 0x1}, [{0x8, 0x2, r2}, {0x8, 0x3, r3}, {0x8, 0x4}, {0x8, 0x6, r4}, {0x8, 0x4, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x64, 0x1)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
acct(&(0x7f0000000000)='./file0\x00')

[ 2930.423355] loop5: detected capacity change from 0 to 40
[ 2930.427575] syz-executor.1: attempt to access beyond end of device
[ 2930.427575] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2930.429443] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:33:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_create_cis={{0x2064, 0x25}, {0x9, [{0x8, 0x2}, {0x7b, 0x3}, {0x200, 0x5}, {0x8, 0x8}, {0x9, 0x1f}, {0x401, 0xa291}, {0x8, 0x6}, {0x3, 0x3}, {0x3, 0xdf}]}}}, 0x29)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000340)=<r3=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000800)={{}, r3, 0x1c, @inherit={0x78, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000600000000000000013e00000000000015da4e49000000003e00000000000000010000000000000000aa000000000000000500000000000000010001000000000011022c3600000000030000000000000007000000000000000900000000000000"]}, @devid})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{r1}, r3, 0x10, @inherit={0x60, &(0x7f00000003c0)={0x1, 0x3, 0x80000001, 0x400, {0x5, 0x8, 0x5, 0x8, 0x9}, [0x1, 0x1, 0x0]}}, @name="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"})
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat(r4, &(0x7f00000001c0)='./file0\x00', 0x501401, 0x2)

[ 2930.561355] loop6: detected capacity change from 0 to 40
[ 2930.645839] syz-executor.5: attempt to access beyond end of device
[ 2930.645839] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 2930.711810] syz-executor.5: attempt to access beyond end of device
[ 2930.711810] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2930.713639] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2930.835309] Process accounting resumed
[ 2930.873465] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2930.928328] Buffer I/O error on dev loop6, logical block 31, lost async page write
23:34:06 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40160, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x200000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0/../file0\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x488000, 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x9, 0x7, 0x6, 0x0, 0x20e1, 0xd8cdd1f4621d6f80, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x7fff, 0x40}, 0x40400, 0x7, 0x7, 0x8, 0x6, 0x3ff, 0x7f, 0x0, 0x4056, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r2, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x101, 0x1)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x1)

23:34:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000))
fcntl$lock(r1, 0x25, &(0x7f0000000040))
syz_open_dev$sg(0x0, 0x0, 0x3)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

23:34:06 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = dup(r0)
fspick(r2, &(0x7f0000000000)='./file0/file0\x00', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
recvmsg$unix(r2, &(0x7f0000000600)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000480)=""/100, 0x64}], 0x4, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}, @cred={{0x1c}}], 0x88}, 0x100)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180), 0x800008, &(0x7f0000000640)={[{@cpuset_v2_mode}, {@cpuset_v2_mode}, {@release_agent={'release_agent', 0x3d, './file2'}}, {@noprefix}], [{@appraise_type}, {@euid_lt={'euid<', 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, '@@'}}, {@dont_measure}, {@euid_lt={'euid<', r4}}, {@euid_eq={'euid', 0x3d, r5}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080))
openat(r7, &(0x7f0000000740)='./file1\x00', 0x0, 0x107)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'})
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:06 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{0x0}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

[ 2948.365433] loop5: detected capacity change from 0 to 40
[ 2948.404265] bio_check_eod: 2 callbacks suppressed
[ 2948.404281] syz-executor.5: attempt to access beyond end of device
[ 2948.404281] loop5: rw=2049, sector=100, nr_sectors = 8 limit=40
23:34:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x5, 0x7, 0x7, 0x3f, 0x0, 0x4, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x7, 0x261, 0x3, 0x7, 0x2, 0x8122, 0x0, 0x8001, 0x0, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:06 executing program 4:
sendmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)="ffe71f4c643b10cb3a1a153dc4be5f302f54ffe2c157f7f554795dc202f6ceacac1a698f55535d01064c2c5cc6f466f52c73bf5101fdc290c756314bac58042e8d55f47642b515ae116889b69c252db0c25b24b022e1ba7abb8039f3d3d55101d3c5e19d1d2fd93d4b6dedc695c6a880a1cb48516a2f5f711475acf57bad16e4ec01a944a9a26f09d459fc25abcfc90a425bbbfaf913cfc6a6abf659d77cf998e279eb520a1575a4", 0xa8}, {&(0x7f0000000000)="50d83a423e4168418badcb4996223801498bac90c5a2738224cbcecd47c924496a6dd923b12c31e9dcca", 0x2a}, {&(0x7f00000002c0)="cf12802c18e900f8feec9fc13f53db26ed1938c83b18d3965e1ba6eb8bff8e07bacc1d6d6740a00c852b0c2d91272973498807483c6c91cc97b185cf03a1547aa9b500cfa3a96264c76ca9eb567b1be8d1ce39cb02a3987eaf559f379c8b6a8a13d0a377f8236e242049ba04aab85c821ecb213c1dc68a1582d46298b1ec064a4427ac4d59df29193c0cb099531769fc6a8590e0975b4ba7a91de7e3d2932e191cfc1450d6911908c97e3bf2ff", 0xad}, {&(0x7f0000000380)="22c6459ee912cc36fbce802195059abb590b24e0263b8f65cf37e0d6eb953c18ea62c617a10cad23ebe0d0360c309b96e3297864bc3a76e99f8cf0fadc645a2ede6c06", 0x43}, {&(0x7f0000000400)="79c8c73460073d471adf044f63beb367ec41008bfaf386a3589b1154345324615a6149ec85c2d55b77cd2a0bd4fcde5d6f6bbe98f478b5c93e2b3861b3f4cb285aa3bb979f04090d8afb77d5b7f0e2a6b595474552fefece104c7852e073f9b0384c7802388d5a20ede07237eb1482e1d4a49441350f9d01796e0096eb0040cfa6cc3acdcbb1b48f568538246209e5986e89fda221c6d4c1b841645a64710cb90f596d3cee72f04a0cbd76c747", 0xad}, {&(0x7f00000004c0)="07f7c112ac3c37309435654958db453c86467c88cf3defc2b813995311f1f6ed415a8bf044c2d6aab4ac23e3c1c10554ec51c0f3e802b8a610f89824569aecf20d80e8cc7eed66e66de604d0ef0d2a64bb18b4e7dd5b293bd56ea38b618259729165c97178", 0x65}, {&(0x7f0000000540)="50ee3800740f8d7c722e9cbc86f307556afe4707ae0bcf1df93cdb343e90d74b00088d545bad37219bb1d30023a243fe6061643aab3fa15bedfd173ebc6bd3d7545420c03f24ca0557e1c730221dacf77cdf5ff97ef85cfaa8363918c378e03646dbf9aaff262c567833bf3a2cc00e2c08343b1e045341e0db2bf847fa5cd8dd039f0e3f6d9f757665063b83712468283c61f66529071b6e1dd7c5172745ed0b33de8cb0934a3670e4b74c61", 0xac}, {&(0x7f0000000600)="a2baa70508c050feb461a790368d7af64c45d6debb8f2fb88103c32eee88f5aeddf5f9d3d0301ba02e6d285d718c3b1921a37a7e2804edf5379ab69ed0b0508194ff8ae21920c69e446c8496f0dadc82747ef834e82a4b9525a88d334a920e104567aafa5de09b4b1ce141657d927289446d54610e1f4f177d40e41dab6b4bc072e2e33105b817e8ad0a3a3dc4faff069e2c3fcd6be607ed1a23b5317845f9b2edb659a3837ef28cb647586dc124a8c104928d34934da25ab65bf123beda99d4580371e6cea6dd84", 0xc8}, {&(0x7f00000000c0)="cbb3b3e1894d574095ef12cf7c9c8497c3984b046a62d97a74c6304f452b0cac4c8d8170f37875b4b3d7d823b753ba96dafea48165dbec", 0x37}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x84, 0x3, "4a4111ba3ef009001fa5809c745ce741094cd27dfb41c574c7270a006650b55cb7661e5a5337413cd4b087db644ce37d8626de1a42c6bbdc53fd2f5cc94a0de88015c965d33bf46603258be80d662eca9f3a87184b46da2039d67f337d780c69b9c5f28b8dbb1fe6f0376ea2354d7f4b18993d0678b7a80b4125fd29b19b99d1312e59e7b32113e37ca3c6bf221b1f233bdc0cd0ca2fed3f797e80ed26aa82f0a603dcef5918930c6effe5e414f4b52cfe2b03da95e29f1dc053f33626614eb1e5d46090c5427bdeff1f4e9538ef56f7e0eaaebc7b412fb42b6a999bd580031fdbbfb6f93ab3eafa"}, {0xe8, 0x10e, 0xe7, "ae32d0351d608af3af9d7685b7acb6e550159ef16ca53ed3b32442801453764cd842444ae1fbd179e36fb8c01f0cebe0bd68e13beb2d2d4583d7751e85f3c714bf7d3f5dabf2884df38c91d188b9056acad511f24c37b47bbd1494d58a3abdcf6d938cf31a65cc1c1e9ae02416e41166d3da7592a23c9aae21056dbb46aebec55bbed7c0155e60cc13c289996cbc14bb2e7da59e43dbdc9bf962ec1a6630b83c01d4e8b128e8285cb0fcf8a298b9d441b9f47a8265210cb437b9b893350daed74c3ab3de2950404a61a7663e706b8064e8b431b6"}, {0xa8, 0x10c, 0x80000001, "967e5a638b0a5a8c5932ef5d950d297c2761481ccf4e1fcb131b7ab60d91185a7db9a677b19cf67a9501176c32fafd8c68fbd52aec7952adb289374bddba1e9db3f7f3228d2edd0a876606cccd6c930c3beb11c0e6669394112f732322f98760a6edb72666f8d97ad304486896faa87bec98a0f7b16688624c970ef7ac755e1be28feb3efd60b0adfd2ffcdf179bf5fbc077"}, {0x100, 0x115, 0x3, "70e8610ca8984f3db9ac3c00ffd7622421640812fd9dfbab709d3ac418f73f0fbf4bd65682ea59f89b7237a5e6064b6c3030968b77f63bebd7b3d136c3dfc697dd20d220889315b359e555892c4422715828993c936b20a31598f37598e0f27ed8ad71f91c90c073dc972aeaac7c64df3d7daf6bb3a961d70751c97da779562a39a2def3ab14a0c19a4f3c4675960b20b9ea81717210c6147696800b6e4a2d159835d5926f0718957ee0b0790f013b1c1f3d4be3e02ed5f242dcc315f9dd5de7b67c280e4d6aa03d2a80016815144f4ee2d9f2c11391e80dc473ccb6e97f32b0d7efcf56aebccebd573c"}], 0x388}}, {{&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c00)="e43b3463d240af11328de7ce3e04c276a76914e5b031c6fbf75cc91f7489d43b6ae7f2c0d874f5e718e979c78f3cfaa79df9eb2d51aac8c8c9c4b6a12c93dca62f50eef5b97bdcd5a7edff041f03e95650a3d0f0d0a403dc", 0x58}, {&(0x7f0000000c80)="a6fbfd26b7eff394778f99ff691f17edf4fa6a2b35027564073722795f3bec69a077c12f034eb833244c9897ca10f5bab13f9b5b8abf30ae7a799f1befe40ee497e7259705e2a60374ff2e2a412e67c1cdab25eef065b7e1e1b3d4899d81189abd47a0beb296b6f1930bbd105fe4d7d0e1623b9261fc9d681d47e83af3f5dff8507095876f8c4a", 0x87}, {&(0x7f0000000d40)="8fca5ce0fa33707bb90999a9bbed61b701eb64abd57c375183e6ba37aae90cc1370efa80c2ff0ea623a30e86c145bbcad90c7c7ec69923ba50c5a9dc3bfe25152354e9f47ebc700c2cb03a334461c6c421dd8ce2c06565602f34ac0d265b37c55fa2743d28df983018d2da06e0fdeb24b65af3719de8bf7bb4af82f152e448f7ad8e74", 0x83}, {&(0x7f0000000e00)="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", 0xfb}, {&(0x7f0000000f00)="596c27c43d2a57eb06389579bda985d18efc70b81386a6c657eccd0843d9d70a47f0b8288d9db395be698b28c73ffbfd60b3707f6777e91b647c1795066dadb4faaaa03590d0d7d60d8137165d1db2e7965c2a6951b4c8e57eaebfcab88bbf9a57bc9ebf6501cb7aec60659c3b058f4eb59488777d0c62527ee5ed35a63aac43", 0x80}, {&(0x7f0000000f80)="1fe64ed1c9614194afb38df883796bbac9fc1639c8c33d90f0d6d1dfec072f18cb6f313437110c79313582989c343eaf8bfd1daf1a8c7a2eb61e5b380508ae081bcfdd128352681e28d41bb6a2f1f7457b15ca193a76f427a305c15231f657bb8a0b8ee4309b61b34b315b7d8af7e8689607e92436d2731f930adca50ad7a67e33", 0x81}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="a6e0445c073d85c645301a044d19cbdc2f8a1a297e3f14d5da4f4e937112f84ec208f28471e46986841774b9e31c0c5ee35879fc25937e17397bbbe1d629e7cdc894f59f8022a072b6d76044d133ff5a699698e8267433b5d9dfa2902f564c2d6a3b91fc879065eab77f901b78c7a7f6855e6d7ac2a3beec40c29c06225860bd6c9c848c132da7d3eb842cfadef92a844e9127f1de60162ed10903236486139bb5f54393eafb95351a8b98b92c8fe87a10537b77b7738fcb4e05b42e962239f5812cdfc19028f229efe979125b526a5c41127bb2da66eecfb29c32323260f47c119b6a", 0xe3}, {&(0x7f0000002140)="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", 0xfd}], 0x9, &(0x7f0000002300)=[{0x30, 0x116, 0xb8f, "d387c670c74e17ba5ead8c1faca3f8165101df144dad2d6b70"}, {0xd8, 0x6, 0x1000, "ddbdb00e9ef76e737c5640f8b7b4c5a151e1e1e3a9b3c5dd5f897d87e3fe4a19a06cfa59dd3862ef9df1ac1518de87846c01a0a514fecac49679c2f9b728be9de24cbf92e363c7981346718f98fd11e97b8cb9789206c8708c278e20ddaca260badeabd6ab30e67c3634976dd5e3a66bf2d76e1b38b901bd2652a36f18a81a35cf8956fb67ab88d6cfafd2dc71edede435c695ab6c28e0cdc328e3508dbb800deebecc7df7956a5aeb522bb8d99d2a6e6d8677a3e06a80c1fc4a8339c50a4e9b6e0d98f0b9f1"}, {0x48, 0x104, 0x2, "64fa060f185c27d741434d6ae383206ce34f72eec118c70d04cf1cfb8a53e6d0e6ee960630ff1f6fcec590aa6352615b0292587a5240"}, {0x40, 0x84, 0x7ff, "280d4fb173204de2440faa54e6f7d3b1d55df4441d1dcd5ca5f4dcd5ef1ea0c3aaddd135c09c0dfc1b8c1c39f6c2be2c"}, {0x1010, 0x101, 0x3, "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"}], 0x11a0}}], 0x2, 0x4)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:34:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='A', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0xff, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40580, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2948.438463] syz-executor.5: attempt to access beyond end of device
[ 2948.438463] loop5: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 2948.439429] Buffer I/O error on dev loop5, logical block 26, lost async page write
[ 2948.472235] loop1: detected capacity change from 0 to 40
[ 2948.475824] loop6: detected capacity change from 0 to 40
23:34:06 executing program 4:
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x3)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
readv(r0, &(0x7f0000002400)=[{&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/108, 0x6c}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')

[ 2948.604061] kworker/u4:8: attempt to access beyond end of device
[ 2948.604061] loop5: rw=1, sector=108, nr_sectors = 16 limit=40
[ 2948.605086] kworker/u4:8: attempt to access beyond end of device
[ 2948.605086] loop5: rw=1, sector=124, nr_sectors = 4 limit=40
[ 2948.605894] Buffer I/O error on dev loop5, logical block 31, lost async page write
23:34:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname(r1, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f00000013c0)=0x80)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', 0x8000, 0xf8)
sendfile(r1, r0, 0x0, 0xfffffdef)
sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="52148d9df99c5a92228e4cde668946b4672cdc8b79a1496186125158fea73bacda059e76ad3878d5036f81d6dba723dd240560d33a1a80e54b03dcb718ddaba034c994fabdd1b55e0b855a8818a3b4fec9aac712cea880e60a6a6d41e61c48c795efd4d8a2d0959fddcb4f68bc57cf5b92fd1cb0b1e64e", 0x77}, {&(0x7f00000003c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x8}, 0x40000)
chdir(&(0x7f0000000000)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = inotify_init1(0x80000)
pwritev(r3, &(0x7f00000025c0)=[{&(0x7f0000001400)="e189f9cf336b71a33853d2a187a5e26823e63c78e192d65e2c77ccf6cbd3932b800ff3", 0x23}, {&(0x7f0000001440)="8a128ebaac8ef7865dd6b23f47bbfe0fa379b16739b10ff211f705e8a3f9e7f083a0f8c2722262e67e274d72642f6ce414d210439004d6212a7f6bfdc7b1695f775a771d5907bcc5ac47f3200629693b4f7b8b2ef8655dbe7a3fe6b756e05a071d38cc0e411399c0a3edbb3577ef730741fa8d3cb6c7706a84ee47eafc1608430647b5cbec9fb0f04d51018ab6ff", 0x8e}, {&(0x7f0000001500)="36c547c9b305c987b4f73fb512a7b7e3b7f82fd044e4b2df2f9536e7c3dd4381d3e853efa7d7df5bc080c6005fd842ce16c970ddd513092414b17696ecf2eb48114b8029b7681a212ab39ed9f16577b6f032439416f5b57b0d3da3f2a8f7dd905b1ba5b4d4b8d70e067fb882fe11603bbf5aad8d8a27cf9322ce43fd69c66182eb884b", 0x83}, {&(0x7f00000015c0)="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", 0x1000}], 0x4, 0x8000, 0x20)
close(r2)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:06 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2948.669230] syz-executor.1: attempt to access beyond end of device
[ 2948.669230] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2948.670854] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2948.701358] loop5: detected capacity change from 0 to 40
[ 2948.728007] syz-executor.1: attempt to access beyond end of device
[ 2948.728007] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2948.729023] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:34:07 executing program 4:
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000200)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000180)={0x1, 0x3, 0x6, 0x2, {0x32, 0x100000000, 0x7f, 0x9, 0x800}, [0x7, 0x100000001, 0x2947]}}, @subvolid=0x200})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
unlink(&(0x7f0000000000)='./file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x1)

[ 2948.764566] syz-executor.6: attempt to access beyond end of device
[ 2948.764566] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2948.766293] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2948.815975] syz-executor.5: attempt to access beyond end of device
[ 2948.815975] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2948.817078] Buffer I/O error on dev loop5, logical block 10, lost async page write
23:34:07 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2948.845477] syz-executor.6: attempt to access beyond end of device
[ 2948.845477] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2948.846734] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:34:07 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000040)='./file1\x00', 0x400, 0x100)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0xff, 0x9, 0xfff7})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:07 executing program 0:
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r0}, {0x8, 0x4}, {0x8, 0x2, r0}, {0x8, 0x1, r0}, {0x8, 0x2, r0}, {0x8, 0x4}, {0x8, 0x0, r0}, {0x8, 0x5, r0}, {0x8, 0x7, r0}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=<r1=>0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, 0x0, r0, r1, 0x0, 0x2, 0x45f5}, 0x8, 0x42212ddd, 0x7d4, 0xe2, 0x0, 0x0, 0x71})
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:34:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000300)='./file0\x00', 0x218002, 0xe4be980ea83dd662)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c5}, 0x80)

23:34:07 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x4)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file1\x00'})
execveat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='\'!(\x1b^\'\x00', &(0x7f00000002c0)='),\x00', &(0x7f0000000300)='#-\')\x00', &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f0000000380)=']{-^/@*#\x10)-*:#\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='trusted.overlay.redirect\x00'], &(0x7f00000005c0)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='[+\x00', &(0x7f0000000500)='(\\\x00', &(0x7f0000000540)='@]$%\xa7**#/$\x00', &(0x7f0000000580)='trusted.overlay.redirect\x00'], 0x1000)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x8, 0x2)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:34:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x24008, &(0x7f0000000180)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='%\x00', &(0x7f00000003c0)="b77690c47b0373bb2b8d55fe76b2b69dff58dc20670f6dd71fc8975f536929894db71de4209196b9e71d58a93f77b7989207ae15013ad47f7a0a2733c1a401627e984ac598ce4020ce1cf0b054a6117b26df1a76b2282ec91571725f4886d336f3756ef51c7be212d1d1c24a516eeb72b2c81b2ec4d320d30bb7ae226f1906d18a7f8360bcb6e1d66a63b1101841fe215eaa8acf258d9f7218abc1740f25b3a8af064007edd47dfc843a88b1e034ffb2bb7018d3e0d213ca8969ee4f3ea6a7267f022b7f8b7fad089a", 0xc9)

[ 2949.002261] loop1: detected capacity change from 0 to 40
[ 2949.011895] loop5: detected capacity change from 0 to 40
[ 2949.026482] loop6: detected capacity change from 0 to 40
23:34:07 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2949.171288] syz-executor.5: attempt to access beyond end of device
[ 2949.171288] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2949.172847] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2949.176063] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2949.231310] Process accounting resumed
[ 2949.257372] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2949.864139] loop6: detected capacity change from 0 to 40
23:34:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:26 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{0x0}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:34:26 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f00000000c0)='./file0\x00', 0x8)
umount2(&(0x7f0000000140)='./file1\x00', 0xe)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
sendto(0xffffffffffffffff, &(0x7f0000000200)="6107ad3380a42b4ed7f287e091ca480f7ffeb950203f5c37d8e7bd3c82f63c421892f868c000a3aeab191cb82b87f0f3ce306e68341b8a941390c6a0670c6c4cba24cfa0", 0x44, 0x28008884, &(0x7f0000000280)=@l2={0x1f, 0x1f, @none, 0x124a}, 0x80)

23:34:26 executing program 6:
mknod(&(0x7f0000000180)='./file1\x00', 0x400, 0x80000001)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f00000001c0)='./file0\x00', 0x181000, 0x17b)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
dup(r2)
r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x201c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendfile(r3, r0, 0x0, 0xfffffdef)

23:34:26 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4000000000000)

23:34:26 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x80000, &(0x7f0000000280)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@posixacl}], [{@euid_gt={'euid>', r0}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, '^[.$&'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x9e'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}]}})

23:34:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x100}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 2968.033766] loop1: detected capacity change from 0 to 40
[ 2968.057223] loop6: detected capacity change from 0 to 40
23:34:26 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0xfd, 0x5}, {&(0x7f0000000280)="fae912c046f323efc3d41a5c660dc1e4b7e682d91897b2eaf2cd03d192d29b6734b049a8782918d77250f6ad36c194c973a7d2eb5adefdb677bf83e7c61204704f97d02864f5ee852783f68fc4666a9bdd4d533b72c4693cbe3697da9b78ec9f9b1dd012fa49fb9c7e0413ebbf42433a91c1af781e2854644043780fb790ecd222204e0cfb54b481254e020a15915458ca797d53a67822057c12c9", 0x9b, 0x8}], 0x8, &(0x7f0000000340)={[{@debug}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xff%'}}]})

[ 2968.177513] bio_check_eod: 2 callbacks suppressed
[ 2968.177535] syz-executor.1: attempt to access beyond end of device
[ 2968.177535] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2968.180296] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:34:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:26 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x65b26dd3)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf21aa24daf3e94e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2968.242816] syz-executor.1: attempt to access beyond end of device
[ 2968.242816] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2968.243734] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2968.264459] ext4: Unknown parameter 'fsmagic'
[ 2968.290081] loop5: detected capacity change from 0 to 40
23:34:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c228877402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a8020000004d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb0000"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
symlinkat(&(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00')
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r3 = inotify_init1(0x80000)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000180))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x400000000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:34:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
getpeername(r0, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000180)=0x80)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x1)

[ 2968.386974] loop6: detected capacity change from 0 to 40
23:34:26 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x6)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:34:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:26 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
umount2(&(0x7f0000000000)='./file0\x00', 0x7)
r0 = gettid()
r1 = getpid()
rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000340))
perf_event_open(0x0, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2968.536926] loop1: detected capacity change from 0 to 40
[ 2968.553300] syz-executor.6: attempt to access beyond end of device
[ 2968.553300] loop6: rw=2049, sector=116, nr_sectors = 8 limit=40
[ 2968.559440] syz-executor.6: attempt to access beyond end of device
[ 2968.559440] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2968.560128] syz-executor.5: attempt to access beyond end of device
[ 2968.560128] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2968.560882] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2968.562120] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2968.602008] syz-executor.6: attempt to access beyond end of device
[ 2968.602008] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2968.602925] Buffer I/O error on dev loop6, logical block 31, lost async page write
23:34:26 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x1c0, 0x21)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2968.699406] syz-executor.1: attempt to access beyond end of device
[ 2968.699406] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2968.700812] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2968.725420] Process accounting resumed
23:34:27 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{0x0}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:34:27 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000))
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20ab02e, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:34:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/42, 0x2a)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180))

[ 2968.753375] syz-executor.1: attempt to access beyond end of device
[ 2968.753375] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2968.754343] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2968.795332] loop6: detected capacity change from 0 to 40
[ 2969.043055] syz-executor.6: attempt to access beyond end of device
[ 2969.043055] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2969.044663] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2969.059500] Process accounting resumed
[ 2985.579513] loop1: detected capacity change from 0 to 40
23:34:43 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat2(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x200440, 0x84, 0x10}, 0x18)
faccessat(r1, &(0x7f0000000240)='./file1\x00', 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setxattr$security_selinux(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:cert_t:s0\x00', 0x1c, 0x1)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r4 = socket(0x2b, 0x800, 0x20)
accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e, 0x80000)

23:34:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
getpeername(r0, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000180)=0x80)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x1)

23:34:43 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:34:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="01", 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

23:34:43 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:34:43 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="601c6d6b646f7366d8a02b00080101000440a80500f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000240)=ANY=[@ANYRES64])
openat(r0, &(0x7f0000000180)='./file1\x00', 0x8a000, 0x12)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0xc0400, 0x2)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x20, 0x8, 0x7, 0x21, 0x0, 0x7, 0x428cc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xffffffffffffafa0, 0x401}, 0x8002, 0x401, 0xdbb, 0x2, 0x200000000, 0x40, 0x6, 0x0, 0x91, 0x0, 0x8}, 0x0, 0x1, r4, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r6 = gettid()
r7 = getpid()
rt_tgsigqueueinfo(r7, r6, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x7f, 0x0, 0xff, 0x1, 0x0, 0xe5, 0x1200, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x10, 0x4, 0xffffff01, 0x9, 0x29, 0x7f, 0x9, 0x0, 0x13, 0x0, 0x5}, r7, 0x1, r3, 0x9)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:34:43 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/99, 0x63)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 2985.592280] loop6: detected capacity change from 0 to 40
[ 2985.651398] loop5: detected capacity change from 0 to 40
[ 2985.700063] syz-executor.1: attempt to access beyond end of device
[ 2985.700063] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2985.701201] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2985.768368] syz-executor.6: attempt to access beyond end of device
[ 2985.768368] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2985.769555] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2985.783457] syz-executor.1: attempt to access beyond end of device
[ 2985.783457] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2985.784352] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2985.907071] syz-executor.5: attempt to access beyond end of device
[ 2985.907071] loop5: rw=2049, sector=108, nr_sectors = 16 limit=40
[ 2985.920968] syz-executor.5: attempt to access beyond end of device
[ 2985.920968] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2985.922220] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 2986.298087] Process accounting resumed
23:35:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="f8", 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:03 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00')
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:03 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x8000, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000001c0)={'trans=unix,', {[{@aname={'aname', 0x3d, '$)\\.--*%\\^-9,\\'}}, {@cache_mmap}, {@fscache}, {@debug={'debug', 0x3d, 0x5c}}, {@loose}, {@cache_none}], [{@fsname={'fsname', 0x3d, '+\'}'}}, {@euid_gt={'euid>', r0}}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x40822, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
sendfile(0xffffffffffffffff, r4, 0x0, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x20)
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000040), 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:35:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x17, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000180)={{'\x00', 0x1}, {0x8}, 0x1f4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)="8937e3642b4c06f6b397b62aa9c3723e3fc355a38850b53bbe61a2f2467787d8a526b6f6da36e81513cfa10003409e1b38408562843e1d59c6a906b94a4163eecdfdb2897b83500c644e393a6ab61046ceb98fefc90fc936d6218e34f59d859a6c250b32b60691559da25749659c277c32da6d38c4f29baf676d3d3b8edf42789ac01ffe128b81b5c0ea8f7a83149d2eeb4e851826fecac046114421a5c877a5baa0662fece50f08e62e38ce0383a43a", 0xb0, 0x0, &(0x7f0000000480)={0x2, 0x1a6, {0x0, 0xc, 0x9f, "a29749f9ce28cac014a2cdfd3ae29a7f97e1a865d4d3ce487f05af2543085db289e2cddd6c411e228a12574c55a44dd3e7809c51e17a91fafb6edd90180b2cbda7db976be050e4d18a7ee0caba22253d38cb9d80c773f74db8bdbd7768c6d6f305044de5db40da9c44f0a3fd63eb063c1391bd2a127776c874d38f98d41f0e65b999bdce97f870f3a12717c6e220cad38d03dba703e202d7655d70123abdb9", 0xfa, "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"}, 0x1000, "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"}, 0x11b2})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3, 0x0, 0xbb, 0x5, 0x0, 0xda6, 0x50a12, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000240), 0x8}, 0x8, 0x7, 0x80000000, 0x3, 0x7c, 0x101, 0x8000, 0x0, 0x200}, 0x0, 0x8, r1, 0x1)
syz_mount_image$msdos(&(0x7f0000001640), &(0x7f0000001680)='./file1/file0\x00', 0x7, 0x5, &(0x7f0000002900)=[{&(0x7f00000016c0)="e05991df121af446dd2123da733c8700eee2639bf92496", 0x17, 0x5}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000002700)="6ebd3f4d60f55a7eaad7189e491bc9e40b28b2ce73fbf6e509dc4270c882c193f88516b52bc6eb7dbaeb09d0b5e5f3ce0675fdf6d6b3bad78e267b3948", 0x3d, 0x7fffffff}, {&(0x7f0000002740)="f8c088aeb1dc2364c74839f9efcccad612b738399c206e0eaac454ae7b415cf55802820907527052703f222f0cb8862ba5cfb9557a8ac348698d950b23481e00279b284e5fa0acf7073703bce3f2574d88ac56066850ef5493517f365f8d88644786ece65cdb2b67395981bd28fda921558ad1b36c52ab97a862fff327f55fc0259027715728d4e37b8677804e1adefd07db7aa6ee25b17d75769df74d29f82a59689ed9e4f92b9798", 0xa9, 0x2}, {&(0x7f0000002800)="da939dcec260deaca4a5e091d629b1260e79f8ad3be3ac67928d013744abc69c94466a08e36bdbbce01534bc15fd6d6e10dd971633764fdff97f0679b9116c46558d24caecfbb1d42247ba75f1a7075b0433f22dd5f1e76e28d788d8836fe84a75b0058c1c3b1f0794643979ab8c9a14a85ed08e95049a5ea3be25468e00bb4e9a099e8cd6c814155a692371e5cef56e82c92c96a17dad6785cc0062205dff548bd1453ad5425093bc7c9db95e88793d37c3bf1680875554c3fced463849a6b78e4ad8b8bcdce18d01bfd5a9e47163b1f2bc434c2eb8cd1e964df174be8772fe5b3ebb08ce846bbc57dd438ad2c30215b831067bd56b55", 0xf7, 0x5d40}], 0x80000, &(0x7f0000002980)={[{@dots}, {}], [{@smackfshat={'smackfshat', 0x3d, '$'}}]})

23:35:03 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:03 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:35:03 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$unix(r1, &(0x7f0000000000)="829f8255fb6a125fea9231200e814e867df0cb423e22b1d34dfa811153acbdb1169d9b3c64fba116b293e347215707fe475d25cf4ed0488d488e496813b78ce4fcd55e105e8b0f3cea8309bf43967eb789c7e86690d4ac1be66d8929c4e5834d38d929c6faeb310065fb38", 0x6b, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x2080, 0x0)
openat(r2, &(0x7f0000000300)='./file1\x00', 0x222800, 0x25)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f00000003c0))
pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080))
utimensat(0xffffffffffffffff, &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x100)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:03 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3005.250710] loop1: detected capacity change from 0 to 40
[ 3005.257180] loop6: detected capacity change from 0 to 40
23:35:03 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:03 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:03 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="f9", 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:03 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xfe2c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a171b26ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb487a476af0fae5af228dcf866cd231daeba6a10524c264c450"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
tee(r3, 0xffffffffffffffff, 0xdc00, 0x5)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000000180)=0x1, 0x1)

23:35:03 executing program 4:
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080)=""/69)
r0 = semget$private(0x0, 0x2, 0x0)
semtimedop(r0, &(0x7f0000002380)=[{0x0, 0x7}, {}], 0x2, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{}], 0x1, 0x0)
semtimedop(r0, &(0x7f0000000180)=[{0x3, 0x80, 0x800}, {0x4, 0x6, 0x1000}, {0x0, 0x4, 0xb0d84990d870a4ca}, {0x1, 0x40, 0x800}, {0x0, 0x20b2, 0x800}], 0x5, &(0x7f00000001c0)={0x77359400})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x800, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:03 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3005.611465] kworker/u4:0: attempt to access beyond end of device
[ 3005.611465] loop1: rw=1, sector=124, nr_sectors = 4 limit=40
[ 3005.612316] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:35:03 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000003c0)={0x5, {{0xa, 0x4e23, 0x3f, @local, 0x7fff}}}, 0x88)

[ 3005.673463] loop6: detected capacity change from 0 to 40
[ 3005.742349] loop1: detected capacity change from 0 to 40
23:35:04 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
unlink(&(0x7f00000001c0)='./file1\x00')
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
lstat(&(0x7f0000000c80)='./file1\x00', &(0x7f0000000cc0))
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
openat(r2, &(0x7f0000000000)='./file0\x00', 0x200000, 0x100)
r3 = syz_open_procfs(0x0, &(0x7f0000000c40)='loginuid\x00')
signalfd4(r3, &(0x7f0000000d80)={[0xd7]}, 0x8, 0x0)
setxattr$security_selinux(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000d40)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000180)={0x80002001})
r5 = socket$inet(0x2, 0x6, 0x3)
write$binfmt_aout(r5, &(0x7f0000000280)={{0x107, 0x2, 0x6, 0x203, 0x135, 0x400, 0x34f, 0xffffffff}, "b0a20b5eaaa4", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x926)

23:35:04 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:04 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3005.986118] syz-executor.1: attempt to access beyond end of device
[ 3005.986118] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3005.988253] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3005.993015] Process accounting resumed
[ 3006.043321] syz-executor.1: attempt to access beyond end of device
[ 3006.043321] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3006.044280] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3006.124360] syz-executor.6: attempt to access beyond end of device
[ 3006.124360] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3006.125470] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3006.195526] syz-executor.6: attempt to access beyond end of device
[ 3006.195526] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3006.196529] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:35:19 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x101)
umount2(&(0x7f0000000240)='./file0\x00', 0x2)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCNXCL(r0, 0x540d)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
acct(&(0x7f00000000c0)='./file0\x00')
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))

23:35:19 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:19 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
acct(0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x10}, 0x400, 0x0, 0x0, 0x0, 0x40000000, 0xa61b6805}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x8)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000, 0x80, &(0x7f0000000280))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, <r0=>0x0})
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440))
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xfa, 0x7f, 0x8, 0x6, 0x0, 0x20000000000, 0x4240, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x11800, 0x3, 0x4, 0x4, 0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, r0, 0x0, 0xffffffffffffffff, 0x2)

23:35:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x1040, 0x28)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:35:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f0000000000)=0x4)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:19 executing program 2:
syz_io_uring_setup(0x788a, &(0x7f0000000400)={0x0, 0x8bb7, 0x1, 0x0, 0x396}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=<r0=>0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r0, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x90a1}, 0x1, {0x0, r1}}, 0x8)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1/../file0\x00')
quotactl(0xfffffffffffffffe, &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000300)="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")
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380), 0x0, 0x7fffff8, 0xa)

23:35:19 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

23:35:19 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x20, 0x5, 0x80, 0xff, 0x0, 0x800000000000, 0x80000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf8000000, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x40020, 0x2, 0xde, 0x6, 0x1, 0x0, 0x3ff, 0x0, 0x8310, 0x0, 0xab9}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x7e, 0x8, 0x7, 0x8, 0x0, 0x100, 0x81008, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x100000000}, 0x2, 0xfffffffffffff801, 0x0, 0x6, 0xfffffffffffffffa, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xe, r0, 0xa)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3021.123274] loop6: detected capacity change from 0 to 40
[ 3021.126689] loop1: detected capacity change from 0 to 40
23:35:19 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3021.353579] Process accounting resumed
[ 3021.381076] syz-executor.1: attempt to access beyond end of device
[ 3021.381076] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3021.383050] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:35:19 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x610800, 0x93)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0c1, 0x80)

23:35:19 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000200)=""/96, 0x60}, {&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f0000000540)=""/234, 0xea}, {&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000640)=""/151, 0x97}], 0x8, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x10140)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3021.457154] syz-executor.6: attempt to access beyond end of device
[ 3021.457154] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3021.459219] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:35:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3021.486540] syz-executor.1: attempt to access beyond end of device
[ 3021.486540] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3021.488242] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3021.540589] syz-executor.6: attempt to access beyond end of device
[ 3021.540589] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3021.542693] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:35:19 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000100)='./file0\x00')
r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
acct(&(0x7f0000000180)='./file0\x00')
acct(&(0x7f0000000000)='./file0\x00')

[ 3021.745760] Process accounting resumed
[ 3021.756594] Process accounting resumed
[ 3021.780457] Process accounting resumed
[ 3021.790950] Process accounting resumed
[ 3021.805489] Process accounting resumed
[ 3021.882735] Process accounting resumed
[ 3021.943447] Process accounting resumed
23:35:34 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xec464000)
r1 = openat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0xc000, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x80000)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:35:34 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
write$binfmt_aout(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x3a8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:34 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)

23:35:34 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file1\x00', 0x0, 0x1a901e, 0x0)
unlink(&(0x7f0000000000)='./file1\x00')
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200480, 0x0)
recvmsg$unix(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000340)=""/2, 0x2}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/107, 0x6b}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/153, 0x99}], 0x7, &(0x7f0000000740)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40000001)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:34 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x400)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000002c0)='9p\x00', &(0x7f0000000300)='9p\x00'], &(0x7f0000000400)=[&(0x7f0000000380)='9p\x00', &(0x7f00000003c0)='0\'@]\x00'], 0x400)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2001020, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=unix,aname=&,cachetag=*,cache=fscache,access=any,access=user,fowner=', @ANYRESDEC=r1, @ANYBLOB=',fscontext=unconfined_u,fsmagic=0x0000000000000001,euid>', @ANYRESDEC=r0, @ANYBLOB="2c66736d616769633d307830303030626a5f75736e722ec9323d7dca5cfacecdd1d3a25c7170cc24b9bf6f6be66b9ddfcac9157357ed65ed7d23b4ec15afc9f87160ea0ba12ad03ec0d899a22e7c039bcb08625f4a3ddbc77e669d711362f97d0ff7572a156afca40d4b515bfca584d3b4af27aa0727848be8052924fabf85754add8311550bd8523ecee4a25ca898710abe9e9caccf9152a5d58116aba45db741939fac950e54943e09d55b81e20c4a1631ee1aef7702020a5894356f17936a5fcb5abc92642e61c2d2cddd5f8c520fb6c6a03192a06bee4b2714e5e11c66"])

23:35:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3036.085115] loop1: detected capacity change from 0 to 40
[ 3036.107139] loop6: detected capacity change from 0 to 40
23:35:34 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3036.174415] syz-executor.1: attempt to access beyond end of device
[ 3036.174415] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3036.175516] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3036.194343] syz-executor.1: attempt to access beyond end of device
[ 3036.194343] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3036.195214] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:35:34 executing program 5:
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:34 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:34 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
readlinkat(r2, &(0x7f00000001c0)='./file2\x00', &(0x7f00000003c0)=""/189, 0xbd)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x0, 0x2b, 0x600, 0x2, 0x60000})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:34 executing program 5:
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x101042, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x80, 0x89)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = gettid()
r5 = getpid()
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000040)=[r3], 0x1)
rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

23:35:34 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x1f180a, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0x8c44df5cfdfe593a)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='-[)/\x00', &(0x7f0000000180)='^#)*\x00', &(0x7f00000001c0)='\\\x00', &(0x7f0000000200)=',^(\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='%()!(\x00', &(0x7f00000002c0)='!-\'-\xd9\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='$\\\x00'], 0x100)

[ 3036.433520] loop6: detected capacity change from 0 to 40
[ 3036.483526] loop1: detected capacity change from 0 to 40
23:35:34 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x4, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:34 executing program 5:
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3036.700854] Process accounting resumed
[ 3036.766416] syz-executor.1: attempt to access beyond end of device
[ 3036.766416] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3036.769146] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3036.781732] syz-executor.6: attempt to access beyond end of device
[ 3036.781732] loop6: rw=2049, sector=116, nr_sectors = 8 limit=40
[ 3036.793964] syz-executor.6: attempt to access beyond end of device
[ 3036.793964] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3036.795988] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 3036.837496] syz-executor.6: attempt to access beyond end of device
[ 3036.837496] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3036.838531] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 3036.878353] syz-executor.1: attempt to access beyond end of device
[ 3036.878353] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3036.880230] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:35:35 executing program 5:
mknod(0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:35 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1f, 0x9, 0x3, 0x40, 0x0, 0x0, 0x8c08, 0x18, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x10003, 0xfffffffffffffeff, 0x1, 0x9, 0x9, 0x8, 0x96f6, 0x0, 0x4000000, 0x0, 0xfffffffffffff000}, 0xffffffffffffffff, 0x4, r0, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:35 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x58, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "afa1bf6a08304b247095f5af25"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x87a01}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xa, 0x4, "bdc6237448ac"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4810}, 0xc090)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:35 executing program 4:
flock(0xffffffffffffffff, 0xf)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:35 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)

23:35:35 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3037.227319] Process accounting resumed
23:35:54 executing program 4:
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x3, 0x6, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x2d4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}]}, @ETHTOOL_A_FEATURES_WANTED={0x2a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf6, 0x4, "4d50813e397efdf989597064a20322946a8b29b816c507e222ed508cbb7719981e2550b459615d24864f5ee579ef8cd7b8fafbf3b01399a7d92e30372de935de75c7fa17c4eb16223b30b57f5c627e01bc6a55a66e36c47873ef042bc214f3e9f79014ff5ab04ef12c4b89c962f678c3bd92e75479d0b6835342d85fa8c218f5a85d77098590898c3b4c15e14be6ce8dac644064f381bc8afa7a5b706bde8db013badcd2fd1323d1840a2ffff386ee9e980e580db541edef20af44eacce43c4ea80a692db041818d7e6b6ecbd8452ff5f0b2ed6ac239bfab0e1f4196e0c0e6bc859e7dc3e7de7a74339f22f3a3ef8e8116c8"}, @ETHTOOL_A_BITSET_MASK={0xdf, 0x5, "9d884361d6a4f4d415d98643a1065399af4c88d8f2f4b59f4893b11d602fa66180aa5b7c2f04025e4aea480dd8238ef336c6803d7f85058fcc50710cbe11639c89653a5739fb581f30793d8bc237e9f7fa0982bef60473bbc5bf79890aa76d99ed90bd4fd1af96e3ae4adb15ac191451b2525d4d6c92031153767de7050c252fffc870d751d9b8ec0a0e69abd7275087db61c32a878801e5a49ca223a1eb596eb2bcaded1fd7051ffce4b4ade3d392022a8c8878ba5539d1b171e5d841b20b349c6d88d8c68942b8cb47204d6d90d31ef2937e6f353f9e6d329e00"}, @ETHTOOL_A_BITSET_VALUE={0xab, 0x4, "ac84506d96b550786fbf15539e8c3d35aa26a649633cfd5d7117264c403b6ee89add894f6f97759cd61fd76696c0237762b48c9aa8859f2ff3e75e7cf875c02d6c9a00572083be5b06f3f443428c017b1f80de0f4fe3e0d74e34a63779cd9affbd4948dc72c81abaf368a1a26e9df0e319bdf721f4a6cfc7314efd73d4f08a370c76926ddef7c10b46fdb20708a0f7f35ef55f53f344006fd703f1dab3fc363f02de18c5852b21"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x458, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:35:54 executing program 5:
mknod(0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:35:54 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@common=@aname={'aname', 0x3d, '$\\'}}], [{@uid_lt={'uid<', r0}}, {@appraise_type}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:35:54 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x4042, 0x0)

23:35:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:35:54 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
sendfile(r0, r3, &(0x7f0000000000)=0x3, 0x9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3056.549336] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 3056.597018] loop6: detected capacity change from 0 to 40
[ 3056.621473] loop1: detected capacity change from 0 to 40
23:35:55 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a981e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3056.809343] syz-executor.1: attempt to access beyond end of device
[ 3056.809343] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3056.811048] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3056.827007] syz-executor.6: attempt to access beyond end of device
[ 3056.827007] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3056.827529] syz-executor.1: attempt to access beyond end of device
[ 3056.827529] loop1: rw=2049, sector=44, nr_sectors = 80 limit=40
[ 3056.828244] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3056.844849] syz-executor.1: attempt to access beyond end of device
[ 3056.844849] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3056.845763] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3056.989434] syz-executor.1: attempt to access beyond end of device
[ 3056.989434] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3056.990335] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3057.083998] Process accounting resumed
23:36:09 executing program 5:
mknod(0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:36:09 executing program 2:
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)="b1d06190dfe147e5969cd647fd91a1067aea33302ab41270fb4863", 0x1b}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
r3 = epoll_create(0x4)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000200), 0x10000, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r2, @ANYBLOB="90db8b95d47c05a2229fbcfd452b1d64076ba8f113e21eff508ef801bf7337adc59c0ce044fc5e8101c7f99dac40dda74e30d33f9d374a067b691afb314d36484c32a4ecb504ef7024a955ce6040e8c0d858e720006904541b5b41b250593c23074b447a25d9179b1666accd90934ca6584c7ce2cc8c9af0ea", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRESOCT=r3])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffdf3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:09 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
recvmsg$unix(r1, &(0x7f0000000600)={&(0x7f0000000280), 0x6e, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/112, 0x70}], 0x1, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x10000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r2 = gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x1d, 0x4, 0x2, 0xfb, 0x0, 0x7ff, 0x80010, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x4, @perf_config_ext={0x8, 0x6}, 0x60, 0x0, 0xb37f, 0x2, 0x5, 0x7fffffff, 0x4a, 0x0, 0x7, 0x0, 0x8}, r2, 0xffffffffffffffff, r0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x6, 0x80, 0x7f, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x4, @perf_bp, 0x8, 0xfffffffffffffffb, 0x2, 0x8, 0x8, 0xfffffffe, 0x9, 0x0, 0x4, 0x0, 0x80000000}, 0x0, 0x3f, r0, 0x9)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:36:09 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)

23:36:09 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0xfff)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, r0)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x129c024, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=unix,mmap,fscache,cache=fscache,nodevmap,cachetag=*,access=client,uname=\b\x00\x00,uid>', @ANYRESDEC=r0, @ANYBLOB=',func=KEXEC_KERNEL_CHECK,smackfsroot=,uid<', @ANYRESDEC, @ANYBLOB=',euid<', @ANYRESDEC=r0, @ANYBLOB="6c6cdc5218d2f9c125d77ce165feddb7036352a949f724641a183b70de3a18f2304f9aa16418e229226ff08937c6983b396fd4def000a69d8b9e254c25a1369424cfef5ab2f798d8062f36f02e242f953a9af1516a5ec41186f0f1b0e0781b9e03a87f5125d71fda4f4a638f7d4b2840d233aa3abeed78a69b2aaf75cd0f2d14dc0a3b4972f76479e742e6fc97b3b4a87827e2a0f5c21f1e8f81db0dbf"])
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:36:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c0500770b97402aa84a0a26a11461b19079673c6f479c05b8b558154cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb000000000000"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
open$dir(&(0x7f0000000040)='./file1\x00', 0x404081, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:36:09 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x40, 0x48)

23:36:09 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3071.284928] loop6: detected capacity change from 0 to 40
[ 3071.295000] loop1: detected capacity change from 0 to 40
23:36:09 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x4)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3071.413736] Process accounting resumed
23:36:09 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:36:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="0f", 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3071.483401] syz-executor.1: attempt to access beyond end of device
[ 3071.483401] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3071.485933] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3071.552909] Process accounting resumed
23:36:09 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
mount$9p_xen(&(0x7f0000001700), &(0x7f0000001740)='./file0\x00', &(0x7f0000001780), 0x4080, &(0x7f00000017c0)={'trans=xen,', {[{@version_L}, {@cachetag={'cachetag', 0x3d, '@\xa9'}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@hash}, {@appraise_type}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@dont_measure}]}})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/198, 0xc6}, {&(0x7f0000001400)=""/159, 0x9f}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f00000014c0)=""/247, 0xf7}], 0x6, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x2000)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9, 0x4010, 0x15, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa0, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x104, 0x5, 0x2, 0x3, 0x9, 0x4, 0x5, 0x0, 0x81, 0x0, 0x1000}, r1, 0x7, r0, 0x0)

[ 3071.578103] syz-executor.1: attempt to access beyond end of device
[ 3071.578103] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3071.579862] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3071.599093] syz-executor.6: attempt to access beyond end of device
[ 3071.599093] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3071.601232] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3071.692679] syz-executor.6: attempt to access beyond end of device
[ 3071.692679] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3071.694162] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3071.722559] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
23:36:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4402, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4d3}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3071.765870] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 3071.802444] loop1: detected capacity change from 0 to 40
[ 3071.861120] syz-executor.1: attempt to access beyond end of device
[ 3071.861120] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3071.862175] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3071.908776] syz-executor.1: attempt to access beyond end of device
[ 3071.908776] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3071.909637] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3071.940399] Process accounting resumed
23:36:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x10}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:26 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:36:26 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fdatasync(r1)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x8, 0xd8, 0x0, 0x4, 0x0, 0x2, 0x36115, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7bd8, 0x2, @perf_config_ext={0xa23f, 0xfffffffffffffffe}, 0x40000, 0x6, 0x800, 0x2, 0xffff, 0x806a, 0x9, 0x0, 0x3, 0x0, 0x10001}, 0x0, 0x6, r2, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:36:26 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:36:26 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100020018007800", @ANYRES32=r0, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
umount2(&(0x7f0000000100)='./file0\x00', 0xa)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
unlink(&(0x7f0000000180)='./file0\x00')

23:36:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="0f", 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:26 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)

[ 3088.560361] loop1: detected capacity change from 0 to 40
[ 3088.624385] loop6: detected capacity change from 0 to 40
23:36:27 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3088.713421] syz-executor.1: attempt to access beyond end of device
[ 3088.713421] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3088.714504] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:36:27 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001cc0)={{0x1, 0x1, 0x18, r0, {0x101}}, './file1\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/119, 0x77}, {&(0x7f0000001540)=""/234, 0xea}, {&(0x7f0000001640)=""/177, 0xb1}], 0x9, &(0x7f00000017c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=<r3=>0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=<r4=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="601b5a84"], 0xe0}, 0x40000041)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001a40)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, &(0x7f0000001a00)='./file0\x00', 0x2, 0x800, 0x1}, 0x9)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x20000, &(0x7f0000001a80)={'trans=unix,', {[{@loose}, {@access_uid={'access', 0x3d, r3}}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\''}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')$'}}, {@uid_lt={'uid<', r5}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$incfs_metadata(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00), &(0x7f0000001c40)="6117aed5cc3b417ae06a3d9b79ecd6b19571d31ff7bd3401f1a910bba9a249ff4106931490a7b21c1d887399921fa63b544134", 0x33, 0x3)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000001b80)=0x1)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r6, &(0x7f0000001b40)='./file0\x00', 0x2200, 0x0)
umount2(&(0x7f0000001c80)='./file0\x00', 0x7)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3088.788539] syz-executor.1: attempt to access beyond end of device
[ 3088.788539] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3088.790407] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3088.809060] syz-executor.6: attempt to access beyond end of device
[ 3088.809060] loop6: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 3088.813257] syz-executor.6: attempt to access beyond end of device
[ 3088.813257] loop6: rw=2049, sector=108, nr_sectors = 4 limit=40
[ 3088.850442] syz-executor.6: attempt to access beyond end of device
[ 3088.850442] loop6: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 3088.851542] Buffer I/O error on dev loop6, logical block 26, lost async page write
23:36:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="01", 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000000), 0x0, 0x3ff, 0x0)

23:36:27 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x10000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x410, &(0x7f0000001640)=ANY=[@ANYBLOB="2d6bbe10aa54d2fd890713ab8e696ccd9b584fdc9284b70a207372cc6de584af757865da4bb2a0efa132bc7612e274ccd29a2b42de7705d8fa25ec1ce39bced383d91cabccd71bd3fd217d46442eb4bebfff27b259817f86bf8f5db14a61ceb4b5544e31c8690056041b8af6c895ea3052dcffea74318a553580ab16d5d650c9b676a2dea636347373ac5c4842d54ac6fca55c8fb1da7c793acee40fe83a0410f7bffe59990c72cce64f15dde339e220ebc3aaee1f15ccd629df62624f8448499a03ccacb6691ab737f54e8242776040ef064d7bf156549563aafd21d2bbe312", @ANYBLOB="a22bfc2a1822dcdad81ffceec115376ffe61e44704197d7ad207f7a70d7437c7230a9d36918c05305be84534e5f64ea8fd27141c5fcadf2d23ba568fc11145000db1565a4441156dfdd5f56fbeba3cc3ac04419d7f1b0c178615004d1c06a5dd2d3578580c2720b1c371f4110a98a96415e6e77c9d2eadcc219e5a126c82e05839bd1e4d0bfec88bafaaaaa473641addf5150cd45af3e3c5d841d73615462d4bd4964459aeba4e6f13e21d8f28304ef67faa6705f00ca3d94e7c598c39451d00e075de07f6e66d6810dce68702aa68025512cd1bde62eba9b7175fafc8bb4f8c8d531f5c2ff56502eff5b9155bf491af4c397bf42b16224690f49eaa95e1829f2f34c63cee3c143033975be2039cdb2b2b7378b4b0ecec49e4fe51de5fa9e99e059a6fa96490be9cb7e14cce8a3c3e9472b5be139997940c51a6a95d7b658c78b898d6cf3b48c985e3905a35c51e29657d07101bc42c24000d673dfdbe2da6fa0a3bc515d9e7171715a423b88bb1d24be213e21e4c1e57db95d561099517990631cc246bdb2ec3a646b395aa251536d47ef877437b5e42faf5988e154513d0cac830b12270762253fc7361fab96c642f92054b250881e1628b60696db594a17108ea9b887a871a42908641635da68f01e39ad6732b0b91d16d5d8185750043706a9f8c430977a6bcd2a226ded19ca8710f73ba00946829fcf3e2fb505d1704679b4306678c910df9876cfe1ee28bb6fecd7d826ab55d02ac2cf3c42493a9d77ade424419ce29defb743aa6bc7c88e9e44e6c8024bd093df7e36167d199fd2370e3586c22d0e9d46b942b25fdb5cce7a68abbc0966b4115caad8c1f9791f12acb917931283ea007fc1f0956ff12f69da55bee82ca2f5661ea1f0d4c312dc279f655804a73ab514eb3c3db094700e4bf962e46e88336bb5be7609d4257bc6b164485d453bc8490cb40d0ea084cd081d67cce09ce313e7c8ea969fcc17e005e4992640a5d574d2833a5d3807274065ef9b758ef6738b727533ce0ea98ade53effc9bf01e7e272f396407c1802f4e98fde39867674e636ec3c7ffea9d93c24ffe87c0753cd69bbe3d83dde10712480ab0d84120248f6742f6a5c75e1f93764ff8b9674ac85795123c61388127bc6cffcab2c8dab5d227cbad39613d3ea6f77cc1476386dc9b01a230b2dec9d76c3c52bac70aa5f4d9738f230656032d5bbde386b17da50f8afd280714962086f23346c1d553f0a2ee2152be9ecfa71e7b5a9fc94a23fcb98e65aeef318cb6bdcd66d6b56ebab1493e30a405ea0596d3984ad8c5c782f041624ccff403f77bad20776e5d1934b96f017e8a891d8a80de8c77a777be1b7941fa7185593a34d8cb44c2fd3aa2ca54629aa75a503c97a3589078b9f652a837c5b43677bcd99ef7695bec31c127dc136446240b5ee8cd90a2d4708ba5aa7693799e45c594038f260a492a8882f7a825279d5eb9c45639d477d26b9221d166fae8bc27e8e71fbe2b64456def3016f304b1fb084e2f533710a98f0c7126c16cc19ee67992377a6383ab1bb0c203d24e9f26e5d19431ffe0fe8edd4dac99347b3b0c6d92846ecb8d25e51b846943739945dbbae0dd52c9e3c262d03cc0be7fb978324fc0bf4265e26a12d643e92e0e30ec0ef55ef98e5d77a333c75d390dc3a43183664cddfabf2cb7f6aef519433e734f09b8165e1caedcb965264f9a0b1620c7dbf2eb8f0a5b1e2fe0dfabd171cd7cf3a5e4ffe7940b3b099bde10fa8c900acefbad4fbc458c7a4837c8aeb4a3694706c0091fec2622d3732ce512ada60985214f2c8f30bf5be77e157fec9de3628b13769d760eb02a934b3dea4f1f21a9385dfaac6fd1e4219e40fbb8485b2d97606d6e643ead1cb52e57a642995ddbdc070182d92a41b22714c74ff8180a64cf28c40ff2553d6a2754f1176d6bbf49d4478b65c2940f180fe0f810d6e7fe84da54afca73a0993a26199cb95b6b7d22bace51ad70cd1d3e9b5b1b7edfcff783774a7f5a6a0b6df8a3a311011a53052091951d7700a78fbc6d274f0f602a08001869990af6f56fd450b25a13a4927bdab0d372c9f6d02d72b2cf63aba86d016f5f16c3a5fd55aa2dc9f22cab4b6f652b95ba26720b93ef1920b1e8c702a4d6694741440d2c4145965b235de08291648c365988690cc913f02dae8093a4437fb6dac2e422cdb7185e49ecc5fa8d17545bfeebdd1df812cf48e5035e9000e779c1fc0daae891f6c01e7bc4e6e174623eadd5df2621a4ebeb76bbbc87a392846a85b7ef7b57b6e4793a8fb7c7abc073bda4eb52a25255c7f930f94d5f3a41f5fea6f1f97f18c47c686551e468da8c6909dfebc53d6bf26c97b8e8418de2274a9b9415cf805ca5ceec6075abf49a8b40f6b8e038e955c40c32d85c374e3cb1dc56d77f30bbf35894d98fad5bb62c4d1cb33c8b437606ad8b542b61769765a80de5ff6406bf3daac432f756753233e8691b8118d7590376bc9800002414f2ef248d735c81b92bd105223c80c3e5b0244bb29a0d78c4aa49fa4bf4c3132a0cd59be4a2ff7553308f6ae5c2dce713a6d33e4e85d7a2aee71e4cb1636c69cd95a66e8911c8f291c20ddfb6da73feaf3cb0fb6419ccbaf958385e4c4c98c40caf802915a7f4ec9f3f3191020e5a3ed96cc6302a740ae93e97d6f7a3d5220ddd47885e67203ffed93fc8647823d4448b49896117a7ef5ff41b88a65089f392e01112e796a1305933a19a9f795cd74ff7d08b752677ab17426976f77113853cebecb295b5b5e1b448ebbaf1666a3d5d5ebb9861263b2efaa68e9767ace970957c8d044b919d812b1df9b736c58a44fe3ff2c1153090bdb5a42ffac802ce4271e401f3dffc92db8821b30ed4a53ba321252f55e4552f187a08b9c360b18f63dfd355da2c4bcb03a683cbafb9deacb71d26ce9f41769576724f5a10bcdd98823092bc13e49dadacab589c3cb87a8b65991519051b9a2edbff74ad55fcf8e78c6cc5a1e18754ab5b10c815a97df4977fe6a48f40f4b55bf17d55ac0855813fbcdac27da035f70546ff1bfc5eff45edb1e7f86a5edcaa561c1d1cd15297ad6d2732d48c21032303a58a38961248c4dc5eea74548351856c70667ae88d761635195ef39a64e5fade57167f094df02200cb5cd8ac60603a911894169ea3b4325fa78c8790a187082824ae136afaffccfeddd97008e60e2b8d62ce8700565eefbdcbd2d0573d6cb946503e0259fee738886a470c7f52fa88eccbb4ede5bf41bd0172f16de6fbaccbc45fc46d515eacf06eeb29fc10629d58c71e79ad3146f3d530234e82dedc7530daac35bffa2e43b4341dc4747b253f75b684f5aecf58d4c87aaf7a9bf43d929ef6a0951b45a2782989bb722ce9fda42162242fcb021fe572c7aa99f37a2b2597b4c154bde516ee285e16c081a5abfebbcea7e5d62a390052b2578f8daed8e7fe6358bddf2aa11962215bc66f8587951cffce9ee270e46e955d905b8a048da8f98a591fa5bc799f846063e2bbb9da9f5a05b785be45f0e1c5440e9894610ac7907a9ff1d3eef32bd8069432d61101c93ee77828b9ac015b89c091bdfa82e07cbf6bd6a67021afdfabb6fdc3a36bcc53d4546da29779517ffacdb55633bf0508a07aa10490a8e725abea5ec1acf65821d7eacef652f4c8fb9660f457a6f06c043ae9f23c6354781c8e2a3e533153f40d15fe805065bac2311206b5f1c6684b11c2413ea6b8bd93fe107babd499e1e882b1a760b95edeb663f79d598ec80716397f2508b7fb6acbfe8229d4d16892cb91cb1e3710bede91f486ba8ea97c959a49ac6869f08212e2a38bc84b6ca892ba6316da62cd5b3517a9f0fe9e2178411cec30780096b48beee8f6154434dadaf932f4faf7aecbae020acf314b36606befc19490f4d3720d4536df873c0702f34da52dbc97acc326869098ff3978cef72424dcd471b0bedbf4c627d8ab16128dd475e92fd2418efd97b614b515f15e1841c7323b7adcabd5797370c61a9e02942f4f99c90eb793445d29755376e6524e8d504a0c88d2615df495fa643a64509d0e87819db8893cc9a357ca49fd1eaa7ec0ad53662c92aa5491fab97c4db2711962d40e9df62c9c680f510f836d09bb958ea457117bce1aad8ba6c2e2b755af2aa47f009daea5e9426ea13ea57867a045080c7c6743e70add225638947ef31491d50ff0215e18cfdae7bb2e3b32d760d6255959c76f7e12fdbd4123ac60bb0b65f53e4e64a7cb98d46161a090af37bf05f090e7c64fb593d29c2a58d5f1ccec1c6aab904c76dafdbb0da7e92716c9a5dbeb3c18766a76d7744ff8c1e4c5a90e468c31149b635421a33a8a23b824351a9026ddf0324f780df89d2c2688a7d1ab38a79bccf9c129229cc73ec77f6eaeff1d6bcfca39bad2969660253019964d076417bc47b225427e72a98e568c2224f73119bdf3684428aaec995f1ec81da07a76c2a501c118c41c0bc49cc87ed281717612034eaf9296c5838dab3b5e451a0003b7669f1607cec2d3a91207b73a6e460b2edf58f2ca120a615eeccb6d08a9bb94522dfb0cb7b991cd0e345cee96356b5fb397413ed806c663c8f826ca0fdcb94968d6f0ca70ce5cc951b4ee8d3b38b211af6463572c932664c2f38b857217ca7a97bbaf2ed6fe9435c712d4e78f7e62766607040a4cf8ede06e99603483bf5c603ef2167b43c5abef1e40e750163dfa1b22ccb9252217d0008c30af67fd0f0013d31bc8e7e11b261ff35c5d61bf183d8afa3c3cb1cd432667d396b5f37661a23cb2898c51e68e091d36f924798255442b88e480c962e42e6348d16701a244a2dba6f2edc5b9c32632a2ae1434b97bb8bc4e04d07c9dc499857f4552d31ce52590b5bbdc4d6735db22ad030ea244a7689d63f17327f8791cc7699386322b9afb5492b07d117c06dbbdb92936c88ba3288c41a594279f621e23c7b7b0aa91075ede23b225476b647ec5b4d87b93d3cb6247fdbfe87c988b6bd860149795d2da635680aff2020d15e5850601a903ed125cd2870412f305d1dbb68bffb753ea94004776662852130cc3c5ab8cd4930be48571b998b985f956b3693041fd580b11a3ef59713150e0cafc41722cd15eafac04f0b4cae218ad74fdb24a5c325f3eab2498369a88a38ccb0e340fbcbddcbd2c3d8d78db0ff6c8bdf24915f8edfa12909bd05cad8ff42d848758fd6c998b36bcd4d9a997353d4db7cbc35ec926cc0664a460580afea195c06160b436c4c1820bf281607fe5872ffdcc4b47dd2c94ef4c0b7049bba3a87a66ebc645c02fb86722dc05028628b14a16e3751cd7f14478f629eb214366acebab6de2c08036932c128d60d17261c7de20e7fc70e026c0add3cf19be8cd5f03b6b6f14fa67dbd20418e59235e9a2bc1407773471c17ea1bda8b6aef07200dabc97aed9fad8de4d8955f3b3dec7950068e9609ccdc256d46fc53dfe58ba533a445610151e1ecf2880cd334353bcc85df4172fcf350da243667a26acbc63e9b91741aac4d51f33c1cda1119aaf3a94c5ac7abb6ccd6ff1418c199c6385d9e4d5ca50596089fd5904380cabce9d15c2a0abfd9503899cd4869a46d0b7f5628f264863c7cf2fbc2ae5d443ff9e9c84ccbbf4cc2834f77a3a3b232448b50aecd1cc05291af3447c56aeea33679454da75168c98da2497bcd1c1fd19fe7307f05bd28470598613210cbab031b267e001c004617530ed282353437841a3432cbdcfc8fdb943950f8f927b680661331b31a4ce695822d8b870aa076cff7d8842a30b2ec2f"])
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r3, r1)
lgetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r3], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)

[ 3088.945949] Process accounting resumed
23:36:27 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/171, 0xab}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40)
acct(&(0x7f0000000280)='./file0\x00')
open$dir(&(0x7f0000000000)='./file1\x00', 0x103742, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
unlink(&(0x7f0000000180)='./file1\x00')
lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000b40))
lsetxattr$security_evm(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), &(0x7f0000000640)=@md5={0x1, "6a8e1e015c86ff25c439201ee6d50c70"}, 0x11, 0x0)
process_vm_writev(r0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)}], 0x2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/176, 0xb0}, {&(0x7f0000000880)=""/228, 0xe4}, {&(0x7f0000000a80)=""/145, 0x91}], 0x4, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)

23:36:27 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3089.054287] loop6: detected capacity change from 0 to 264192
[ 3089.055936] FAT-fs (loop6): Unrecognized mount option "-k¾ªTÒý‰«ŽilÍ›XOÜ’„·
[ 3089.055936]  srÌm儯uxeÚK² ï¡2¼vâtÌÒš+BÞwØú%ìã›ÎÓƒÙ«Ì×Óý!}FD.´¾¿ÿ'²Y�†¿�]±JaδµTN1Èi" or missing value
23:36:27 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3089.501999] Process accounting resumed
23:36:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x8, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_aout(r2, &(0x7f00000003c0)={{0x10b, 0x7f, 0x6, 0x1cd, 0x381, 0x8001, 0x31c, 0xffffffff}, "b68e837468e78daf828fb5690375", ['\x00', '\x00']}, 0x22e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:27 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:36:27 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000006600)='sessionid\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r3, r1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000006640)={{0x1, 0x1, 0x18}, './file0\x00'})
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000006680)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
accept$inet(0xffffffffffffffff, &(0x7f00000066c0)={0x2, 0x0, @local}, &(0x7f0000006700)=0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006800)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000200)="86448d45884ca3fa807502322c05dda3ea512013d57b34e3d279aa053ba1cbe8248e752c6b9f55a81634d62300eae117a44219d0a65909d3432041b61a5e1baac1702930dec848241d8ce8cfcf319964c19ad167d50b0387cd1fae545b187b63675d55ea7333b827ac190254a940ecfa6d3a5f79dd00c3c5e024d82f23cc124381b51f609eeb1295bc6e1ee169c3ddc30d2df6d4e3a043123f83e38deb702ea4b3b816fb3901dc8192bcf1ff3ccc907b64b624294ac68ee3de6f8bd48d", 0xbd}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000000)="b0e9788d1b617dd3cf3db98bb7ecbf0d03d3a8f41f84b7d8981344edf58a50314263434cfc6e246a17592c9472a0fd81b33c247070cecd7b", 0x38}, {&(0x7f00000000c0)="d33ee28aea43641c1a1e4ca4ab06c4254fcfa8128ab8eccd01eaac84128d1f5eb721b54717aea24cf2cb6f5dcb4f13e173", 0x31}, {&(0x7f00000012c0)="d216daa668025db2c35bf0db2ae0d9aa95ad85d17e74ad26f24ba64ba88c86ed25cd7877c8d6baed618bb0102d017e439de6cbc66bc825b814c8a06f9d68c02fce866373fbcdaef2b54ae52fbec256672af5f523bc78375910e9264c9ccb290a04b448d1171cdf23f0e461f354a6ae730dfe682a419b5ee697361b86405bbac7e666ffc88cb5596fa945bb6e2683f6c01b736ddb86ff14ca8ce77dac0f743fbab9d5b70e1b", 0xa5}, {&(0x7f0000001380)="0cada21aa8366d040771ad3de99ee293027be21311e9204f4fe965b67c4d688add0ad464cdd7c1d80449d4ef1c14c7b09b0311e0a98ccbba5c01ff769c8a30f278eb1fb7dee145946d76dce9beb7ee47fd98eef6f9e76fc04e665f864589771ccfec1452ec230667", 0x68}, {&(0x7f0000001400)="a9cef7bd984a4acd1e76d072aa601535cf53f933cb4429ca6f5674d75b768721bcd522da6b5256c60b9fc566b1661a1d5ef9e29aa3dcd7421e5292a35f82451017d1712fe401ee2f32f5e54810b818cfea1dc66997a6508dedb9cab2fb2ab613bbce427f3c426ff3d084da", 0x6b}], 0x7, 0x0, 0x0, 0x40}}, {{&(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001580)="b1cb", 0x2}, {&(0x7f00000015c0)="63ffbc150712006a5c4dcaff066b7dafaa1ef37300f193e9dc5b81b207033ec445318eb045916714a956f1248bd14be0836a1e14252e8e41f64f4117c50e6ed66a23236f5fba2203e01fc833361423500b9991d861ff036b46798c92fd0703c2b5a5aa6fcba05297411ed109436fc6e010dcdceb8437a002b2a9ab82b3ade1332918a8c48c21881addc8db1a9cc43972537ba05d595a5dedc4314feda09ddfd2084e1a3eff876113625523a682a6edf871b47d2c540d7e600967102a694065f3efb8b5ab513775755deb79192f23f340f2ca5912ce8fdebd3dea4e5fcbed5ce34c9b367a40b8d8c8a32ddc9188", 0xed}, {&(0x7f00000016c0)="f27f21d2031e7a8cf005c7e3fd6317316671ff247bb8e2b254e832d05fbd18ebd392be7f6c6f3df6607f0a4336607b66d6f6babe9c0af54732ad729e912af323263886355eb89f657cd4988c82716982fb0aaa79ceec14f440bedcf67034b8b492d849a6661fd69670bca6c84800a10acdb8a906181bb9d822549528d16613b164d04de1ddcfa8c4447e086febd77241c224eec60cd4878a686925f9ea3d8aec088de67f866526d1efcce5efe14d603d8333252d2814b65eed3bced91e9316caf1c02dfb8494f4d8", 0xc8}], 0x3, &(0x7f0000001b40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001800)="d3a69093dae1ba465ade19b4c04e30f3d6ee3a4e09e1e007e6c32174a962ea4d6b61465ffb8474ce317761f89563f9aae35fb1e697e8eab4808e740aa2954fd5d36a596c86e9bec313969ab1a1f2ae340782586072a727231245e5e8fa6de9f058c6b82ed7b43ba52bc6e18014021739116b879279cc9ee013c3bdedb18106fbc66004d8611a8ddc1ac497d50f0b05d8bd53f0efec133d78e7c9ac38da0eaf1b83d8cdbdde29ea7327", 0xa9}, {&(0x7f0000001cc0)="09b1335e4f261536e32e0087910dd58a3e069a7331de20c9e039be55b8a12d79550fc7da561e196b6d74adfc905cf371b8dc9111c22127325938d73cb1882b39f5bb0c549a7e727770e5f908d5fd2664dc67ac872b32140dc7dfafb9de60276463650bdea1a4e89007569e2330cd843356dbc3e46fd97a68b9fb3cd818336610a81cb664aad8e29a76a8a8dfaa2cbacc4e8d4c97a226627b8645e8cb55e5734437bc5cb38c7277c838f2b5edd1386000ffafb528b604c497970840bb03b6e06c98fe4f796f9e9334a924e49c", 0xcc}, {&(0x7f0000001dc0)}], 0x3, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x40000}}, {{&(0x7f0000002880)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000029c0)=[{&(0x7f0000002900)="8235bf30", 0x4}, {&(0x7f0000002940)="5b72c82512de446b2025547937b162965170338513b7b04985759f8e29bd2ede61721921dabc51af3c0ad620bb7b3f7699a4bd0c731ed587bad89f511f5c5f7b55", 0x41}], 0x2, &(0x7f0000002b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x1}}, {{&(0x7f0000002c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002cc0)="da", 0x1}, {&(0x7f0000002d00)="d6ee6ad43a048bcfa613481faf72d432778dbcba96f6456dceb506e62ec55932f6de7ea8547786611c65e00580f1ce3bb39016dd5ade7b8d0b4824089d15c6c665d3ad9d9ec5d24dfdadb7b456ecb12db3a5c8f6ebb65d14cacbd5be89892765d4d8735d93fb653959aaa0f3ca3a87f975092a33", 0x74}, {&(0x7f0000002d80)="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", 0xfb}], 0x3, &(0x7f0000002fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0xc0, 0x4084090}}, {{&(0x7f0000003080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000003100)="dbc3f87981131be614e784b89da131455aa1e62c78a47cd666b7818ba3dc1c1cd528f707bb9bc7e7d4dedec834e38970e58d944e02f297020a07d9d1a0e5c9ea5ded471f0ebbe3f84e1f2736b92f6579932c0706d80cb9c762f697c5d24500ed4f8b14237e615a4cf72554e02e75d53fbef367adf8e76b4be75674c0d26ae85c38", 0x81}], 0x1, &(0x7f0000004d40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xa8, 0x200008a1}}, {{&(0x7f0000004e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f80)=[{&(0x7f0000004e80)="a4febdda268ba7c0fbda4897f9893d96692d959bdf12404b1fb31b25a5edf2ab6c1adb83101082969fa749f4e0adb0d0b041dec2795dbe055a36f23f5ef80ca65622c773cc6635ad6b43daf82994c50ac1e5a04aba10bb1c3fcb9de95f33a73f1597a1adb3aa13757e577dbb1870288774cec66061bc235c23d0521a54e9a9569389926253af31161d11fa9f66496575c5c45dfa00fa4354ef6b9de6dcc6de94ae8c9c03ce324946b73891bb7d018b739cba22037520686de08f4276494082a4323bb8326fedc4ddf56739aa1235dc777a1a56a2e21f4c76be3b1ac6aa5bb7d7c0457cab0dbeee63", 0xe8}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f0000004fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000064c0)=[{&(0x7f0000005040)="2bca30d55445e975ad71b34018926afeb861f9279e806be38ed5d74eda85a04545f458aef35f374dce8d8182ac288d9fcfe24659bbc2", 0x36}, {&(0x7f0000005080)="7c5511e59cea9d48e129dad1f91f5678ab4fd1f90bdfb6963217896d1b7709d48d7e7ff78c69687c5dfd75e1424552f129f33e22bbf45e4f280ca2867f91191cf86bc688747b4b28122d59efab3998cb4fa198545ba58c2349c1bb7955cf7abb1699e08aa3ef81a7e677a209b7a9f695dcbee2ae7f83560e11d5b6a138091cb8d988874d50d417287105f41b3f66bcac07c223765e8e48314472e22df59ddcdb93d917790a6c648c8524855befbd3e870b8382273e4bda6ecf81cf347ef4", 0xbe}, {&(0x7f0000005140)="9c5f2be072e7212142305b300bdcd288a8978d15e34c08fc45521ffbecb5c242ee48e077b3804ab7ee9a22e86f79982c4b7230f84b4ac8b21e88d7502e2762d96dcf02e831b6fb8f64673ccbad19868b677104dcbb2ad3fadd426ceb45a5edfff33876f8c9b9dd22dad78548630f035dcb14e8242204488e9d4895955d6bf7de1c9eab3d96786e60aaa3412dc985f9caa83b76c9523ec586d133b3259e79f7c35c47ee762219588a7f6e26bc2fc8a44fdba3a270433a3bb7a194e1d4559356c983fdf846203109b8244b34f9b6c53528010ffc1b163578e5946118eb91811095b019b7fff0f19ce07689ff3fef3c4225f84fdd3d67666587c97875c68ca41a4eea1830b4da4ea8a019c8876d0fafa74e5c0ffbe502765d418aaf10ea728126130a4dcac9cd15bbf6c12248863496c7f71f66c2fbce55636a0364595e033524f3e322327675f75886a081b34e94671ea0748c9b1092480400837a92f5de771ec5762b4e0c12e6f503cf31885560f216a0400ccae1f7821ad6497858f02cf2e4daaca59a896967f9a03d91a8cde32bf97961c8c639dd655ab5ba6665da1388024edb8ed860679b20ee61a32dd27c162546955553cd2db94c7013ed8a9dc6045523ced22f0bd8c098382d83d6272746bc4907a6b8eca4705a165babcbc612d3bda0ee8a8377673f47a63f840c52845cd1b22e05745c8b133b5d9cefdecfb9aa53db0583f3cdbf0e4cdd29d2301ebd2281d8309898b40ae9607e57bb009089c7892fd5a95fd0fd2be76236a5ef77a71f88e83681ab5912fe5a2ed8ee18e563102aa10f98702e5f5adb88ef5e53169c8b41a8750b617e50e4c7d956d5ffa778e138baffa06d0ef7b36a4631dfaa9dd1b1ffc75d044031581be33a56ee2c740b223505e820847d62413909716c61c869c41f304cdd9de6d3311a172914e2d6f44505674963b0f8efd8f5be1cf63212f49a1369c0e06a948b3a95fd31cd8e72776a16197f0b4e1c870adb26479836eeacc9622038b6f65110204e3581c31834931f25d8e7b3e44f6413d005b99cd8954c0b9d66dc6554d6b62cc519d9f2a9aacb7c202dfa1c7c9775e49ebbccc2ac0e985efa2f7ea7f33607fac6ee710ba785b113eb05d628dfb8e514a284c98cb5b755bef08b3ed2c5760576117cc34e9181f9b7b53901ee809c4baedfd0b7d82d0822a53522f0edd6d894c5e2a4016525e0bbb6d92bc0a6bf3ccdf984e1a1dd420f57203094cafb86708554f5f4f641c91c1ff7c50a1527ce0d471411a45d9f75610ad21a546baa1b52d3c5ab3d6dcaca65fd8eb802537f5312de2cb8ba99dd62773e13e579f3e5734341f3d97939afec108a12608a950eec7d7b803e642fb923ee648e0b57254aec459fa1e1259fa08862e191a40ec6d23f60b909c18cc72990fc608c9886a0aeedc1b5bfc88b6b1e77ec1d4e5a78f4b4c6bb71d61b26bc06c526c1f1c3b5834deaa950c154b1a857607212ed81c902aeb2ccf79f32f4724832cecc6d5df3ac8f148329402afd309552c78b125edf15c24a2db54d1c5000d0a016deca6ae33e764a0cb0860c7bc096a8e7b375813aa6e4ba95e7e1a20c773183e3023d8f09c4585aca252d77dc9ca26dcbd6e050053e29cb839c6db62b99e5b9703ba8e0fc8bc180e00ca242ea937684d87235732aeddcd97badae4e9b9bc1e166f03f372e0db4fda4f6a6060e909984db5976cee51a61f46bf7ab3a0a58e34dbec28adabd8fd54045985ebb95535c2e2e119a93f377a9c74f87d8aa52910168f22700c1f0eb63b91391d321eaa0a9ff844165f3e2e951a7dc9aaa7de5829d316b8730b81a595f4951f506d44df44b793c90d70a42c1d26a71b32ce89c4adf460d3c740eb980f900c3ed45d5b3b78b7dc6eef14645a790de7997fa45e499092a9ed328783a446a98005a7b66f543aa7b6c92fef864ffba0dc0f04e41d83d6ca44046ada4ffe2991ac290aed014171fb734f7ee426532a31140dec7b24168515ac38ac66b8fd804a0d0f9aeea7a792a67b228f0e1e2ea0c5dcb8eeb72fac3c07ea67ea7576417c4b56e418f534f00c1a19d1cca6af7d4cdf1ca9d7b87a7ecd3a8dcfc890b98e0a0d279c0ed9f304c22006db68794efe45de38859aa021934c9be39002befff9e93fc9b143316181d5b666681e00214703f7698404a8ebac803213e9827dfe7c75d95e8d07424b6956eaebb7ee7bb4d2945dcc4d2346b04071739deca9b2e308cae1809139451873cd342279ee083d58cc059b9ccaed19ddd4887dd528678e6f4945293385f85b10311f647ed2ea16def0a2609d775a222fc08d13c5d55b47bb2ea645e8145ffea309edfb72ec877a7ae94661162c2a3425c4aee83a254e1eef447273b8009c4e2d6bb19e5d6e8a581512231561d16ffeb4a1a40457d93d4205834180d529a6633906ba8311cffe1fe48d1599d4fe39bcb8084a4a4daacd42e502f9716f81558244a599f7fbc4c8f4ac2ab236ee77718391605933c15968320b0653df02a9c95968fb8a2306e7355dcdb780fa94963cfb2d9ffc157a5b80e10c96ee36d3e46591f544ddf7ab5660cf949bbc88d930b7e7c9ae22c714659a54b236a8b75238dc9be6035454b785e8fa6d954fd9fe2bee7e389a4c6692760d16f3946d4eb8ded997246ddcdc943466961389b71ed3eb645074f357c7d78a649facc385b1b0fabc3966d764562146797764d1d5b178a6ae14aca76ab1c2c3c82f7a0ae58535737765bcdd910dc75e89a887fd3c0be35c5ee5eeb015aed0e4f23eaebea238bd1830c4296c586d24375f7d3db66f5085b9373a49f35abefdfc1ffc4986393ea4c1ff7b3ea38b89b921c1206d1626f76deaa57c076a51d294528dc674e627b1d1cd2f192637db7bc2cf6786d2c0d30ccdb9d9658570d5f20d7c6d86ca091e651399db2d0737b9cde210fb0e3deba3981e9c6ed45f2fc29db03c0feec991b35887a333ccb9f9a4fe2f8da488aa807f2e52026a7fd881e6f4576675d2e3ad6ef12d3f8d6053eef0b47492a7542aeafdf14351ba86175671b65f0222d30bfce834161626dda76fdf0fb6534f47240a9fd2d507bafcaada75410fd4397242466276facdcf11e1d0c9d4afdb0120fb8f967240129d454a354b76263edcf8e1cd167f91eba77f16fe148471bafbc12f411f4fa0174a6084b6702e328f8f0aabd3fc4764d5b7ea3427fedd9b75668ad59fe75f5adef6154fdd8bc5af0740b074ef99def7fa28c2e7c908af312eba92e8a7fb898331bbd3caca4c3344f0017d1a2441b826642d027c3ff3f7b1fb9c4203efa2e3534d5683354181f768bf63e011275d1319641ea389f917be528930bc097bd891dff936c52d032d665797cfbf9efe6f71d81b5bc36b52a4fddb9cc4439a64a7f3976a2abaf040047b000583b3fb0921d1d5a8e3afcae54e2d0cbfd1c76ec875b174de0df07bda26e36540a7f17dccb1e21bb19391000f3f3cd6e8de9717822050a2d94bf7bc3e475c5abce1f4b558ce4f4129b9c1b31701efaa8cc4f072a8dbea5af63c2c626ec5fc1ee64a9894b502d04a5c40b147f90c9164bbf6e3ec719574fe02fa6481aee9b1a16394e085bb151cd2d244a2f2e0db432438afd8ada0fb7d2b56d01772fd67d984335d59518ad0b8a1c3f5e5302337706a947d4f238974d7716dae6705d6eef1e3d1f7d5c84d1e47a552c88536c0cb3b2939dfc0f6382ecafdbed0261ddbcbbc10d04fa592313dba6eff125d0d087ef035bf1ea270720b3d3ba180d1344154a27a39239e5ca8c9bb9d728721e2aa0df68c0b13c19f9e91306e448d42df9d730e691cae9b6912110d54a89ab7ea20d8567119d94281fcfb13e476216c22e6f386a34cbbc24486735d9030399fe6ace2cbfef2011cdfa34a01910bbfc11834cd50e1cd6fc0ed5aecf20081c3e38c317e8c4f5e2d7e933497e7d7f558eb8bbd3a0c759e3e393a5ef88032bd24dc454b73999ca28490601c3d653f70178ee83e570171f1219195b4208d58d2c5f7159771e98480048caa70da70cfec248a9bb04179fff9af29231fc0e9bd2957e29f04a48a674a6cdd65bf9c6916ab680852b2867a3269fa44b0900726c52671b7ef168b0ceadb73284d9dbac0ec2ac2dd27494bc3f0472c38c6c22a31a158b3fd11384916ae068b277dff9c2d08e3f5cc7364a176a5ffeb24e8ecb1aaa48ce8073bf75bd58799c8b81741b3f1068b6dc7bb17872fee30d96840f17ec32f40399ccec7e4df2367905626fc8a1ab7baeb39dffb27e2c172b60c15f1852fba84ab8ab66651da10c394de99631c51c00e724fbdb324e3dcf74fab4b5516a3a96b9658fabaea00e5443555cb5aaf9b597eb4d10a8ca7de468e9739e92e6b8e9ee931da95ea1df19e46f1a43a71ae8b8394ff2855eb8380cfdf189931ad4114dd109d6c739841a625f6dd9baac884cefca78de98178c655ee0c3ae2988acc6f3b6b5e6af93e05aab2e23297f5ac0d327da54df4b546e01f303824c4b31e565c84e21002f05ec9b6686d964fb24ba99baf4fcfc9d4002a2ce8a5ec53649c47417fc1693c8d4eafdab075b0e15d17b7bf6974a2f5e307a36cb5d73f6ae954fc22e018e86ad03a17ccef0cd359da4c2eaa74b0217dee137a5f184705ed0ef0a8178d4eeccde3ede1a3fdd53445aaa731f36437c78b183964bae6bf6efdf0aa7060fa6ac66c608609a60da639d19836690b19cad7b94ffe418d5da10689dc4eb83fcb831eab8ded4896d0579b76ed33300c8a4eba4a0f534b0fcf0e07ef0f1773af0d47788b69d477c2eeed5dabcdc995290a25fc2929bda4c744643007ea9348c77c2173c335051252f8729c9b0ec5effbdf52ea3699403f87abd473d85c16296605439c538c3720749f34b4df358d9f1648b96cabb331d8c9a00796b96f832556c4f7225ece888a91774573520300f56dfce7d9bbff13b8e234aaca7171643e7cd5db3c820c6e048e38390f8cf89415e84db2f60fb41c0e08041b35aa1c047dc00328bd32b6272a1865937e83ecab1db0fb830b5032856497a3d90a2d325c51d6705c4f0372641eec44af77763fa4ab76fc68228183f7b5e7d6d71e7ac316f9985b5367967124cd74f4ee073d7656596ffab6ccfe96b5d01a198653a1786262ea8135c960b0613d6bc353dc91521b6943bd8f97363e9eb844ba2e889900e47d3e94907ef6e413be9a1b79b9fb629a3ea24631028e5fdcd358d19fac85c96a547ee5013d7020b741ddcead88ae5a0a91acfb047bf24f1fc7f053a7ddf67c86a26c26d615e04404e7feb07da33171e442220e52e0b3d784de78ada2380bdcdf6030c94b42c2e9f4be7bd47742b01d7e96bc1213dff1d8fc7d44c66d0db2ab4ee09aca5dc5f66e7dc26675aa5af7e5c5a02d1fc2e28132d05402be51f6e31033ec9d7264bf989ee250151d54ba5744ea0bbb5b2352220b25d0c4c3840a50db3bc78b9fd4c302cb9bc494e4ba20e8c6e1c16e487cd155a9eb83d5bc0adb062e2e7dd6aee784a0ec8869cdff5dcbfe58aa55d71258c0e1aa151c142b2251cd4bc27c63ae83fc07bc3834b5eaf3f020cf69ff86f96c59cee525a11c4b21f3963a1ad9fa3554dc907ba873b3b06d0699c8f976eecd9f5b3cd37bc710dbd68c87c5cdb9aef4738fe5d6b6e2a6dda153abc001bfac8222ff4f9de8dc2c62e0859dc4cabbce43821615b8e9e7c6eb4a4d36d1ccdb4f93a371ec13298c6a50485f9ed646e4ac0fbe776c2909611c898b3c33404a653954270989383747627e0c53ca8b1b1c65243221b109cd71db5831a409e", 0x1000}, {&(0x7f0000006140)="9755c10aeac57c494cfd7d63bcb7356e19697a55e801fb418fdc31102e4e", 0x1e}, {&(0x7f0000006180)="e95e4871ec993d8a02a644cfd44b1c49705af878cc403e9793a8eb7a14bdf6969ba37b73641100da6f98afe5aaa80d623515c3355b90160c392a89171f74978cbd105700f72101b9cf97ec337c8f24aea60f2caf", 0x54}, {&(0x7f0000006200)="60a425f79ec838ad4b0f25363464bb29d3a040e7f0c2be4082487000bae00d79a74b877de933f01672e9ba9be748efbacc5663a64903d30444d0129e3635c82e7a61cebe827f36cf20f460075f29c42b95697d006a1263bb050c12392a365074b07d8f6a9a967e3efb07ba0c67be0f9c4c46771b8c9e2a69c0f7a175d9e1035f7e0213dd5bedd3d2ab804e5f945d8362f7d803d80e954566b24c82f0aa36ac3a91c0297e3ba523f69057", 0xaa}, {&(0x7f00000062c0)="b0d547a860b75cc51d58bde73048c42f4e13009730b225a029d61c1978986e267d0d6c23b701d9eeb9dd951ce2942d6a986662d526150cfd85665dbf975836759368dc4f4cde373cd4972d94d9ed3d11bc40704c5bde245b509374ab7bbc6acb6778856a0d5588d986a6a29bc35933feba019a1eb0602572961f30650e578aa20ba1502bcc675b3a11f92bffb2a9365f6a944e690c59709ce8fc439b096d00f090468ce19a9a3160301fd9246dbd67c1e664ff3166d3199001804f95fac0e070e6a75e3219450cc775316e8533051777d6e87d766181341ca799f38cf0eb9a5366a4c98e86", 0xe5}, {&(0x7f00000063c0)="06a9b70acde2aaed32daf2169bac70f4dc493ea1e96a432343fc513e16ba16e2a9f0e3f177cd2a287cc1", 0x2a}, {&(0x7f0000006400)="24ec606b70ed0058c9db48a3c43ae05d6c5ad652f028603b93a90afd9bc2f03ef8a01a48d775eadeed7ff2e7e2b35f5389d1c433f47fc73aed413770d4f8b8805d0d864e16ec17f2215f2aabf9ca73f39faef8a66ddce4067334360c", 0x5c}, {&(0x7f0000006480)="12f9d09d977d3c3e3e3fcc9810badb0ab65f45d01aa382667b", 0x19}], 0xa, &(0x7f0000006740), 0x0, 0x4000010}}], 0x8, 0x890)

23:36:27 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:36:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="0f", 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fdatasync(r1)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:28 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3089.727403] loop3: detected capacity change from 0 to 40
23:36:28 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x400}, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2800000029aa9b3e3a2fa17a529216ba56abc1e6361bd30b89e1f28a6102f750082f69b045f97736d057fa8b7966bd70463c0c3c072f24c696e57e126f455837ebfeff702d93117c541250c0443a4cb1f5fc01d32c56e6896e59a81ab79e4eff705c1a657fd8e2a2bbe51614e7a2c664cd71be49e34db30cb0cd657147a5105aa14f4ffdc9d2c4", @ANYRES16=r1, @ANYBLOB="b5378bd71c8342ab70f5c5bb2eacd0a516fb12830092b32d6b57433b8a2c2a1cdd87", @ANYRES32=0x0, @ANYBLOB="734b3fa09e1a820a44dd2a40dbc7fa222bddc5e97de5925b47a3b570965c5c2bf57802febdb14bb88069a979e7c4a9c1ae9c44382a7c239cb537ef4399eec9998ee0b9832bd6b62020e8560c1f24ef94dc839f3c41b26c26b1f841c08f72bda67531590ded41c6818393f10104000097764fb79dbd5755767ee06cfdf705bf3147b745345af7162d02c1012fef578b377818fc04547dca9a6b9e12117010cc3798c23e481c65737d3a9d748e018f1c7809dff6df0121f3a0ed0f043bc11ca883"], 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x20000000400000, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x20, 0x0, 0x0, 0x6e, 0xa0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x21, 0x0, 0x288}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=<r4=>0x0, &(0x7f00000003c0))
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000700)={{0x4, 0x1}, 'port1\x00', 0x2, 0x0, 0x9, 0x9, 0xfd, 0x7, 0x101})
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r5}}, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r2, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:36:28 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
acct(&(0x7f0000000100)='./file1\x00')
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f00000000c0)='./file1\x00', 0x1b)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3089.889543] loop1: detected capacity change from 0 to 40
[ 3089.923733] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value
23:36:28 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="7f", 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:28 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3090.037767] loop6: detected capacity change from 0 to 264192
[ 3090.090958] FAT-fs (loop6): Unrecognized mount option "-k¾ªTÒý‰«ŽilÍ›XOÜ’„·
[ 3090.090958]  srÌm儯uxeÚK² ï¡2¼vâtÌÒš+BÞwØú%ìã›ÎÓƒÙ«Ì×Óý!}FD.´¾¿ÿ'²Y�†¿�]±JaδµTN1Èi" or missing value
[ 3090.223168] syz-executor.6 (56074) used greatest stack depth: 21864 bytes left
23:36:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000000)='./file1/file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:45 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="ff", 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:45 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x3)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x60)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:36:45 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0)
sendfile(r0, r1, &(0x7f0000000040)=0xffffffffffffffc1, 0x7fff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r3, &(0x7f0000000180)='./file0\x00', 0x200b81, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fdatasync(r1)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:36:45 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:36:45 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x80000000000000}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000340)=ANY=[])
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r3, r1)
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000300)={0x770a, 0x28, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$FIOCLEX(r0, 0x5451)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x40)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)

23:36:45 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='\x00', &(0x7f0000000180)='*){(-%\x00'], &(0x7f00000003c0)=[&(0x7f0000000200)='{\\)\x00', &(0x7f0000000240)='\']^\x00', &(0x7f0000000280)='.\x00', &(0x7f00000002c0)='\x05-\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='%[\x00'], 0x1000)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3106.909445] loop6: detected capacity change from 0 to 264192
[ 3106.921790] FAT-fs (loop6): bogus number of reserved sectors
[ 3106.922198] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 3106.957382] loop1: detected capacity change from 0 to 40
[ 3106.976732] loop3: detected capacity change from 0 to 40
[ 3107.007001] loop6: detected capacity change from 0 to 264192
[ 3107.014115] FAT-fs (loop6): bogus number of reserved sectors
[ 3107.015245] FAT-fs (loop6): Can't find a valid FAT filesystem
23:36:45 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(0x0, 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:36:45 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3107.116251] syz-executor.1: attempt to access beyond end of device
[ 3107.116251] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3107.118113] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:36:45 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3107.187155] syz-executor.1: attempt to access beyond end of device
[ 3107.187155] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3107.188129] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:36:45 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(0x0, 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:36:45 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="600000007501005500000002ac40e1aa978dd4b3dafa4ecd0f7699e131fdbc60aa8972fafe6aa6c9baa5fcd935707c4ad46303869b90469ab2ba96b5fdc0676b5ba0774017f70dfbca2cd894ebd9aaff13c5d8af8b04e048a06306ffd546cbf0"], 0x60)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="17650cf696c8db03b2e364afe30791c15180c927ae10fe9b4967509cced22b10800bcc6332bbd3ff5f987be4478c7bb51b312f327a3e6b17973e048415b781a87d26c123bf17c59523c25dbf6cf70d248f89d1b9189ddba4618767f1dec6cb35c952b86c90f8414b3f69899f73b48fe939d647f42d9d374e6f2e4c113b203b29a3444e21df3f6323aed06029b076ae38daa703066c044abe7f9429ef13fd129887963e8f0ef8842feb085a79c86d07298fe18fb59fb6", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf25030000000500020002000000050004000200000004000500140007002001000000000000000000000000000214000900fc000000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x12, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_config_ext={0xff}, 0x51880, 0x0, 0x0, 0x4, 0x400000000000}, 0x0, 0x4000000000008, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:36:45 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fallocate(r0, 0x10, 0x8, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x81)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x3, 0x80, 0x0, 0x5, 0x9, 0x3f, 0x0, 0x0, 0x1200, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xc9bf, 0x2, @perf_bp={&(0x7f0000000000), 0xe}, 0x10028, 0x9, 0x100, 0x8, 0x4000000000000000, 0x6, 0x2, 0x0, 0x3ff, 0x0, 0x7}, 0x0, 0x10, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = gettid()
r5 = getpid()
rt_tgsigqueueinfo(r5, r4, 0x0, &(0x7f0000000340))
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x79, 0xfe, 0x58, 0x0, 0x1, 0x22002, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x4, 0x3}, 0x2848, 0x7, 0x100, 0x5, 0x1, 0x800, 0x9, 0x0, 0x3, 0x0, 0xffff}, r4, 0x6, 0xffffffffffffffff, 0x8)

23:36:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x16200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x24000080)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3107.382481] loop6: detected capacity change from 0 to 40
23:36:45 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(0x0, 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3107.454863] loop1: detected capacity change from 0 to 40
[ 3107.673543] syz-executor.1: attempt to access beyond end of device
[ 3107.673543] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3107.675961] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3107.766238] syz-executor.1: attempt to access beyond end of device
[ 3107.766238] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3107.769177] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3107.796313] syz-executor.6: attempt to access beyond end of device
[ 3107.796313] loop6: rw=2049, sector=92, nr_sectors = 32 limit=40
[ 3107.810586] syz-executor.6: attempt to access beyond end of device
[ 3107.810586] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3107.813043] Buffer I/O error on dev loop6, logical block 31, lost async page write
23:37:02 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
mount$cgroup(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x8, &(0x7f0000000640)={[{@xattr}, {@cpuset_v2_mode}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@hash}]})
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = memfd_secret(0x80000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r3=>0x0, 0x4, 0x0, 0x8, 0x8, 0x2, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x700, 0x3, 0xffff70ac}})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="09937ed155aa437f3e38b0cd17547e1ce3c8759306c20bdb", 0x18}], 0x1, &(0x7f0000000440)=[@ip_retopts={{0x50, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @multicast2, @private=0xa010101]}, @lsrr={0x83, 0x27, 0xef, [@loopback, @multicast2, @local, @rand_addr=0x64010101, @loopback, @multicast2, @empty, @broadcast, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc8}}, @ip_retopts={{0x58, 0x0, 0x7, {[@generic={0x88, 0x10, "36d0af18fb45c895d51ccdc95226"}, @generic={0x86, 0xd, "c96c8e270fe9cc482c5b51"}, @rr={0x7, 0x2b, 0x24, [@broadcast, @dev={0xac, 0x14, 0x14, 0x40}, @remote, @remote, @empty, @loopback, @multicast2, @rand_addr=0x64010102, @local, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x128}, 0x24008080)

23:37:02 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))

[ 3124.157053] loop3: detected capacity change from 0 to 40
[ 3124.158988] loop1: detected capacity change from 0 to 40
[ 3124.160639] loop6: detected capacity change from 0 to 40
[ 3124.185169] cgroup: Unknown subsys name 'fsname'
23:37:02 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/235, 0xeb}, {&(0x7f0000000280)=""/125, 0x7d}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/117, 0x75}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/75, 0x4b}, {&(0x7f00000000c0)=""/50, 0x32}], 0x6, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r0=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000019c0)=@abs, 0x6e, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001b40)=@abs, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001bc0)=""/227, 0xe3}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/56, 0x38}, {&(0x7f0000002d40)=""/131, 0x83}], 0x5, &(0x7f0000002e80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002ec0)=@abs, 0x6e, &(0x7f0000003580)=[{&(0x7f0000002f40)=""/131, 0x83}, {&(0x7f0000003000)=""/146, 0x92}, {&(0x7f00000030c0)=""/96, 0x60}, {&(0x7f0000003140)=""/219, 0xdb}, {&(0x7f0000003240)=""/233, 0xe9}, {&(0x7f0000003340)=""/178, 0xb2}, {&(0x7f0000003400)=""/44, 0x2c}, {&(0x7f0000003440)=""/57, 0x39}, {&(0x7f0000003480)=""/225, 0xe1}], 0x9}}, {{&(0x7f0000003640)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f00000036c0)=""/7, 0x7}, {&(0x7f0000003700)=""/63, 0x3f}, {&(0x7f0000003740)=""/50, 0x32}, {&(0x7f0000003780)=""/42, 0x2a}, {&(0x7f00000037c0)=""/164, 0xa4}, {&(0x7f0000003880)=""/154, 0x9a}, {&(0x7f0000003940)=""/140, 0x8c}, {&(0x7f0000003a00)=""/213, 0xd5}, {&(0x7f0000003b00)=""/228, 0xe4}, {&(0x7f0000003c00)=""/232, 0xe8}], 0xa, &(0x7f0000003dc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000003ec0)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000003f40)=""/78, 0x4e}], 0x1, &(0x7f0000004000)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000040c0)=""/115, 0x73}], 0x1, &(0x7f0000004180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004240)=""/15, 0xf}, {&(0x7f0000004280)=""/120, 0x78}, {&(0x7f0000004300)=""/171, 0xab}], 0x3, &(0x7f0000004400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}], 0xa, 0x123, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000048c0)={'syztnl2\x00', &(0x7f0000004840)={'syztnl0\x00', <r1=>0x0, 0x4, 0x1, 0xf4, 0x8, 0x30, @empty, @mcast2, 0x8, 0x8000, 0x3, 0x80}})
recvfrom(r0, &(0x7f0000004700)=""/113, 0x71, 0x12002, &(0x7f0000004900)=@xdp={0x2c, 0x8, r1, 0x37}, 0x80)

23:37:02 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='x', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:02 executing program 0:
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={0x0, 0xfb, 0xae, 0x3, 0x7, "e64c8258b502a28c7c043058bf525b72", "c9dd94cc0b93748aadb17a9cdf79c735ad1fc7b3bb5a190458af9a960ced2b6470dba3595a670ae3423e777e93c569572f6eff9f0995fb13350325eafc3775532201c26df25573231f6b7ec2bf0eef1e1250b2fdfe242ce8ba68fe924de02ef388107bdd02ab149cb47ec44f946f519203622eed20e34de07c8b58c3a49d4ded23fabad79ced231eb4d99ffdd12f1f8d210c7d80e35a4096c7"}, 0xae, 0x3)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0xa)

23:37:02 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:37:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
fdatasync(r1)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:02 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3124.299143] syz-executor.1: attempt to access beyond end of device
[ 3124.299143] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3124.300395] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3124.338255] syz-executor.1: attempt to access beyond end of device
[ 3124.338255] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3124.339256] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:37:02 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x189016, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1f, 0x8, 0x81, 0xe3, 0x0, 0xb321, 0x80, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0x20}, 0x400, 0x1, 0x3, 0x0, 0x9, 0x2, 0x20, 0x0, 0xdb, 0x0, 0xa3}, 0xffffffffffffffff, 0x1, r1, 0x9)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x1)

23:37:02 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)="88", 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3124.380040] syz-executor.6: attempt to access beyond end of device
[ 3124.380040] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3124.381089] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:37:02 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x9)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0)

[ 3124.423265] syz-executor.6: attempt to access beyond end of device
[ 3124.423265] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3124.424150] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:37:02 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:37:17 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, @in_args={0x4}}, './file0\x00'})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000300)={0x1ff, 0xfffffffffffff23a, 0x10001})
accept$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x400, 0x102)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:17 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
acct(0x0)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x217b01b, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3139.649929] loop3: detected capacity change from 0 to 40
[ 3139.672034] Process accounting resumed
23:37:17 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(0x0, 0x4)

23:37:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
fcntl$getown(r1, 0x9)

23:37:17 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:37:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:18 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3139.690516] loop1: detected capacity change from 0 to 40
23:37:18 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000240)='./file0\x00', 0x1)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2000c1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0xbdbee5e8e4d2068}}, './file0\x00'})
r3 = openat$cgroup_pressure(r2, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0)
sendfile(r0, r0, &(0x7f0000000180)=0x6, 0x20a)
ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000200)=0x7fff)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:37:18 executing program 6:
connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040), 0x14)
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYRESHEX=r2, @ANYRESOCT, @ANYRES64=r2, @ANYRES32=r4], 0x22b24f7067f4602c)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000001c0)=0xb4)
openat(r0, &(0x7f0000000180)='./file0\x00', 0x34000, 0x58)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3139.812551] loop6: detected capacity change from 0 to 40
23:37:18 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:18 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(0x0, 0x4)

[ 3139.856984] syz-executor.1: attempt to access beyond end of device
[ 3139.856984] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3139.858018] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:37:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3139.908798] kworker/u4:8: attempt to access beyond end of device
[ 3139.908798] loop3: rw=1, sector=124, nr_sectors = 4 limit=40
[ 3139.909649] Buffer I/O error on dev loop3, logical block 31, lost async page write
[ 3139.919860] syz-executor.1: attempt to access beyond end of device
[ 3139.919860] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3139.924483] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3139.925004] syz-executor.6: attempt to access beyond end of device
[ 3139.925004] loop6: rw=2049, sector=100, nr_sectors = 8 limit=40
[ 3139.935255] Process accounting resumed
23:37:18 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018f0ffff2fc22d5776f69f559e76a4e12549582757fbd31e699a65a641ba1ba20a02b796560b25388a4d64d66726a68d89dc9d52a3df8b6a34284563d6a9af5692129b12c36146571c8cbac715a3485fec81c3b4775aa538ed1512941b692db7", @ANYRES32, @ANYBLOB="00000000000000013d2f66696c653000"])
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
acct(0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x2)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3139.999019] syz-executor.6: attempt to access beyond end of device
[ 3139.999019] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3140.000097] Buffer I/O error on dev loop6, logical block 31, lost async page write
23:37:18 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(0x0, 0x4)

23:37:18 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000f70310002bbd7000ffdbdf2507000000070000002e2f66696ce5302e2f66696c65300000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44014)
acct(&(0x7f0000000580)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080))
execveat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000240)='\x00', &(0x7f0000000280)=')\xbc&*\\\x00', &(0x7f00000002c0)='\x00'], &(0x7f0000000480)=[&(0x7f0000000340)='W/\x00', &(0x7f00000003c0)='-+]((-\')\x00', &(0x7f0000000400)=',%\\-\x00', &(0x7f0000000440)='\x00'], 0x1000)
r2 = gettid()
r3 = getpid()
rt_tgsigqueueinfo(r3, r2, 0x0, &(0x7f0000000340))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0xb3)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080))
perf_event_open(0x0, r3, 0xdfffffffffffffff, r4, 0xa)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000005c0)="7147b5fafc7c3d771dccd9d97d078cd82989058cb57e3b5502084a8c11bb36e9e29c94695b5f9c7b28544fff82d12da189449b070d5166d824283614fafb1099ca14d92aeedaeeb569ea612599ec4c68c941fe53a9302fdee449bf6a21b66c8ed97620fe9c16463f0140160d3736116463bdd6a40adc93da10637fdbe230a1290be59bac9ff4a27ddac063251244bb355d0935f552d6ce262bc9edc9e6365da4ad66a8f3", 0xa4, 0x5)

[ 3140.036030] syz-executor.6: attempt to access beyond end of device
[ 3140.036030] loop6: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 3140.036942] Buffer I/O error on dev loop6, logical block 26, lost async page write
[ 3140.059143] loop3: detected capacity change from 0 to 40
[ 3140.130280] Process accounting resumed
[ 3140.209074] Process accounting resumed
[ 3140.243308] kworker/u4:8: attempt to access beyond end of device
[ 3140.243308] loop3: rw=1, sector=124, nr_sectors = 4 limit=40
[ 3140.244669] Buffer I/O error on dev loop3, logical block 31, lost async page write
23:37:35 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:35 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
openat(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/62, 0x3e)
sendfile(r3, r2, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:35 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xff, 0x3f, 0x2})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:35 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x10001, 0x82)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f00000005c0)=0xe8)
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x6, 0x4, &(0x7f0000000440)=[{&(0x7f0000000200)="c3e65b21d85ca78730f6799aede3f49d3a6f3f82d5d36845616aaf2be953ad790a3a002bf5af90a2018ae204dc5daf38494f6d4129d6fdf308a304f5bc7553046e44e61738fa986303f33c120665e7135657c6f24ea8bf081af1ed8c029dac471a53face8b1452202f", 0x69, 0x2}, {&(0x7f0000000280)="e14452efef716da10e04f1af2707ab86666dd55ff5fcd94f70f1a48e64672230733619c48f5ba355cb47fa299a", 0x2d, 0x5213}, {&(0x7f00000002c0)="d52fe2f9716e50e63ffbf974acc22c9fec43da03c6ac98bdc9628c6c06cd3630bb12d4ccbf48bb6904edf0e34c692acec244b38d823c2191c1feb68a89f12024c93bab3b153f36efda9a5ec897fa312c334b77aac1713c0a5437fbb6119cd99aebc4d7b4c835e942309f7cf74bfc24f7d18d60b570c0bdbd48b31ec083c21cf1f3cc348a68ca9844b46719adccabe3be85e321a35b78b1286849c22110a5230a80fa57682456b3ecdd56c72d67ae458586ceeabf7ac74851a143b7ffec5206615b2ec63d91b16b7777e0e2901925ea550da7d8b9add54a59e2aead52a9272e751dc1dddeb929e25894ef91003d99", 0xee, 0x400000000}, {&(0x7f00000003c0)="2fe4ab6c47752277dd222368f7b86ff9c11fbf971bc084e24065e99810ba30837fb1a45d1cbdd1f6dcef3d8e9558b15e5843def9e0e6894b50369ca2b3d2020b1722bcf69f1616cd5f0fec898b757bca64f0d6ac20d70afcbaa1f2eaf1ccaba7df5d450f0fa7262d1546070ba3068ae4", 0x70, 0xff}], 0x2000800, &(0x7f0000000780)=ANY=[@ANYBLOB="6d696e697864662c6d7ecd11f2617463685f74696d653d3078303030303030303030303030303030342c7569643d39779f890f35757cff68d7a36e6583c0e1c58dd3549867cb0a5aaf903e2b75b2780bd740aac7ebe0f0abb5165c0e93a84fefd729a71b371821b699540c2e519c7a07c9fbd5fd5e9bbc508a4e28367257372232532c508f13646925c0153ed3c3f38fabd4ea3bef1c1a44da41613e9b74d66ea015cabdcbd6e78b1745391cbe1e33b838dad330567aefde9b04c4e4453824dbb1179af4e25ec888a92346e083b7efc6de8b7c0fad3adfb413613ad70ca6a1540a073bae946907190db3a461d0ec70d77cda", @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=/dev/loop#\x00,fsname=/dev/loop#\x00,obj_type=,pcr=00000000000000000013,\x00'])
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>r0, {0x4}}, './file0\x00'})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x9)
openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x101000, 0x0)

23:37:35 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:37:35 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x3, 0x5})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:37:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:35 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x1c0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000180))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3156.809323] loop6: detected capacity change from 0 to 40
[ 3156.816819] loop3: detected capacity change from 0 to 40
[ 3156.861878] loop1: detected capacity change from 0 to 40
[ 3157.025302] kworker/u4:7: attempt to access beyond end of device
[ 3157.025302] loop3: rw=1, sector=124, nr_sectors = 4 limit=40
[ 3157.027202] Buffer I/O error on dev loop3, logical block 31, lost async page write
[ 3157.040439] syz-executor.6: attempt to access beyond end of device
[ 3157.040439] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3157.041518] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3157.053797] syz-executor.1: attempt to access beyond end of device
[ 3157.053797] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3157.055998] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3157.114880] syz-executor.1: attempt to access beyond end of device
[ 3157.114880] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3157.115748] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:37:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
mount$cgroup2(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x88000, &(0x7f0000000400)={[{@subsystem='cpuacct'}, {@memory_localevents}, {}, {@subsystem='net_prio'}, {@subsystem='devices'}, {@memory_localevents}, {}, {@subsystem='io'}, {@memory_localevents}]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0xc0000, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x402080, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:52 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:37:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/120, 0x78, 0x2003, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = gettid()
openat(r0, &(0x7f0000000240)='./file1\x00', 0x5a1400, 0x10)
r2 = getpid()
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x4, 0x9, 0x7, 0x43f, 0x50, @remote, @mcast1, 0x20, 0x700, 0x4, 0x6}})
rt_tgsigqueueinfo(r2, r1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x200000})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x10000027f)
r5 = getpid()
ptrace$peek(0x2, r5, &(0x7f0000000480))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x5, 0x0, 0x1ff, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7b, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

23:37:52 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0))
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', ']\x00'}, &(0x7f0000000240)=""/63, 0x3f)
acct(0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380))

23:37:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:37:52 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x311000, 0x180)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffffff, &(0x7f0000000400)='./file1/file0\x00', 0x80, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={<r4=>0x0}, &(0x7f00000003c0)=0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x2, 0x88, 0x6, 0x0, 0x0, 0x1ffe0000000000, 0x1020, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x3ff}, 0x800, 0x3, 0x301f, 0x8, 0x1, 0x7f, 0x44e, 0x0, 0x8b5, 0x0, 0x80000000}, r4, 0x1, r5, 0x8)
sendfile(r2, r1, 0x0, 0xfffffdef)

23:37:52 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

23:37:52 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3173.855309] loop6: detected capacity change from 0 to 40
[ 3173.859349] loop3: detected capacity change from 0 to 40
[ 3173.899493] loop1: detected capacity change from 0 to 40
23:37:52 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x2)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:37:52 executing program 5:
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xd4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xba}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc6}}]}, 0xd4}}, 0xc850)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000500)='./file1/file0\x00', 0xe, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3174.062227] loop5: detected capacity change from 0 to 40
[ 3174.074211] syz-executor.3: attempt to access beyond end of device
[ 3174.074211] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3174.075297] Buffer I/O error on dev loop3, logical block 10, lost async page write
23:37:52 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x20)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81000)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x5, 0x7, 0x6, 0x3f, 0x0, 0x10001, 0x41000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1ff, 0x939}, 0x10810, 0x0, 0x9, 0x8, 0x40, 0x80000000, 0x8000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x28, 0x0, "704f5992eebeaa2888e479ca552ee155f638582a91ca97213ff4064a2e4c350cdc3f9f62a4c21970c8149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
syz_io_uring_setup(0x43d7, &(0x7f00000016c0)={0x0, 0xa9de, 0x2, 0x2, 0x101, 0x0, r2}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x84, 0x81, 0x23, 0x5, 0x0, 0x0, 0x44060, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80000001, 0x2}, 0x0, 0x0, 0x35, 0x57571fc198d50e28, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x8, r2, 0x8)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3174.179296] syz-executor.5: attempt to access beyond end of device
[ 3174.179296] loop5: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3174.180399] Buffer I/O error on dev loop5, logical block 31, lost async page write
[ 3174.196440] syz-executor.6: attempt to access beyond end of device
[ 3174.196440] loop6: rw=2049, sector=100, nr_sectors = 8 limit=40
23:37:52 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
mount$cgroup2(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x88000, &(0x7f0000000400)={[{@subsystem='cpuacct'}, {@memory_localevents}, {}, {@subsystem='net_prio'}, {@subsystem='devices'}, {@memory_localevents}, {}, {@subsystem='io'}, {@memory_localevents}]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0xc0000, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x402080, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3174.232474] syz-executor.6: attempt to access beyond end of device
[ 3174.232474] loop6: rw=2049, sector=104, nr_sectors = 4 limit=40
[ 3174.233306] Buffer I/O error on dev loop6, logical block 26, lost async page write
23:37:52 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1040002, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', &(0x7f0000000180)=""/237, 0xed)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3174.263463] loop3: detected capacity change from 0 to 40
23:37:52 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4) (fail_nth: 1)

[ 3174.293313] loop1: detected capacity change from 0 to 40
23:37:52 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0x5b)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x3f, 0xf9, 0x7, 0x0, 0x100000001, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0x6}, 0x1000, 0x80000000, 0xfffffff8, 0x3, 0x1f, 0xe41a, 0x101, 0x0, 0x2, 0x0, 0x7ff}, 0x0, 0xa, r1, 0x2)

23:37:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3174.368013] FAULT_INJECTION: forcing a failure.
[ 3174.368013] name failslab, interval 1, probability 0, space 0, times 0
[ 3174.369508] CPU: 0 PID: 58937 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221208 #1
[ 3174.370524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3174.371538] Call Trace:
[ 3174.371873]  <TASK>
[ 3174.372178]  dump_stack_lvl+0x8f/0xb7
[ 3174.372702]  should_fail_ex.cold+0x5/0xa
[ 3174.373256]  ? getname_flags.part.0+0x50/0x4f0
[ 3174.373865]  should_failslab+0x9/0x20
[ 3174.374376]  kmem_cache_alloc+0x5a/0x410
[ 3174.374912]  getname_flags.part.0+0x50/0x4f0
[ 3174.375505]  getname_flags+0x9e/0xf0
[ 3174.376008]  user_path_at_empty+0x2f/0x70
[ 3174.376603]  __x64_sys_umount+0xfc/0x190
[ 3174.377138]  ? __pfx___x64_sys_umount+0x10/0x10
[ 3174.377761]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3174.378444]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3174.379139]  do_syscall_64+0x3f/0x90
[ 3174.379645]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3174.380339] RIP: 0033:0x7fdd07981b19
[ 3174.380837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3174.383097] RSP: 002b:00007fdd04ef7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 3174.384075] RAX: ffffffffffffffda RBX: 00007fdd07a94f60 RCX: 00007fdd07981b19
[ 3174.384981] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000140
[ 3174.385874] RBP: 00007fdd04ef71d0 R08: 0000000000000000 R09: 0000000000000000
[ 3174.386789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3174.387696] R13: 00007ffe85fbcb2f R14: 00007fdd04ef7300 R15: 0000000000022000
[ 3174.388645]  </TASK>
23:37:52 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000000)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/drivers\x00', 0x0, 0x0)
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r6, r4)
io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xd285, r2, &(0x7f0000000180)="bcc67267330702ae8e30383e48c9e65e5dc54af45480b4661cd923fc62c799d31dae5f62c521b4360eaaa91d01ba0eb3c906d029d500a654508fd15a1f50d89dd5c8556fc975bf36cc11a710015084177fa3a618c3c80ccf42dcdceae33712fba337ab2f379abbced7b1f345b1000508d950d274d1701be1267a8f98bb5c24c33ba45c2019c23fdfe55ad51d65c8159940046921df77c708e6b525fc958586f9af6f6ddfdfa2ae687680fcc0805dae155091c350", 0xb4, 0x6, 0x0, 0x0, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xfffc, r0, &(0x7f0000000280)="395c41d257280c17332f157d33b1cd7c3a7b83eaba144f2174e6df9f6a4dba05e3e4ee1eb6baadfbc04478060377a03b4fbbde06", 0x34, 0x7ff}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0xea, r4, &(0x7f0000000300)="08daa7edeec214d7105d510c5393f4f7721cb784f627da3ce7f4dbdd7f77a7493f50b47e12647a3b889d19ec587ce7d00375af14b9eec9f57abbbbefe08e05e5eb1ee6ce3e122822d40271769dcec5744e9d5aa6389abeefdc6c75a4", 0x5c, 0x4}])
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3174.491556] syz-executor.1: attempt to access beyond end of device
[ 3174.491556] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3174.492899] Buffer I/O error on dev loop1, logical block 10, lost async page write
23:38:18 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
mount$cgroup2(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x88000, &(0x7f0000000400)={[{@subsystem='cpuacct'}, {@memory_localevents}, {}, {@subsystem='net_prio'}, {@subsystem='devices'}, {@memory_localevents}, {}, {@subsystem='io'}, {@memory_localevents}]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0xc0000, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x402080, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:18 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c401, 0xa4)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc)
getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x140)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14)
readlinkat(r2, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/31, 0x1f)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
io_submit(0x0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3f, r2, &(0x7f0000000300)="6dd97e098aeaea9def49c7a4cd685250aaddfc68b157a294cec30850f714b72f1e17879837f78a863da9aa24a45b9c78f9f3fa126987a68ccdf9b0f9ce7468c789ff0c61c0ca1781f64ab19616c04ea9665d53bf50a36e85bc74fbc799c87d0ef51f77e602f0ceca1d801e", 0x6b, 0x570b}])

23:38:18 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:18 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4) (fail_nth: 2)

23:38:18 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x8000, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10904e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x8, 0x3)

23:38:18 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = memfd_secret(0x0)
getsockname$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e)
chdir(&(0x7f0000000100)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x2}, 0xffffffffffffffff, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000040)='./file0\x00', 0x6)
fstat(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
getresuid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)=<r4=>0x0)
syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x101, 0x1, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000, 0x7f}], 0x1904008, &(0x7f0000001400)={[{@overriderock}, {@uid={'uid', 0x3d, r2}}], [{@measure}, {@obj_role}, {@seclabel}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, '-\x9e)\x00'}}, {@smackfsroot}, {@euid_gt={'euid>', r4}}, {@func={'func', 0x3d, 'FILE_MMAP'}}]})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
fcntl$addseals(r1, 0x409, 0x3)

23:38:18 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = epoll_create(0x4)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0002000})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="008ab4b00100000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 3200.208022] loop1: detected capacity change from 0 to 40
[ 3200.218013] loop3: detected capacity change from 0 to 40
[ 3200.228284] loop6: detected capacity change from 0 to 40
23:38:18 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4) (fail_nth: 3)

[ 3200.386457] syz-executor.6: attempt to access beyond end of device
[ 3200.386457] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.387986] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3200.449107] syz-executor.1: attempt to access beyond end of device
[ 3200.449107] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3200.450869] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:38:18 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00')
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:38:18 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80000, &(0x7f0000000400)={'trans=unix,', {[{@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@afid={'afid', 0x3d, 0x1ff}}, {}, {@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@smackfstransmute}, {@fsname={'fsname', 0x3d, '(]{@'}}]}})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x7}}, './file0\x00'})
move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x40)

[ 3200.528165] syz-executor.1: attempt to access beyond end of device
[ 3200.528165] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3200.530537] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3200.612738] FAULT_INJECTION: forcing a failure.
[ 3200.612738] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3200.614368] CPU: 0 PID: 59583 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221208 #1
[ 3200.615476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3200.616571] Call Trace:
[ 3200.616947]  <TASK>
[ 3200.617274]  dump_stack_lvl+0x8f/0xb7
[ 3200.617831]  should_fail_ex.cold+0x5/0xa
[ 3200.618432]  strncpy_from_user+0x38/0x500
[ 3200.619028]  getname_flags.part.0+0x95/0x4f0
[ 3200.619678]  getname_flags+0x9e/0xf0
[ 3200.620231]  user_path_at_empty+0x2f/0x70
[ 3200.620862]  __x64_sys_umount+0xfc/0x190
[ 3200.621447]  ? __pfx___x64_sys_umount+0x10/0x10
[ 3200.622112]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3200.622831]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3200.623535]  do_syscall_64+0x3f/0x90
[ 3200.624078]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3200.624811] RIP: 0033:0x7fdd07981b19
[ 3200.625333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3200.627766] RSP: 002b:00007fdd04ef7188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 3200.628826] RAX: ffffffffffffffda RBX: 00007fdd07a94f60 RCX: 00007fdd07981b19
[ 3200.629805] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000140
[ 3200.630772] RBP: 00007fdd04ef71d0 R08: 0000000000000000 R09: 0000000000000000
[ 3200.631733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3200.632705] R13: 00007ffe85fbcb2f R14: 00007fdd04ef7300 R15: 0000000000022000
[ 3200.633706]  </TASK>
23:38:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6faa1eb8525f4511f477646feebff48d2fc1e0171372b0885be74e27e7660515aab92900000000"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r2, &(0x7f00000001c0)='./file0\x00', 0x345202, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x600240, 0x100)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x5476, 0x2)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:38:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3200.725513] loop6: detected capacity change from 0 to 40
23:38:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x20)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81000)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x5, 0x7, 0x6, 0x3f, 0x0, 0x10001, 0x41000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1ff, 0x939}, 0x10810, 0x0, 0x9, 0x8, 0x40, 0x80000000, 0x8000, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x28, 0x0, "704f5992eebeaa2888e479ca552ee155f638582a91ca97213ff4064a2e4c350cdc3f9f62a4c21970c8149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8)
syz_io_uring_setup(0x43d7, &(0x7f00000016c0)={0x0, 0xa9de, 0x2, 0x2, 0x101, 0x0, r2}, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000001c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x84, 0x81, 0x23, 0x5, 0x0, 0x0, 0x44060, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80000001, 0x2}, 0x0, 0x0, 0x35, 0x57571fc198d50e28, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x8, r2, 0x8)
r3 = dup(0xffffffffffffffff)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6)
write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="15"], 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3200.813036] loop3: detected capacity change from 0 to 40
[ 3200.948109] syz-executor.3: attempt to access beyond end of device
[ 3200.948109] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3200.949267] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3200.985538] syz-executor.6: attempt to access beyond end of device
[ 3200.985538] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3200.986552] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 3201.033267] syz-executor.6: attempt to access beyond end of device
[ 3201.033267] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3201.034981] Buffer I/O error on dev loop6, logical block 31, lost async page write
23:38:38 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
connect(r1, &(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000025c0)=ANY=[@ANYBLOB="010000000100000018000000db6650a96e41300000000099fb0c4411abb3b6b24382f2", @ANYRES32=<r2=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
openat$cgroup_subtree(r2, &(0x7f0000002580), 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
recvmmsg(r4, &(0x7f0000002400)=[{{&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/180, 0xb4}], 0x3, &(0x7f0000000540)=""/84, 0x54}, 0x200}, {{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)}, {&(0x7f0000000680)=""/138, 0x8a}], 0x2, &(0x7f0000000780)=""/81, 0x51}, 0x7}, {{&(0x7f0000000800)=@hci, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/15, 0xf}, {&(0x7f00000009c0)=""/47, 0x2f}, {&(0x7f0000000a00)=""/30, 0x1e}], 0x4, &(0x7f0000000a80)=""/25, 0x19}, 0x2}, {{&(0x7f0000000ac0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000b40)=""/141, 0x8d}, {&(0x7f0000000c00)=""/108, 0x6c}, {&(0x7f0000000c80)=""/211, 0xd3}, {&(0x7f0000000d80)=""/197, 0xc5}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/49, 0x31}], 0x6, &(0x7f0000001f40)=""/84, 0x54}, 0x1}, {{&(0x7f0000001fc0)=@hci, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002040)=""/211, 0xd3}, {&(0x7f0000002140)=""/38, 0x26}, {&(0x7f0000002180)=""/40, 0x28}, {&(0x7f00000021c0)=""/125, 0x7d}, {&(0x7f0000002240)=""/74, 0x4a}], 0x5, &(0x7f0000002340)=""/145, 0x91}, 0x7}], 0x5, 0x2001, &(0x7f0000002540)={0x77359400})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:38 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)

23:38:38 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
lseek(r0, 0x9, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x2010, r1, 0x8000000)
syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000380)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4000, @fd=r6, 0x786d6199, 0x10001, 0x7fff, 0x1b, 0x1, {0x3, r7}}, 0x3)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r8, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r1, &(0x7f0000000240)='./file0\x00', 0x2000, 0x2)
lremovexattr(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)=@known='system.posix_acl_access\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

23:38:38 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4) (fail_nth: 4)

23:38:38 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:38 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c401, 0xa4)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc)
getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:38 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3220.528952] loop6: detected capacity change from 0 to 40
[ 3220.537704] loop1: detected capacity change from 0 to 40
[ 3220.559041] FAULT_INJECTION: forcing a failure.
[ 3220.559041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3220.560665] CPU: 0 PID: 59816 Comm: syz-executor.5 Not tainted 6.1.0-rc8-next-20221208 #1
[ 3220.561774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3220.562853] Call Trace:
[ 3220.563211]  <TASK>
[ 3220.563538]  dump_stack_lvl+0x8f/0xb7
[ 3220.564080]  should_fail_ex.cold+0x5/0xa
[ 3220.564673]  _copy_to_user+0x30/0x1c0
[ 3220.565248]  simple_read_from_buffer+0xd0/0x170
[ 3220.565912]  proc_fail_nth_read+0x19c/0x230
[ 3220.566521]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3220.567198]  ? security_file_permission+0xb5/0xe0
[ 3220.567881]  vfs_read+0x2e1/0x9f0
[ 3220.568395]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3220.569095]  ? __pfx_vfs_read+0x10/0x10
[ 3220.569678]  ? __fget_files+0x270/0x450
[ 3220.570270]  ksys_read+0x12b/0x260
[ 3220.570790]  ? __pfx_ksys_read+0x10/0x10
[ 3220.571373]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3220.572079]  ? syscall_enter_from_user_mode+0x21/0x50
[ 3220.572802]  do_syscall_64+0x3f/0x90
[ 3220.573339]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 3220.574039] RIP: 0033:0x7fdd0793469c
[ 3220.574554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3220.577079] RSP: 002b:00007fdd04ef7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3220.578075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdd0793469c
[ 3220.579036] RDX: 000000000000000f RSI: 00007fdd04ef71e0 RDI: 0000000000000003
[ 3220.579941] RBP: 00007fdd04ef71d0 R08: 0000000000000000 R09: 0000000000000000
[ 3220.580861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3220.581846] R13: 00007ffe85fbcb2f R14: 00007fdd04ef7300 R15: 0000000000022000
[ 3220.582854]  </TASK>
[ 3220.626744] loop3: detected capacity change from 0 to 40
[ 3220.816439] syz-executor.1: attempt to access beyond end of device
[ 3220.816439] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3220.822451] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:38:39 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:38:39 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10000, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x100, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/55, 0x37)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
acct(&(0x7f00000002c0)='./file0\x00')
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xc100, 0x6d)

23:38:39 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:38:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:39 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3221.172016] kworker/u4:8: attempt to access beyond end of device
[ 3221.172016] loop6: rw=1, sector=92, nr_sectors = 4 limit=40
[ 3221.173527] Buffer I/O error on dev loop6, logical block 23, lost async page write
[ 3221.175043] kworker/u4:8: attempt to access beyond end of device
[ 3221.175043] loop6: rw=1, sector=100, nr_sectors = 4 limit=40
[ 3221.176657] Buffer I/O error on dev loop6, logical block 25, lost async page write
[ 3221.177980] kworker/u4:8: attempt to access beyond end of device
[ 3221.177980] loop6: rw=1, sector=104, nr_sectors = 24 limit=40
23:38:39 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = open_tree(r3, &(0x7f0000000180)='./file1\x00', 0x1000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r7 = epoll_create(0x4)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0002000})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000001c0)={<r9=>r5, 0x36, 0x800001f, 0x1010000})
r10 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000240), 0x2, 0x0)
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000003c0)={0x3, 0xffffffff7fffffff, 0x7, 0x0, 0x0, [{{r9}, 0x9}, {{r4}, 0x3}, {{r4}, 0xd}, {{r10}, 0x1}, {{}, 0x1}, {{r1}, 0x4}, {{r1}, 0x5}]})

[ 3221.188946] kworker/u4:8: attempt to access beyond end of device
[ 3221.188946] loop6: rw=1, sector=96, nr_sectors = 4 limit=40
[ 3221.190455] Buffer I/O error on dev loop6, logical block 24, lost async page write
23:38:39 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200000, 0x34)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3221.289461] Process accounting resumed
23:38:39 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/246, 0xf6, 0x0, 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3221.320955] loop1: detected capacity change from 0 to 40
23:38:39 executing program 6:
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd, 0x1f, &(0x7f00000003c0)="554cb66f5585206a8a5089a4357c9088b8f4fc6ec5147b74b365eeac4266a4a0957fbedaf121a05548647e4b7aee5d134c9aa5d6a3238726e993b50dee3c9216db81bce52d65e19811bcacc87c54cfd560e63fa0f9dd22775783b0154d923d1cdac84caa50a8e0d12f2f12003f26b6f8db00f0e37a16d9eba58d183c41ac41a2dbfe244c8e33cf7c7007b4ec0069fa579ca0df303421233588191d2d54664180fff663ed42d0e5bf", 0xa8, 0x3, 0x1}, 0x80000001)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x2, 0x80)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000180)={0x9, 0x68})
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'})
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3221.462849] loop6: detected capacity change from 0 to 40
[ 3221.520054] syz-executor.1: attempt to access beyond end of device
[ 3221.520054] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3221.521959] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3221.598550] syz-executor.1: attempt to access beyond end of device
[ 3221.598550] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3221.600896] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 3221.719433] syz-executor.6: attempt to access beyond end of device
[ 3221.719433] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3221.721364] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:38:54 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c401, 0xa4)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc)
getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:54 executing program 5:
mount$9p_xen(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80006, &(0x7f0000000200)={'trans=xen,', {[{@version_L}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x00p\x00'}}, {@fowner_gt={'fowner>', 0xee00}}]}})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)
r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x121000, 0x15)
openat(r0, &(0x7f0000000280)='./file0\x00', 0x180, 0x12c)

23:38:54 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:38:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000001c0)={0x584, r2, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x18, 0x45, "9c96ed2cf0fe051721b7a004608542af32ef9693"}, @NL80211_ATTR_TESTDATA={0xa2, 0x45, "b46434e45f17e4cf2e9de7abd6d03a8470155ba4e875fd1501c22c34214b3fe01229ec5978a4cd94aaaaf1a6988d635a254f35fea783c0e20d58ee721197ff161a11ab77648afe32acbb77a22291ce59d3adb66c31ffb1fa5deb99d99f663f6dcc79f91525f9476749000fd6030be2c40168a0d71acef0743400d9d10105ecbc7eb3e58501110e728ce8828dd5b140c2f145b8ba4405d7ec57dd40d6c6fb"}, @NL80211_ATTR_TESTDATA={0xd0, 0x45, "dab4c2f61ec32bd471505713998923a1fff0e9bc450a221a0112f33e3dcbcc3b39401daeedea499d56310a5ee3e1253a80a9b79d7d751136c5d91891fa170e01035493758c70f3e9414143af6cc3631b5ad34d7e83f187ed6a5ba5669d8aeacb076bc989eff1ec499faaf3d1c154f896e15a5e15bf6fdb22afd0a6de8f2d6c14d783d302bbfe22e3d15e7994680e32196a925f26cd639aee21c74a2e3a5fd2fab7f3aacce946c8d5d3597afc5bfa52f4b3b6a17de653c1854d5a13d2faa5411be2dbbb1dfbb789ab33742390"}, @NL80211_ATTR_TESTDATA={0xe8, 0x45, "c1cb82bb2a29e350747869d45e7913fe41a399c6b5735ed52e18c180bfd8287ff0431f042d26482b9042b06416653aaa88452b1e852a8cbec062cc532c2c580b75a7331182564c6f650c22acea3575c885ef5d9a43a1a284bd8de06955f2744f5a283a8413760dbb670ef53da0d232f773de0c40136a6b8de4c099592465d20ca5bc618b249d2a3f06070039061f2bbc695dc75e60be50413a95662459c15c0464e5b46329dff5706d52b3ba592adf912191ae8d664657790f6bbc4dd6c0b05157258c43294ef8f2bee38dcc96a62d07284d53bd619f06437eeb329be414a9eae3405fcc"}, @NL80211_ATTR_TESTDATA={0x33, 0x45, "6190deb20c9886cf1bceff985588de83e755492991dff1bddf27ecaaf7735435b9503256806e796c767462c3b646ab"}, @NL80211_ATTR_TESTDATA={0x100, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x98, 0x45, "46cf1162848a0175e6f99a9a8bf9a6a0cb95c45d0c20865a48427b62abdb04a499f0c01bf4a9cbe97f093182b42320089f9db9702b99b55c9065baa20936e76bf47ad16bcbd6d6a79d3cd33c97034509d681a5abcb1ad4a702bb009f17d7f3c6e1ea3ee35b14b8902dbd6a13328e614f0fe84178a49826ea3ac47e777e0b8f3c35d502e2ac05548e764c7b5950ce9504d649ab8a"}, @NL80211_ATTR_TESTDATA={0xe4, 0x45, "b625d4e25ca2edd7e3740f3b770dc48ed5aa27d046753bdf1a292fb90431a463a83022e6ba01276fbb1d56a99743a264ac0f12ade3d84c0a9e99fb0d35400f40d0dfc3f0e45828375b2b0a1fc8a8be73dd8306512efc5cd2a53d4828786722bb87151b72048a6ef0e55004b0c8539589da9397a4112ce80331b069c808eda881deaf4375dde70097a474be4618b5bbd8202d6f4361d3bf68ef59707c884fd1d4535a139314dee8c78a64679feeeb16e197112277af53e168dc94221181706f3c0fd9396be594065eba6bb629061cd070b324023d8990c577918d9c72991c8094"}, @NL80211_ATTR_TESTDATA={0x4a, 0x45, "7fd4e1650970c5b3c6002dd09d1e7d4de478bd8844db39bb0339d0805db60b50f40db5f031aa27c91227d00d2857a543b3aae9cc9c5db8d0617286b98331b4113189f6f390b6"}]}, 0x584}, 0x1, 0x0, 0x0, 0x41}, 0x80)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x25d042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x4, 0x5, 0x8, 0x100000001})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:38:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

23:38:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3235.800553] loop6: detected capacity change from 0 to 40
[ 3235.834672] loop3: detected capacity change from 0 to 40
[ 3235.847940] loop1: detected capacity change from 0 to 40
23:38:54 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x4, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:38:54 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)
lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180))

23:38:54 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:38:54 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x9e3814, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3236.005241] syz-executor.6: attempt to access beyond end of device
[ 3236.005241] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3236.006265] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3236.043349] syz-executor.1: attempt to access beyond end of device
[ 3236.043349] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3236.044843] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3236.068929] syz-executor.6: attempt to access beyond end of device
[ 3236.068929] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3236.070634] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:38:54 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x24)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:38:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3236.299239] loop6: detected capacity change from 0 to 40
[ 3236.425982] syz-executor.6: attempt to access beyond end of device
[ 3236.425982] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3236.426994] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3236.451541] syz-executor.6: attempt to access beyond end of device
[ 3236.451541] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3236.452500] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:39:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect(r3, &(0x7f00000003c0)=@caif=@dgm={0x25, 0xa71, 0x1f}, 0x80)
setresuid(0x0, r2, 0x0)
mount$9p_xen(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=xen,', {[{@aname={'aname', 0x3d, 'vfat\x00'}}, {@nodevmap}], [{@euid_gt={'euid>', r2}}]}})
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
openat(r5, &(0x7f0000000000)='./file1\x00', 0x80300, 0x81)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:14 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan3\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xec, r1, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x70, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x20}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000040))
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x7, 0x3, &(0x7f0000001540)=[{&(0x7f00000003c0)="be439f7327491c3391404507eb1e8059e6a1909c641078ff934228149578bc211f637851dc51f1d7f6d3ba14f264f8b23f64f9ad03679cf518c38f25ecf77445dd232133f3d1eb8a02b22cef4dc4a3d3168faf903976a3f6c0bb19092c25a1ee76561ac26851d53bb2fdcf4021bdd7e41fc4fc74eea82b6aff327328a463fe0b3cb3ae80ea703c53a771485f56979ae1e242075d660cbbb1e6a3e91b4cc3828ad8d8946f933f5d53", 0xa8, 0x10000}, {&(0x7f0000000480)="f1d379dfdf9586da56e22f4d2e9ae845432cae394da037199198d13a6525319ecd08026fcd7b1d7f7eed961c442a4ebefcf540c06fd738c2636eb2ab5080b79b526f7b9f065f8205b2abc6ebf10c5feac6c8c587718d39e472628c0442f178f5651530bc9e054e239bc3c038e2f5be2cbd1afc1c573ba7cf0722cc95dfc99bd048f0044786334afaf8b7f0c1c8169f92162fe49f69d55944280e33aed824", 0x9e, 0x7}, {&(0x7f0000000540)="e0e9f80d5dc41d2c6cf81fccff051559e12e464a5f4e86bdad5ae272c5e0d7e4c689a1a0aa12a6c65d6c63dd9eed958efd73cf7d7eed1602764aa6e18952a4719725e75d7e369ce8ad75639f2735c347a4cc6d926b666f1c99e37018798e4cb5b7b5d745681c9c81f7cfafea9c2321bfb1c4b5ed572256042675e83527a6c5123845c432cdda7e7c07002fc21997353f4aeb24336aee00179cc6ee9e2c2a61e4a56052df90c318edd080adff3fb24b85c68e82c0aae61d85430eee75c567fc6cf094309700ddcfdd053cf9a73ee054ba0d7b8c0f83ffe30ce95026af071b276d5a472c51cdd974ff9719bfb04fcf810c89d4d3863b91d4d828e1f207c93386d5a0ba9ba030c9156580e213e5231f94537772293d1449e29d855299af6964158e5974706e5ff4c743decdbd5ac4a131c8bcbd5d5bb49c769f789dd05c8aa254318316365fa36be58a47546dc7157d2390fc9ad7134dccfa3fbbc405123061ac663e6588879c988c110b0f3a8bdbe2e022f169b3a6858ad973651793ac5e8acb4c2ab1f72816fb85540f632997b611170166e0b70d912471185dea4237207fa3f1f0308f0e4eb7b182a1749e830ebf69be3839b321e8d59e0dd36f7280781e92e00ba0e464f0f814b86d89521a23feb59ca30a25c9693b42f40ea40902aaaeaed0d88dfa7aa69f440d5aa84c1cefc88bffa61caa9b037929f5b6336c2e2cefd5e18e8f867f4d2682e13812a7bacd50a5140e852dfd2c350b06dd76472815e0be9aa29a0dedfe4d2bd85cb110b3ac85bc5135287b933bf5d390dfaf16ae5f0c286513b6b6144c76658d3e0ab3ff412a0b2a8ac73e45925143095a8d0466124cc0047af4a735d86af86737db91041746bb8d9484b0e7d623563a6bed82ff6cb2c6a7ab920a5db82b5037dfc9f43299f418c8c0f92f75162cfdfc9fb645b2ea5b83ae264d3d36432e0d1f8dc1896a6ce3c748be5dc3fb75bed44b66118c18115a7520740f7f1c3d845796dd835a0ea399de43a5c18e3b8646fc3b2e56be7ac1e810ede2683cf3a3e7b74af43d67239ae0edf8bcfdc16568a6b7e1d44846784651ac305ff8fb3a5e1c66fa756332abe177749b6f104f31656bacc6f026886c22c9bd95a83f1d2edafc131143d71d86096a9bcb152faa91ede2591528836117ced4f31698627a496cb0f46baa9e60667de118b23ae63df1a6204e8d6e30127c32c7fface426676f0ea8b7c4ec6d722785a69f3876a432bc7fbb087ebad08afa692dd4140205f30fdc9d663407294846a19e7b836408eebefa2fcac8d5af267fd4ee259bdff758d2e1fbb744500c7e5a2f0eeb8049fe608a033e6dc9e393d3b9cb194a05ad46e4609301cfdf5aa09d68faf17c668a27b604a717f7bdad712fb9986ee608f59ceaa4370c9a0c9e57ee758cd9ea76cd9976ce1815001534377588a23ed1dd294c0b101c1a29585573cb5437b00fe56a1319e410fd2a3a6ae7e4aaca73587f3c54753f2a79231a504341ac6bd765619fce0987691df021b54dd9c734b83a735910a9503132f0b4bd749f51df5ad3993242fd7ec296a5aa9f16cd8c5552c2a741c0658a18290287a015ebdfcdd7dc0e31122394a519af943a34968707444042d284923109aa936430ca843780257e0a3d7e982f04b02d45e41ed7a753ca038e3a1a1d3a345fbc09d388af67aadf19b0631d3ceb24240512d1547390a6f0126575f03339f5fba6a4a47597ebff87a7df8a5d2dba83e93b3acddc9f091ac19828f994846e30f84fd786a2a3c9adb137a702241200d1340839c3e30ad8d0108810c30bd0bafc25348ed6bda1e26b6a868f3aed4781cef1658f6ae28bddafacd183f4e9305768679407bdc4f68844a9b7fe41ca90fc8626b452710ebd03947cc447c9dcc1ad6e2067e55f1d7074a821b1f7701a7512f7e813c4fc04ece6a28b8a33922d7d5c9b28911a0ed1c1ae04c9ee31b791f2caf5c5f0f2ae28820da88a6d844e4f40fe90b82af36c58ba9ff1a21056717d157f1363c0bce891e1530b743b166cb8c705dff91bd7e4448454896b7c3d75770cc45b83ed2a3ae505e22faa8cfdd7cb8d4a93dbe9f180437cf93746298809a7acb2f4fd7a60752f700119d39ca9e47d6d0957e91e4363162341a79544fd31e7537e9efbc02487ad2278b8d34c169e5af7f4fc88785946413d3ae7bb90d10e2496d3f869ee1821aa776dfbb66f33d61f4ddb829dd1c02f074a86cf2c135babaaeed76f60254279ed7e8ff62ab1ac9a2b6fc708203352a95f8449dc7ff292e140aad9c26f359c1cd4a513b279feda437c2a922c20406937c8582497b270f446ac118d5ac562fb02f37c8c225c492b862cd01c4419df4036efd4ede40eeb0d5358d6a91b81d9e0404520ee572c1669671acd46b203177d3187e2c0addf0e6e586a36899c84a4bbeeb1d0daa74b12bdfedb0225ed5e0b8d4025c5d2b90cb9be10fa5f32644370232516cb843d7888fc0c9bd8b65d8862aa2bf967f02697ddda277dad71b9852f03613bbe760bab247f184e2288de5a0494ad3615cc58d184b034db451b19019b49aebad2e42af92105c1425e8bce9f0e938eb99676f4a295f99103dad0c5bdd89e9dcf11654768540cf02f191ecfbf38ace41cb62c402ed2b3d1ad2b40fb115af636b3385459648fb69eb1faa6fff7fd0c59beb6107d380939c78bfdf88492b0ab4cc2a508d0683665dd77047af5efcd20c0f97bc035d95a8af616285643f86b514ff3f36969a956b5e9140645ca836638fdb1bac80f08248783dc2cc52fc6c814811d6e844c3712a09cd6c6d1b22d9fb28cb060d4a4967dca4ef1a6f8eadd51b9b6c3336d5d2790070d50f8f0ea8e36dc7cdfb6bd274dcff979211bec1a1d444a3b0c4c736462ae4992ef828c6bd55d1347e69047e287e99af624127e0bcc853f7ab2184576e4cf5b7cc125d9f702f21b8d2ab3092a53812bac6ef4528949ff83c2febaaf49914c7a77fe0d32bae4013cb5c011b8fb8c6586f443aeb71990e3bf5907956f008d44700ec8a127c9746aa13874ed1f10ea359edb3484f310ee101fb6d12bb2c7ed6cdf5914667f965552e0b297497534e4c4e110cb4e73db1a31460d3f8872ebe786f5b665dd3177774b15b0d33dd0e85c3c37f594eec9b4001f830da2c56c410ee36703ad6f59e67030ffdcda420537bd2c594dad6321971429a2a5083c8231edc103f71f0dea11ca1d87a98ab1177c4935e360e3fa1471c46f77229cce0ee93eb636144768cef0329b75d21ecdfa5273d007b4c8791f110f904bc517c03893f445e775f94900dc1759c6653f85d2512fa2df56dbf3891c6826183258aff082b2508dc7852552daecf32b7d29eee146276b73f72570c7b7eae7627873371c631f0c7dd417cb8c121e2591f56ed3ed40843d794b53e4ba2964bd185b0a58181932eff7e139c053921e819ed84c4720545ce7fde333e52c3d6ff4efb0c3fc91dd89f0b41029ea1e3313c61663c46bc8a0bd9b57a3e2a5d842d26d82c9e92797347813dae8f03bedc0b20c7941c4b342a44a48aaf201a5f3eb961b7cc282e3136d6d220ad0512859106434ea9b21c8715c8c78b7191f7651e27d1b6c7b9cf41bc1d2ff1ff86629c497d7fd6c29dc64dd170dc53912410c9894b8461d9340a21a3265136cdd7a9a2b4cb1c11dfb25ec64ce10bf94d91bf134dd2dd0108a98ade3fae237b0304fccde185244a2f7e915d73d51acc9afe3713f6f1e362e38ca9d5343f471fd637ab1db9d14fd2e4908ba19a44cba02a2e795d758985e9f430eb349d210e0b93a712ddbbd1b804b430e14836c9a5d9c66d58b4a9c92a1449c93fb91b1a0d65ffbf165a0103eaca9b0c17cf81d420fe5f8bfe104af16d2201df9336b55e52da91f450a6e4cac74a5f6b60938816a17ef0e6de34bdcd1d1c24a6c767a30102aa2bf59813c483e77ce140bf717f7324e32d61fc5047342ab42292393b459e2812f1df751edc82e92cc40b96ddd77fd09f5b3e72fddc4b75b0a0eee48a5ecfa75c8e7829af208c5b723f8d545dad75ebe601a409c32407654672638a81d529014b6b4e70603fefbb57a9b3bb02a2d2fc597932b633da287c9663ec5f8ff15f487c11018b161710b94094c05c4efc613fb25c6dc99c3ea2e60c34609404d0eea342ffcebe772eeb25ec3dfc9e0047974ef36952efb4943e333b3a3f2ff9635bc2825218b2866368fbd1e6e8a7442b81d14ce846bb81d8af8a1241ce7dee01729c0e4fcc34bf322d4a8c88ef1e674f0925e79fd03ff33d30ac4cfb04fcf226a7061f828cfc075695d6faa0f918ccbd6170d0dd5a585bfab3d2d2792119cd4a1e8e65f5cc03df8173a580f0694eb3471f43a2411c2d094c036b05bb56850a1558bd7f2e5eed5f090d1309ccfc231edf035a568ca8d75868923427aa6dbe9b347f9688eb2429aac977560ef89efa904a9cb472dd62a38e980196831178f5671fc2c4ebefebdeffb149ff3f243a2a30f0dda2e9a021cb0461ab8282849ef1ff654da7fd9a06108e675ac4b5be8336e0f5ecd7f0d4bed20c5a0bfc3e85b8daddae6b0252085610c139c88852b9db9c93de7e285d80893cb97856dbef5e90bdeb7372a1a7849364656318726ea2cd700832dd22c62cb929aa48b8074ebd6423ab984d04c99ea2adfbd4f545608dec4d23cbdc80cc7ceb4195d070ba20b3d0b233e6cad7609fe3b4596fd57e6dde80e09ba17b1cdde1e3dc4ed0fea5a76083900411a9f9d596a1b311d4034dca612bfa0d20c6d7ae65fc839b1c161937b08453c61fe1ad765c24bc9bdc400f156869df3e0e5962c3eae77460eef42b789131ca302e72bfa64242717011713e5a8ea846cce6e062102a62e9ab4b26faa02e18b48900a82a3151c9c0fb80cd1db21fe8ec9f754133b991a3c93485cc91471939150c19f728333f452f11ec056395e240bb7da09ac48b94be99eaf9b66efc4f195b9de316ea396f0baf53ca319760bfaadfba4ca3350e154e2f93184924a6df46d240f6e6102294eb3058957ea4454b5b647b32e7306e2c8e57423a08207fafade5a08f8e6ed2e53f61b50edc42a1096b24ddc5b817bfa75b758cf8e9f7c03c4c7ef21e4d895caa26a31e7c2b7b2e967efadf0d479189a5d6a4e052705048cf6e2e20b436e65a3b5203da30f300ca30d951113790c28ad0b480a75faf2278367227294c9cbf588ffec705e484851bd1eff5114f621500c27f5bbd837c86f9b103b26c25945f807f07b1e2b85e30c79c4127938c6b0ea6da2912398dc4e4c81fce74211f0bda1eddcb4e92abdbcb99d603d96fa8ce79f5a5d2d3b7237298751ee7a7cb407586b46763be4b34f8e59326695a4c6b95f09a5b3a1010ff5cc41bffb1aa44f7f4a0cf0435cc96fddd0ed33a0627c82dded6f4e176e78a6481ad39fe262912d6453948c43d4f910ac26aea4b3c41b41ea7ebef6c21e8ea0bdabb9131c7569840676f9c530bc0d8a57b58aa8dac54a1cf3113a615d3c0fbd6837a3892ba2a831c0201203c53d279d597e0de250c81ea0d350353457cf7e44aeb13c4aae30d47ec1ef1527e950de08cde1cf109270dd8a4597aa14c6c3d97f48a3be5af61e406bb4947bba275912fc0c136e825ab10d322fd42b58cf2a2ddf8d195e15bf017477539e16acb86b4fe798cea4d21fefc827a71dfb506523c2d96d7446ccba04407d26874cc481752e53861cd171d55b49eaba295a117411ef9723fa913abeaf25af485c742542c25a0de1d0ed404ec511f962bae4262dd6a52638f14181c4f1231bf4612164", 0x1000, 0x7fffffff}], 0x20400, &(0x7f00000015c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@shortname_mixed}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@audit}, {@euid_lt={'euid<', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@seclabel}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

23:39:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:14 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c401, 0xa4)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc)
getsockopt$netlink(r2, 0x10e, 0x9, 0x0, &(0x7f0000000000))
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r4, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3255.896369] loop6: detected capacity change from 0 to 40
23:39:14 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000280)=""/170, 0xaa}, {&(0x7f0000000340)=""/189, 0xbd}], 0x3, &(0x7f0000000400)=""/140, 0x8c}, 0x5}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/208, 0xd0}, 0x4}], 0x2, 0x2001, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:14 executing program 5:
fstat(0xffffffffffffffff, &(0x7f00000002c0))
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
mknod(&(0x7f0000000280)='./file0\x00', 0x8000, 0x0)
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x10102, 0x12, 0x4}, 0x18)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901b, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
acct(&(0x7f0000000240)='./file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:39:14 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x20, 0xfffffabb)
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r2, r0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="09d53f7517428140cd4b91fdf0cc7e86d63621a4a28fefed4989e0c0023bbc3c468ad33a5414912ca825a0e4344af782caa4683dba95162d2e982032343bf54266b812e77e7245f9dd883f290000000000000000", @ANYRES32=r0, @ANYRESHEX=0x0])
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
unlink(&(0x7f0000000000)='./file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r5, r3)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000180))

[ 3255.923493] Process accounting resumed
[ 3255.936077] loop3: detected capacity change from 0 to 40
[ 3255.955975] Process accounting resumed
23:39:14 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x24, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3255.962101] loop1: detected capacity change from 0 to 40
23:39:14 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x440005, &(0x7f0000000240)={'trans=unix,', {[{@uname={'uname', 0x3d, '.-:*@^/{-'}}, {@posixacl}, {@access_client}, {@noextend}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r0}}, {@smackfsdef}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}]}})
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3256.138138] syz-executor.3: attempt to access beyond end of device
[ 3256.138138] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3256.139230] Buffer I/O error on dev loop3, logical block 10, lost async page write
23:39:14 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000100)=0x6)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3256.198499] syz-executor.1: attempt to access beyond end of device
[ 3256.198499] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3256.201092] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:39:14 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0xa0, &(0x7f00000001c0)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x20}}, {@posixacl}, {@aname}], [{@appraise}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3256.285123] syz-executor.6: attempt to access beyond end of device
[ 3256.285123] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3256.287022] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3256.298034] syz-executor.1: attempt to access beyond end of device
[ 3256.298034] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
23:39:14 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/222, 0xde}, {&(0x7f0000000280)=""/170, 0xaa}, {&(0x7f0000000340)=""/189, 0xbd}], 0x3, &(0x7f0000000400)=""/140, 0x8c}, 0x5}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/208, 0xd0}, 0x4}], 0x2, 0x2001, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3256.299691] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:39:14 executing program 0:
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:14 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x303000, 0xdf)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
r6 = getegid()
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000001000a000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="08000549", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="10000700000000002000040000000000"], 0x84, 0x2)
fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}], {0x4, 0x1}, [{0x8, 0x2, r6}, {0x8, 0x4, r7}, {0x8, 0x3, 0xee01}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}], {0x10, 0x416f14bd4c3edc06}, {0x20, 0x3}}, 0x6c, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'})
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'vcan0\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x90e0, 0x6, 0x3ff, 0x1c7, 0x2, 0x7, 0x9, 0x2, 0x1, 0x3, 0x2, 0xfffffffc, 0x5, 0x4, 0xffffff7e, 0x5, 0x8, 0x1ff, 0x4000000, 0x1, 0x2, 0x200, 0x1, 0x10000, 0x2d8, 0xa40, 0x6, 0x8, 0x7ff, 0x2, 0x3f, 0xb2, 0xffffffff, 0x3, 0x5, 0x2, 0x10001, 0x8001, 0x2, 0x6, 0x8, 0x4, 0x4, 0x8, 0x4, 0x9, 0x100, 0x4, 0xfffffffb, 0x6, 0xea, 0x2, 0x3f, 0x4, 0x3f, 0x69ca, 0xfffff801, 0x4, 0xff8, 0x11, 0x7d, 0x80000000, 0x5, 0x0, 0x8000, 0x7c, 0x1, 0x80000000, 0x0, 0x80, 0x3, 0x1, 0x0, 0x7, 0x1, 0x3, 0x8, 0x4, 0x3, 0x4, 0x4, 0x3, 0x3, 0x6, 0x3ff, 0x2, 0x5, 0x5, 0xf28a, 0x7, 0x81, 0x2, 0xe241, 0x9, 0x3f, 0x4, 0xfd, 0x4, 0x60000000, 0x73, 0x7, 0x101, 0x8000, 0x5, 0x3, 0xf1b, 0x2, 0x7fff, 0x1, 0x1, 0x7ff, 0xc57a, 0x1, 0x6, 0x7, 0x9, 0xb6e, 0x10000, 0x9, 0x9, 0x7bee, 0x8, 0x0, 0x3, 0xd1c7, 0x6b, 0x4], "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"}})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x8, 0x1, 0x4, 0x6, 0x0, 0x9, 0x20040, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x140, 0x0, 0xa008, 0x6, 0x32, 0x1, 0x4, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3256.560241] loop6: detected capacity change from 0 to 40
[ 3256.610926] syz-executor.6: attempt to access beyond end of device
[ 3256.610926] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3256.612175] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:39:31 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x8, 0x0, 0x80000001}, 0x0, 0xa, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:31 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0)={{0x10b, 0x0, 0x20, 0x2c4, 0x1d8, 0xa87a, 0x2d6, 0x7}, "5ed070e69c1d505b897a7e96b9172682a873b5fdb874f3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa37)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:31 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = open_tree(r3, &(0x7f0000000180)='./file1\x00', 0x1000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r7 = epoll_create(0x4)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0002000})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000001c0)={<r9=>r5, 0x36, 0x800001f, 0x1010000})
r10 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000240), 0x2, 0x0)
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000003c0)={0x3, 0xffffffff7fffffff, 0x7, 0x0, 0x0, [{{r9}, 0x9}, {{r4}, 0x3}, {{r4}, 0xd}, {{r10}, 0x1}, {{}, 0x1}, {{r1}, 0x4}, {{r1}, 0x5}]})

[ 3273.117032] loop3: detected capacity change from 0 to 40
23:39:31 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x8000, 0x9da)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000540)=""/174, 0xae, 0x40012021, &(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)
stat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f0000000340)=[{&(0x7f0000000180)="c9e4ba1f41", 0x5, 0x7}, {&(0x7f00000001c0)="6ec1ac065fd08ebf7db0eb4ecb0e797552178408a71b8ed4a74c5893068229cff41ed275b9aac1860c61fb008176c1d9790bc44b5da9caf4912b28fbdb56d734a52b2b36cf3f2c495a922b0f5b0be1045b8435a120f4a91f93dd3215625a88e6b67e75892d", 0x65, 0x70000000000}, {&(0x7f0000000240)="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", 0xfb, 0x1}], 0x8000, &(0x7f00000003c0)={[{@journal_dev}, {@noquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@nolazytime}, {@jqfmt_vfsv0}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@euid_gt={'euid>', r0}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@hash}, {@obj_role={'obj_role', 0x3d, '%'}}, {@smackfsdef}]})
unlink(&(0x7f0000000500)='./file0\x00')
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
setresuid(r0, r0, r1)

23:39:31 executing program 1:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000180)=0x80, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000300)=@fragment={0x5c, 0x0, 0x5, 0x0, 0x0, 0x18, 0x66}, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = epoll_create(0x0)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r6, r4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x2, 0x5f, {}, 0x2d, 0x56adcec6524fae71, 0x1, {0x0, 0x0, r4}}, 0x80)
setxattr$security_ima(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=@ng={0x4, 0xd, "cba3172698239eba"}, 0xa, 0x1)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:31 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400400, 0x16)

23:39:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x20200, 0x100)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000003c0)="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")

[ 3273.178801] loop6: detected capacity change from 0 to 40
23:39:31 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
rmdir(&(0x7f0000000000)='./file0\x00')

23:39:31 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x25, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3273.323177] syz-executor.3: attempt to access beyond end of device
[ 3273.323177] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3273.324283] Buffer I/O error on dev loop3, logical block 10, lost async page write
23:39:31 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'osx.', '\x00'}, &(0x7f00000002c0)='[]^-^*\\)\x83@)-\'\x00', 0xe, 0x5)
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0/file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:39:31 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, r1, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
mknod(&(0x7f0000008d80)='./file0\x00', 0xe000, 0x2)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:31 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = open_tree(r3, &(0x7f0000000180)='./file1\x00', 0x1000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r7 = epoll_create(0x4)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0002000})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000001c0)={<r9=>r5, 0x36, 0x800001f, 0x1010000})
r10 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000240), 0x2, 0x0)
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000003c0)={0x3, 0xffffffff7fffffff, 0x7, 0x0, 0x0, [{{r9}, 0x9}, {{r4}, 0x3}, {{r4}, 0xd}, {{r10}, 0x1}, {{}, 0x1}, {{r1}, 0x4}, {{r1}, 0x5}]})

[ 3273.588531] loop3: detected capacity change from 0 to 40
[ 3273.615085] syz-executor.6: attempt to access beyond end of device
[ 3273.615085] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3273.616925] Buffer I/O error on dev loop6, logical block 10, lost async page write
23:39:31 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
acct(&(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:32 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:32 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x850000, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa000, 0x1)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)
chmod(&(0x7f0000000000)='./file0\x00', 0x46)

[ 3273.690551] Process accounting resumed
23:39:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000003c0)="601c6d6b646f7366d8a089eed44017262b00080101000440002000f801a2709e1852daf345925db565901c35d2e3435745b10a356ec55d39bbeb80f015bf6c5634ac94912dbfe0c5c482121c1418551a4f6dc84e212bcb2b75b89c0efc77910f2ef3a675bab7bb859576b785de3055e7552d55252535b6af654f291b31217393b4cc55df1f04dc86fbb6edacf6f268e377b4854dc8a663141ca7cd586230a137d2d7311e6c0ae3f0ab5898859b8ceb2aacc28c89c192ce8126cd140e3d05d7081ed6", 0xc2}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r2, &(0x7f0000000040)='./file1\x00', 0x40042, 0x180)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:32 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5c901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
truncate(&(0x7f0000000180)='./file0\x00', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
fcntl$getownex(r1, 0x10, &(0x7f0000000040))
read$ptp(r0, &(0x7f00000001c0)=""/19, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3274.091923] loop6: detected capacity change from 0 to 40
23:39:32 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000060000000000000000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00le0\x00\x00\x00\x00\x00'])
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:39:32 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:32 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x100}}, './file0\x00'})
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0)
move_mount(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f00000001c0)='./file0/file0\x00', 0x57)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x18008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3ff}, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

[ 3274.246251] syz-executor.6: attempt to access beyond end of device
[ 3274.246251] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3274.247328] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3274.250406] loop1: detected capacity change from 0 to 40
[ 3274.266425] syz-executor.6: attempt to access beyond end of device
[ 3274.266425] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3274.267400] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3274.286365] syz-executor.1: attempt to access beyond end of device
[ 3274.286365] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3274.287229] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3274.312710] syz-executor.1: attempt to access beyond end of device
[ 3274.312710] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3274.313559] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:39:51 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = open_tree(r3, &(0x7f0000000180)='./file1\x00', 0x1000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r1, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r7 = epoll_create(0x4)
r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0002000})
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000001c0)={<r9=>r5, 0x36, 0x800001f, 0x1010000})
r10 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000240), 0x2, 0x0)
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000003c0)={0x3, 0xffffffff7fffffff, 0x7, 0x0, 0x0, [{{r9}, 0x9}, {{r4}, 0x3}, {{r4}, 0xd}, {{r10}, 0x1}, {{}, 0x1}, {{r1}, 0x4}, {{r1}, 0x5}]})

23:39:51 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x6, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r1, {0x0, 0xffffffffffffffff}}, './file0/file0\x00'})
r4 = epoll_create(0x4)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0002000})
r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r6, r4)
io_submit(0x0, 0x3, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000040)="9e", 0x1, 0x1, 0x0, 0x3, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000003c0)="c661b47568c53c7e2922cd42d827b24ca406b37b9a066ce178eee4ca68147073e543ddceaac9c2e0cfc503adb3866354a65e6c5fc47331023a933833b7e4962eae265720265f4e2761a53b8f37d056b4062ef377239161ede9b87c5aa34328ad269240ed15a91cf001b16a3a47ddc623e8ec14fe189fcd55bb378e6ece3e4c156838f7d9b5a2b99d65a60304ba5a47a4f0b8a0ea6b09377ba9a33a7a89ee4c99d9e1bc377cec8ae94b87ce598df55f29559b4be1879bcfc863bd8e873a79c80488cbb1655064e9f44a189d213ac6fa1693a0b24b504efbfd49d0d01621dee02dbe1b3727c8", 0xe5, 0x1, 0x0, 0x1, r3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x793a, r6, &(0x7f00000004c0)="6b7abb7728c93aaf1a23d5a790c1df6118bdd796df43276e72ef71bd3be6bed3dbda9c464ec20491ffc3b19ee46889dceebcd8a1d44027da3a5dd6b6f8ca84d0835421b5c8a93ce7e603cd96e84a3236d4d00b4bb9d0d4ca17a6d45a9d91f883761da1763a4b23e2f2d061e0f3d32c2f7ef78bf2dbf47f3f29ea7449c65aaed858ad3a29c60b1954f40bb0fc89a183d8f968fad41ebf687f7935e277098ab75e42faa5d5848343628359000b8dbcc64eea89e0ca1a19f6b8d648111aec102dd870a2d5061fe2ae7dceeea95f72a91acbfce8000617cbc6e8368dc30655116061", 0xe0, 0x6, 0x0, 0xdbed207453bba8e6, r0}])
sendfile(r1, r0, 0x0, 0xfffffdef)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r7, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:51 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f0000000040)='./file1\x00', 0x2000, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

23:39:51 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)

23:39:51 executing program 5:
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @multicast1}})
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0xfffffffe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x4008850)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:39:51 executing program 1:
r0 = epoll_create(0x4)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0002000})
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180))
r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b000801010004c0002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x8, 0x80030, r2, 0xf1ce1000)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r5, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:39:51 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000000))
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0xc0541, 0x42)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000180))
r3 = epoll_create(0x4)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0002000})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0)
r9 = dup2(r0, r4)
sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0xd8, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x4000081)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fff, 0x3b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000)

[ 3293.448009] loop6: detected capacity change from 0 to 40
[ 3293.450429] loop3: detected capacity change from 0 to 40
[ 3293.465508] loop1: detected capacity change from 0 to 40
[ 3293.552661] syz-executor.1: attempt to access beyond end of device
[ 3293.552661] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.554549] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 3293.649413] syz-executor.1: attempt to access beyond end of device
[ 3293.649413] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 3293.651333] Buffer I/O error on dev loop1, logical block 31, lost async page write
23:39:52 executing program 4:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x200282, 0x102)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4)
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x3015002, 0xfffffffffffffffd)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:39:52 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40080, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f00000000c0)='$#\x00', &(0x7f0000000180)='./file0\x00', r1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/auth_rpcgss', 0x800, 0x4)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000240)='),-\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x2)
unlink(&(0x7f00000002c0)='./file0\x00')
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:39:52 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000300)={'trans=unix,', {[{@mmap}, {@noextend}, {@cachetag={'cachetag', 0x3d, '%-#'}}], [{@fowner_gt={'fowner>', r0}}, {@uid_gt={'uid>', 0xee01}}, {@subj_type={'subj_type', 0x3d, '!'}}, {@fowner_gt={'fowner>', 0xee00}}, {@subj_role}]}})
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3293.969428] syz-executor.6: attempt to access beyond end of device
[ 3293.969428] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.971551] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3293.990405] syz-executor.3: attempt to access beyond end of device
[ 3293.990405] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3293.992204] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3294.000976] 9pnet_fd: p9_fd_create_unix (63058): problem connecting socket: ./file0: -111
[ 3294.039284] syz-executor.6: attempt to access beyond end of device
[ 3294.039284] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3294.041142] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3294.055144] 9pnet_fd: p9_fd_create_unix (63076): problem connecting socket: ./file0: -111
23:40:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r2, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:40:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a172626ea51ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xec465000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
openat(r1, &(0x7f0000000240)='./file0\x00', 0x2000, 0x2)
lremovexattr(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)=@known='system.posix_acl_access\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

23:40:09 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x41a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:40:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x410, &(0x7f0000000140)=ANY=[])
lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="75734f912e5c5c2c5d5b5e272a2f2c2baa9b43e178a51097068e92009f66ea6dd0eeb9051285a11c2288770b97402aa84a0a26a11461b19079673c6f479c05b8b558151a9114385ec24cc1800257a1bdea55259c92766a94cde2593d60a82c44904d4d07e73f8f480d2b3c0492ee5a1726ba1046f4b988124cb3d22f07e87dc2a46b6ffafb"], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0xec465000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
write$bt_hci(0xffffffffffffffff, 0x0, 0x13)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x6500, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
flistxattr(0xffffffffffffffff, &(0x7f0000000500)=""/214, 0xd6)
setresuid(0x0, r2, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setresuid(0x0, r3, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x80, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@version_u}, {@cache_loose}, {@fscache}, {@cache_none}, {@cache_none}, {@cachetag={'cachetag', 0x3d, '/&*#*'}}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@dont_appraise}]}})
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
openat(r4, &(0x7f0000000180)='./file2\x00', 0x0, 0xf5)

23:40:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:40:09 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006900)=[{{&(0x7f0000000180)=@llc={0x1a, 0x335, 0x8, 0x0, 0x0, 0x3, @broadcast}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="b1c8825e2bb40dfdbfaee473a1f5567b55d348bdf1231efebc7c2404af88cbf0f899caa89a8857900031a34eace6607575d8b9ebea1ccf24d9b5aef86a842c793e4a851c34f086f882dd4854603b274856a89a25048191619c577d1d36482b38a6ce0eecaabf31426777878226e7333cd1bd657c77a9cff929baf3e62993a200653063f143986edc95a3f173496ebb9b16a3d28727ad2a77d066c8cad25d662dc85454511256a430f0085130a20330076595044c74009a06e8040b65589d14ad74e9c45bae38026e105302ede6e5be4b934d5a7ada2b77683abbe1f1afa8a36414995f628d3ebeb4", 0xe8}, {&(0x7f0000002300)="ae71d58846be035d9300c5798817b9bb8ab8f8f148f17f8248d972e02da68872651f019c925405404a497723c56aebd3b955d8a4fe72e31843dbfd9d7243631b7e05a46717500029896a2e5572b474950a61d793bb03c1049fdeeb3ea3369b59bc56b9b8e2888491536f43a5abbdfe6f5272f3b7633c5596e30e3ce89bc0c56fe93d5fe1f2d1770f56347dca63c6d80c6de1a064e972bca9e4de465c62e04578abdf007f5a2bab14f8566b77caf3b1b442d766a263b618cd08c2c2c69f5270083faf534bfc01e73532e41cd869996abef94086", 0xd3}, {&(0x7f00000000c0)='gy', 0x2}, {&(0x7f0000002400)="e2e91e0816e8a5154919f794de0076c14f6e645bce2fd75d07ce5e5f8a", 0x1d}], 0x6, &(0x7f00000024c0)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffc1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfce}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xf0}}, {{&(0x7f00000025c0)=@ll={0x11, 0x17, 0x0, 0x1, 0x7b, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002640)="7a77d8fd41c08ae9c720c9ba89dbac4a1e53710942cf1f096b58c039b5a269aa0ae2bd077d41655aa1711048c86e0d37841288072c3ba418e4c91e71084fd98b9c20aadf8c0dcb946927b8534216d9c22ca79400ad6b36178f3ee2300c7abea5b0c849e8dd63faa83c06157dfeaff90b503dd28a532363f6cf8d3f87da8bf2ca0fd4e0f1155e40e020ede5e074c39ca068e4f03a42160ba311ef407b4716ae495a852199e59de51256ce179d93f91d7130e7b247a6387167ca6cb8feb4703248722b8880d8cb4ef33caeb47a116f1038a9645def51b912e80aa5797ffa918239143189eb", 0xe4}, {&(0x7f0000002740)="b14e128e056c60be561d2b9b2e55dd097e29da0c791c3dd60a19b0149c19b7ff0eec09110ef330548c410e779e77c9d744a451d8c1acd1cc2bcd662ce3ea7075a77cd078c2d547f76feb552c352b43ab502d5b", 0x53}, {&(0x7f00000027c0)="c6e0f04fc8ee86a49f7e083363cfc3d820a0dab5258bd834fec2402a74888fe7fd1a9bc6cb867f3f50a2d2714c949ce9ee02423603388c8d8920f8178f78083561eb4ea2344c0f72efe42866b9cb9e68cd5d69da66095dbc782519ec8ece86455e3658494cc23796a4f7501bbccf40fba2415a5e52dc8c11af9196c699a67e40f6af353f39a9740d468ae170091b0c4ab0711a7ea50fa5584164b8b236ee3b45f47177b23ad87ad13ad71bfff34b8ec81388161715a84a3ab60caf7f7deaec0d3abe1ee0b7a75cce56dfab64ca284ee4105baf8143e4aef904a37d2063eb7ab997d66c7631c42ac85bc8176486", 0xed}, {&(0x7f00000028c0)="fc21a20780ac652747bd9a4f9c7e8deede0ba830ee33a104ed8a95aefed3a0aa5f812e77ac23f19db8b8d9a86cceb95962041a528d23cc99bfe88960f42f116a934838ee37d5c94e5e5a0d2a3185493f52990d25f30bb5cdf3e3c26a28d74076439870612a3b794a1707c9f2852ad4ee4259f98a8445956b880d8f40a5e1109c1f206200dd4d6fa2cdbc878efeecdbbab948f122a73bb9f00c58cd9cdb17a42d3a01007312c3fc98713d5a6faf91f6973c7b81ee5f972504982285a5971663fee194da5ca2751a91dddde80a3f6e93", 0xcf}, {&(0x7f00000029c0)="e39c39ae8ee820c8627d971b7de52aacef0692fe4e943fbdaa171dc9ddbf1659cddb0ac3bd7948f8df2bd5ddfde9c9d080d1d32016e3db44d2bddd06324f513635d4916cf40c7af90bacdda2eaeead3428d4cc1d897e0d6bb46fba78f0", 0x5d}, {&(0x7f0000002a40)="9adf8b483ca89cc6a5e3ba7ac1eaaeef4528c92c9b9571038ddb39b5dbe337bf159f1b1bbf3ac305d6dda3f45b9137c28462512936f97943101d3210c5075733e8394fb1df18c8203b2cc24903f48e1d0e1f155c7a942dc93803c934c90db7bae62d865c8cc0449f2ed3", 0x6a}], 0x6}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000002b40)="f55a33c94211056f5d14e44c061988a334bf2136ec7c9aa3143a4dfac3f5a656e7f8bc549e29b20f13741d5cc2343ade271eda0cbf892ef9a5d9806a36e6d1bb3678c5bf3d7ab68ffb23155c739460ec28b0070c941f212db43329138e3031d873eaaf1bfede01aa151a1123f25b4182bba94ef250baf643c5086cce46d8", 0x7e}, {&(0x7f0000002bc0)="7ddca7aa1829788996c9af25adcc15e07c28ecdf5db9d07f98095c003830ebddc33a42414b19e708cf343358c11a6576edf4f5f65d88681313f685d804dac6964c804207f75d54725b31", 0x4a}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="5fc707719e90584bf9d133195f949315f0a95c5c13fe62f71b4799c86e30f1fe77ad7908a9e725678ee18b8ae8517ca483be838524228c87f8e686538475ed38e4b4143e49e51e81681d0f917790340485ce37629ef72ebb7612f430b1e55718dee61444d05c3625e094b3f51c5a2626912a7a3e9b70f05386a714ae1fea3ce4df58e3b44700f691f80602708a99e47aae56c41119ac51bb8df8603a521cc702cc6e484df56b5bbb5ae36301f0e11c51d15c1b83c2705bb593296abf1ef6d26fd96c7d824bfc819e6a01819b7c9ad82a9eb9def45718a967292cd1", 0xdb}, {&(0x7f0000003d40)="61e09b6cf7cb5bcac70af05cfebaa642efdce322f6b0b25744e5a6de04efc8cf3c6f16c61b1ff1c5285ed1515646f7540a0cc5957524be65d2d553b627a16497ee47360848561a63fb5a9d50dffc6e61c0ff628f74d5f44f07b8b8ea5d03b3785f21ecefb50dcb2698eebb2d26d3982f8630a3e2e2966e909358ef0ed612410b06aa4b94b52589e97d9c558e06b52298f8daceec83b9d94a1c9e17865932f75632ca49fe6a07043b8159b117d46eb0a678f1d3b2656eb6d216108d0b7a40a2b69f4efa0b5df2990e6e15232e5abc3b587304388a836ad112e34d3fea6edb5a77b5dbc2d09b05d8f443f004fad9b27cbd", 0xf0}], 0x5, &(0x7f0000003ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}, {{&(0x7f0000003f00)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000006300)=[{&(0x7f0000003f80)="4d00fbaede4f734272882587ee5a4031df4bfc0ffd6ac18f0e451fdada", 0x1d}, {&(0x7f0000003fc0)="b6d6bcd378487b72c62554655f749f8fdb8e83afdd32a23396c4009d44e87dbfbf594ae5be3a3adc05a56baae558a1e9a9b80652d9f5433e063ab14b40e826658fdcfaf23a086ef69056cf33cd0ae6f7ab53", 0x52}, {&(0x7f0000004040)="dc8d29232735a7d521f653a7f1c923ece199e4ef5674e61396708748f52da1ffb2aa80a210418474fab589cc838e2a90c27a40376b59e49ddf5da5e8f1ae53d5547f2d9d9cf2d1d7bb251c316efce9c7cae527175e0ca1937152ea4ccf53c70737c3e1f3df8b36809d47053c0f3676c948ca9718a8f99cb9a2e925c3617cbe91728f66f9b84cefa40f938cae63ef45639ac79a72a72890fd731446659af6670a99a957a5737906a3402b9d4d630e6c6bb2fdebface6316ad491b83d03922b85517b27cf462a1", 0xc6}, {&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000005140)="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", 0x1000}, {&(0x7f0000006140)="4fe16605df7e0501567a45aba1c55e488c7b742ad6d7ce3daccc3759f7d5f8baa1c9d427b94a48f41004c577640af573811f4dd953cfddd5e6b4839412491caa26afa687a97ba83c4acee21bbec28bff4b59f3ae8ce7492b89421a4d36b5f31e4cc4258a761577a691b97cf8aee860366c35601d824376d9d4605a517dbbadbb109f3f9bf26f3910b7be4a00fa28b9e49358f5c535aa9d4ff10c4773b53d47d36f807e48cd62242fa4496989fda3b6401a47639cd4c93440f00204adad91bba5ca87de46b37a148b14703dabc50022ed711b4b1fb15b889b7d04caba8ad7eb3eea64ee0dcdeea443cfbfad348eccb34b900ec071e0d0", 0xf6}, {&(0x7f0000006240)="d6b4dadeab19dfc2d149834b51dfe524d02572c1d10a91a920fd71ff00c3f1ae801088f01d092576b1ee916b16b11350cb380592157110acd38c393cb3ee86788e", 0x41}, {&(0x7f00000062c0)="13c0ba16b2378973bbd677d518d1db665860f0090a1b744fa17cc8f3", 0x1c}], 0x8}}, {{&(0x7f0000006380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x4, 0x0, 0x4, 0x2}}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006400)="997a83bc50464e89d1d88e180352bed7fa11f734722e57b3cdaf633aee377d122757ac10fa5a259023798af6a2c2a9e1239ff2d6a78c9ceb823ecc5f7fb20352e9f18093972b618cdd15a37b55095441e84813bcf1f0", 0x56}, {&(0x7f0000006480)="a1faf5c13cbeab73cd3e018e314731285753a41873a56c8f0546b7fdea21983f2840ce51e8a591f693d717704ffadeb3c54342c784a5063fa830ea5612cf00afa14bb687f7e73f9a15089c542f2b0d6d99895c6ea8106d78642a24", 0x5b}, {&(0x7f0000006500)="dda6379c8d3d20ed229b3cab976557bc0ee754cdc8677cfdc51c4fafd16f10faf254a2d24339e9c73c6c49f2b77bcb43203fa6bfee08e80055f0a8e1a1dbdf255a69eb5585961074a6c32e2ca488827de6614ea01739d240977243a03362d8f0c9320e235cfa1e118162f95c512821ba3ffdf838a6543c6d320645a3703684d03b08ca0b43739b7191425a0b2736c40ee0625c122cb9d030bf00a50120d3331d", 0xa0}], 0x3, &(0x7f0000006600)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8f42}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xf1f}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}], 0xd8}}, {{&(0x7f0000006700)=@isdn={0x22, 0xff, 0x8, 0x1}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006780)="804182be2ad9006d8a62fd1ab1b068480aa236dc20c4f438e4d89770ae3178724217ff993b7aff7ce0e8a20deecd789eeed93ececfadf8d0cfe10ffab546515353c1dae44592c0a3a60d365ad153f7", 0x4f}], 0x1, &(0x7f0000006840)=[@mark={{0x14, 0x1, 0x24, 0xfffffff9}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x306}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xc0}}], 0x6, 0x14)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:40:09 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)
r2 = epoll_create(0x4)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0002000})
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
dup2(r4, r2)
r5 = gettid()
r6 = getpid()
rt_tgsigqueueinfo(r6, r5, 0x0, &(0x7f0000000340))
r7 = clone3(&(0x7f0000003d00)={0x100800, &(0x7f0000003ac0), &(0x7f0000003b00), &(0x7f0000003b40), {0x1d}, &(0x7f0000003b80)=""/126, 0x7e, &(0x7f0000003c00)=""/146, &(0x7f0000003cc0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {0x1, 0xa}, [{0x2, 0x6}, {0x2, 0x1}, {}], {}, [{0x8, 0x2, r8}, {0x8, 0x4}, {0x8, 0x2, r8}, {0x8, 0x1, r8}, {0x8, 0x2, r8}, {0x8, 0x4}, {0x8, 0x0, r8}, {0x8, 0x5, r8}, {0x8, 0x7, r8}], {0x10, 0x7}, {0x20, 0x4}}, 0x84, 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e40)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="d19e81e1d1ebb23e981edf3fcc72622ace94a0b97c2897a346994578d91cdc043c409d275d655bc0f3fc88821175ebae9c3216c2370832c182dfe60d18732d6db2583d531792a5304783e9981981e5b310e7691c4f9124db4d64ab69cf623f30e7c7e72b9ceba94c23a2ba95dff1070f186493bbd407ff32f1d3fa4d1e5e483c4eca90673d640dea858f8d8bead81ef78731926a2f4be1af373d8b8077de68f4ed72fa735fb87c8a5df51de2da9eb35fb8ec3f2f0bfca6ac5e1190b4470cf833c3192abc820c", 0xc6}], 0x1, &(0x7f0000000300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0xc4}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="75b63623b73ef12518baf27783b6afadb1e24d3a43a615473b10212cf211ad0a52fd505a46ce5b4547dcc5eaf80da5198b1d950c07fc64e557bcdb95d51a785f9730273c5b437ca373c7be246af6d0921d7ebc24649fe67c957e99a5c9786cfe9c6ef4c307f364bf053784d57d1d564eff9fcca6befe7e4e5b725f68d5313bdc8903cd97df5333276f09c9d310dd94ee302e4fba1ac7224e610f40a416d9e2582cf2d409bd1043a79c9b950bfea675f82f678b98d45e6c52", 0xb8}, {&(0x7f0000000440)="d31b3f24cdfbb8e7a3e7bfa81ef06ef1afe2194c4b7dea466f0391838a52d91d05db183512b914fc5b7b92525a872ca5290be0ae3fb62f498c2e9c1390c400f011bdc10860ba53263035b0d11a4a1a0c7382114b93eff25a1e67c0e66503cffceef72176849098f7de761d892d80e0df4cea61f517c1bcdc9ba476406d835eee10ccb5eb1ea72d5606a23627ff6890a3ec66e757ab70eb06adf17b97015a21bd51b6eba393bd0b724ca76bd233b40c637001bad4134a45ee96d928e884687931568e88ec85d08ef4377eb8421588b70ac64ffed3d7a0cd8621fa87057992", 0xde}, {&(0x7f0000000540)="f6174409907aca09e97e0459dab877ac0df5e963855bae4b291778e284", 0x1d}, {&(0x7f0000000580)="07c02dc101f1bd35d7ed3949abc587efb04f2de283f5ab439af51ad8354a21f2ba70e582cfc15b3df88dbd804129dc0666dc15ec532961af0bbd2ee76cbc5c82f186f1ab5d8e16bf1611b66fb9", 0x4d}], 0x4, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x60, 0x4004000}}, {{&(0x7f0000000780)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000800)="3ad7a651817fc889d5bad9ddde833c2853db60fb2021878af80f98225a77c19715b8b8b735ce627a09f96dbffab3229e2e713375a6fe04eb53c554e6ce04b1004de9dd12fd958e375aad7ce51fe3dc6d866e5a43e533279c777749b6fef3fdf95ac0a24a66a9dfb0769d5826c5cf01e2", 0x70}], 0x1, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x8010}}, {{&(0x7f0000000980)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="8f46247d7bd0dd4c586b8e35b0e5f135d006fac0503089aba01ad0be68471c1a7be43ed8dcdfb5017731b00da4548823fe16da15bddbd49ee18320853470327eef7f47a0dcbf1ae9b98787a5dafe9ee810985988b41ace11e69cc5847fd61b769722e75c403c7c49401d14e8649756f4a6315377587cf615dd48fdd0f5bbeeec21d2a7fe66d8a09ff45a5201d7ed58430e820bc17d3d9c5504abc64ef57de842b3dab555bab94c808774ebd4266e5b80d354d2e6d2c2763bbce728315f1417e3cc754312cc1827c91b10562de805159082dba3f88fb728d0315f724c51dc1b0f60a596", 0xe3}, {&(0x7f0000000b00)="81015b147e7d9c67a6aa48284512f67a916b9567551511d0604a74f7302cc214729475929db676081195b61d71cf4256a55c4c2c0ccf1d9ce146a0c67cccedd4ef0c131fb9a54eb0dc2d22ea4dbd111f8a213a086b64e9a97ad27d5d31def25a8481624e96c91f881fcd7840c1d47fd96ffd2c76228d52016af9de3e0af3cbefcfa68815439a5d8770c159a884f333d584c8d620d3a70098678270cbb3119d7dd1322d9effe6654e", 0xa8}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}], 0x80, 0x50004}}, {{&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000d80)}, {&(0x7f0000000dc0)="0dd430d3c7047642504199683713978dcfc1ee70578ec77099", 0x19}, {&(0x7f0000000e00)="85c4a8efe3cd8511e0bb6c9c94f5b1ac625f686c331eba78fdfd68beb9f071d834e3d201b39327af10bc77657a2451a74c08fa52cde5be402796", 0x3a}, {&(0x7f0000000e40)="15c2a7f013e208b8c9a97b6a43faea47c062973ebbdd1e7728726d86cf9099e9cde0158ff4ed3b5402649d4b62e5c35c8a8d5f45ef622ad134544a40033047784f20e7e42945db0aad0cc2d4b1329f52fe2b237ea544b1df27c16daa266b1107d828d57fb0f9c81944d03a3ec42ac5f7b12c226b95010bca7ff4f3d0e54e7467b70b40b7e643fa67008871b0f7a4421b1aaff4cc691024f8b2266fdbef59c20501a846ae35a5cc614f374d5cedffff1ba026fa13d193aa82bc46ab2d80738dc69fb8c8adad39be3282ade4822fed6b771352c2d82efc3501cef3", 0xda}, {&(0x7f0000000f40)="07a560d37617f0795eaf86bb747c5a9751417cf98e71fedc6484d7a11978ab4d39196d0bad98a361dd1c6f28c74378e282e6f8cfa601e3f8d699e83ba58c20748276ce53125549d49fa14521942af5dcc2078d9fab9c6a5393eb8cedeac43756a9878958e35bb0244b3784c7dc0538bd7541e6f3b8722464aec62003601130ac61eae0ff3287909d2bd42e953af05bc964f39f92af81a7cc86e9c63f0b61dfbc1041815f4f5f3a99e56ae2bc274ba0d6df3d1ce1dbbee1a376255172160d29fceeff5f31dbf4768a871783be5fb76788bf268b96d3fda571b0827ab62eb891de8bf796cd0bb09b", 0xe7}, {&(0x7f0000001040)="14f562fd9c684bd24a2a5a47b5ceed67fa1a7e6c987756635abeefd42b74fc9978b0c1f0ab0257c7ad", 0x29}, {&(0x7f0000001080)="ee91621b52118f70d2907171132e10d12464f571580774e17c2190895b0773e5ac3befaddd5d981fd13f521b5f46092cc58be7b9676d4c86478c11176b7fff74b5b240d3bf009a91285e9a7cf8fe77df7f3c55477fb49dfa81afbb24acdaff3064ab76191c4307039ca3e64f56a89aa986076c678fca7ecb552b97a9aa439770426ebca2fca102c1bfeb624ec180a73e759408daeb2add57c4c57f6dcb0ebf954e9cc4b79e3707684fd11e588c3dc9c0e8267f81d25d34eabf5c9c40fe8b555a9abb3b673e442b0addd299c7feb46b53ae9e3ac9c74af06c7cbca482a9c2", 0xde}, {&(0x7f0000001180)="9db388a909e932e3ebddb389556a112df9c95467838b2e633dba727e0ab3bb3d3c98f54c9f209ddf05c45cc956ccd613945ec46a895fec5ed28f8c123a2824a2b80e772d9f", 0x45}, {&(0x7f0000001200)="f0af562913cf2192e5f921308b421a4fbfaaca2eb108e25ac2c0e8885acb5d6e4f3171ebe296f0ee1361c68e337df4287a9f1775866f75bbe3c02ce8992d4847bac8292f5a73a29242c7e641e38680e61e8adf1efca97da15ca055a235579f40d8a2", 0x62}, {&(0x7f0000001280)="98e044e20f02c491ccf89d82f3efed6c1c1292098095c8d5ef15ad6d4d08c5af6a6fba99d3487e7a3d4026c413044b45b0ee2497eca084336f659721467d403012e5f8c58f6afc793487d342c6395aad35121f34870009d2abd0298dfd25e2f92129102a089645d1558a08c329f99464144bb5a31e1ac67d90b52b513d19a359fe2945c5531bb3ab5687259f2b50f29c537148c417d87a9841f1cbe9c925591eeac4cc61e2226d909d4f0aadc2f981835a85f0804df43caef7da92a523", 0xbd}], 0xa, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xe8, 0x40008051}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001880)="23cb27d795880ec271a093f9bcbd12a516d95bb336f1a4bdc884574bb92fc8771f7ccff131b3a322ee4569f40927fcfe8671c4a9d274b9fccb3e7c28074e92a2fbe9da069956eb", 0x47}, {&(0x7f0000001900)="906ccce95da30d5f10ddbde2ce9c2c60122ed93b0c8d0f8b2ee397152a89c1b5b5535339bf7c808ed0fff65fbfcec27915140b6d82da43fbc03468f70a05264bc8ea54157df8b2b90641404e3079d0839d9b068e2dda4ee18ce035d7cf", 0x5d}, {&(0x7f0000001980)="15276472e94e69a3c9354a7eca238e6f78a0eb63f8da4b24cdcb4766ebe82367c5b9007f50e246c06b14ece5c3a17b72a72f4a308c1a902b", 0x38}, {&(0x7f00000019c0)="ce60efa63e419d6ea42c536ea9b8193d6dd6e177b43d217686f9333119250603420f02498bb5e806040c37e0869aa9d620ed11693d635989ed5ea10ecf80c0659f3b0b7232e74d6a6ff3a5bd47c0f191121672f1", 0x54}, {&(0x7f0000001a40)="32d06b362cb040c23a6e9d4720e6d9a24446650122930c34bacd3c041cce6a489371e636ca44b7d461fff2802fcb92fd5d34b7219088deb93028fabf840114c0e3ea4eeed045bb94216fc5c70ccac1f4b843a70301a0fc25ec8028df05e331037e53acb7da2f470c6cb4d34fd77f08ca22f8dd0aef8371a7146e6ba98510bd1bfed0170ee3224d033952f150bf0c5e4032d6b4dbd8a574dd2a9d246f80870331152c32721d5ef1fa31eedc3945cadc62716cab05143048580d9c78f955e9cdba12ffde8b37", 0xc5}, {&(0x7f0000001b40)="20c471d1948268e9a364fa857f0ca9e672b6e8b24546dc387caf281ec20e2da42f3d47446498c6361d087b013ca37fbc0ea8e1e91373d93eb4a3b95a726d15a224843802163e2b5f46f68559a4663a95e7892cf309b4e12a43188d", 0x5b}, {&(0x7f0000001bc0)}], 0x7, &(0x7f0000001c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}], 0x20}}, {{&(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d40)="13ebeb9873ea85e724489d6ada49d69aeae0b5f663edc63a3002c504c366b8df15bcfed1ed4fef1e63b30a5bfca18c8f8dfad2b5fb2f8bc4fd0a2111610cfa1bbf03a7cf7e2bca16f25b93411a57e542f2c03a262d2e8a0e53e4be70c6d34aad1d6975c0d0c07c285495c2d2789d73e567a1e3ea9608d8bf023261528db68af107a0", 0x82}, {&(0x7f0000001e00)="3e64287167921c98359efe42449bb84001b241cc8b5b3be2e5db7efb201bba74753cb687b22fcb7093f7e2c1309571d2c9ce09ae3147cee8d0e0c7544b1c426e7152f5e6d06acd913f888ec67887e3ac0bfed180ace9ca357468125e3e0012797e24ed358dde0dd99b940192e2a0857250466d7651462aefab887ce86946e31e", 0x80}], 0x2, &(0x7f00000036c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xc0, 0x40001}}, {{&(0x7f0000003780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003800)="427b156260144f8480349c2575933b41ca865c10665b70ff834ccb13607e48b0b54e969dae0c75d3ba60b9bb2ff53bddeece09cf66d72bbbef56cfb87a7e9071a57d17fd3b04219772ac8d4f99564c431e607cb34e986039338e85ec6f6e0d295bf639a5aae85a9bd02f28574fee2d65fbe291cc85ecf197ae266bf7807cebc4e9df11c32159be425f877f5b1f", 0x8d}], 0x1, &(0x7f0000003900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4040000}}, {{&(0x7f0000003940)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000039c0), 0x0, &(0x7f0000003d80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, r8}}}], 0x98, 0x20000011}}], 0x9, 0x20004)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:40:09 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000060000000000000000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00le0\x00\x00\x00\x00\x00'])
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3311.666616] loop6: detected capacity change from 0 to 40
[ 3311.700013] loop1: detected capacity change from 0 to 40
23:40:10 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r0=>0x0}, &(0x7f0000000200)=0xc)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=<r1=>0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x0, &(0x7f0000000180), 0x2088000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@noacl}, {@dax}, {@block_validity}, {@grpjquota}, {@bh}, {@nojournal_checksum}], [{@uid_gt={'uid>', 0xee00}}, {@dont_appraise}, {@fowner_lt={'fowner<', r0}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_type={'obj_type', 0x3d, '&]'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@appraise_type}, {@dont_measure}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

23:40:10 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="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", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000060000000000000000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00le0\x00\x00\x00\x00\x00'])
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:40:10 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x7fffff8, 0x0)

23:40:10 executing program 4:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x4)
readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001180)=""/4096, 0xfd7a)

23:40:10 executing program 5:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x31b909e, 0x0)
mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1000000, &(0x7f0000001500)={'trans=virtio,', {[{@uname={'uname', 0x3d, '-}%-(\xfe\'$*'}}, {@cache_fscache}, {@access_any}, {}, {@noextend}, {@access_client}], [{@fowner_gt={'fowner>', 0xee01}}, {@hash}]}})
r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x10001, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6ec489c09a033d982366636f6e747178743d756e636f6e66696e65645f752c636f6e746578743d73797361646d5f752c6673757569643d39623037643635322d396561662d303934302d003531652d30313939663063322c6d6561737572652c00"])
r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x4000, 0x41)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
r2 = accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001780)={'veth0_to_bridge\x00', <r5=>0x0})
listxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/4096, 0x1000)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000017c0)={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, r5}, 0xc)
bind(r2, &(0x7f0000000300)=@can={0x1d, r5}, 0x80)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

23:40:10 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={'trans=unix,', {[{@version_L}, {@uname={'uname', 0x3d, '}'}}, {@msize={'msize', 0x3d, 0x6}}, {@noextend}, {}], [{@subj_user={'subj_user', 0x3d, '@'}}]}})
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)
getpeername$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e)

[ 3312.274809] 9pnet_virtio: no channels available for device syz
[ 3312.291498] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
23:40:10 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="0342edecebdd40", 0x7}, {&(0x7f0000000180)}, {&(0x7f0000000440)="cb59080af0522b7a097ad2d9fa8c0fa2d6e144bcee5c6c3602af9b34e557025a12b76979fd75c1670677d807ae4bc46df2437d1e489bcd0d42376be2a82cc11b19c2fe9ad547d82806a8a2759cf7a9e4356014c8795e0de13fbf8b0f92c7f6ef4942c13ce63e0839fb02bbdf91731c5269a21b7d2208fe28b8f12938081f983f4eeae13caabb00ef288b2868c7fd89dd6d879f095c2b711d65569f0bab369c64f9963083a8334d25640fa38b65a3e7d21434be46f03d683afdcde3f6add3ffe7337d6865b420cf4ecc0920effd2efb4991c0a61d5ef78a3d1b3909393f4d52f519e31040d1a2b6bbe3057f62d6137c6c0294eb1ba47697ddb0cf0cf123ae93834de351c483b1f01e4afb68c45dc5e44235b6354cbe2b45a85a1d134b2a499dff3fe5df675c7c35828b7f10afc6c8faaf0266a0cbbec9c80076cf8fadea", 0x13d}], 0x3, 0x9e74, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000060000000000000000", @ANYRES32, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00le0\x00\x00\x00\x00\x00'])
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x4)
umount2(&(0x7f0000000140)='./file0\x00', 0x4)

[ 3312.342562] 9pnet_virtio: no channels available for device syz
[ 3312.356242] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
23:40:10 executing program 0:
mknod(&(0x7f0000008d80)='./file0\x00', 0x0, 0x0)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1a901e, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 3312.506859] kworker/u4:0: attempt to access beyond end of device
[ 3312.506859] loop1: rw=1, sector=84, nr_sectors = 4 limit=40
[ 3312.508378] Buffer I/O error on dev loop1, logical block 21, lost async page write
[ 3312.509572] kworker/u4:0: attempt to access beyond end of device
[ 3312.509572] loop1: rw=1, sector=92, nr_sectors = 4 limit=40
[ 3312.511043] Buffer I/O error on dev loop1, logical block 23, lost async page write
[ 3312.513019] kworker/u4:0: attempt to access beyond end of device
[ 3312.513019] loop1: rw=1, sector=96, nr_sectors = 32 limit=40
[ 3312.519199] kworker/u4:0: attempt to access beyond end of device
[ 3312.519199] loop1: rw=1, sector=88, nr_sectors = 4 limit=40
[ 3312.520962] Buffer I/O error on dev loop1, logical block 22, lost async page write

VM DIAGNOSIS:
23:45:12  Registers:
info registers vcpu 0
RAX=ffffffff8441dde0 RBX=ffffffff854328c0 RCX=ffffffff843fe862 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85407e20
R8 =0000000000000001 R9 =ffff88806ce34f03 R10=ffffed100d9c69e0 R11=0000000000000001
R12=fffffbfff0a86518 R13=ffffffff85d07c90 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8441ddef RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe33510bd000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe33510bb000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f410221a010 CR3=000000001af52000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000
XMM02=746e696820636578650a0a0100010101 XMM03=650a00736465657320636578650a0073
XMM04=206365786509006c61746f7420636578 XMM05=69646e616320636578650e007a7a7566
XMM06=6d696e696d20636578650d0065746164 XMM07=006873616d7320636578650a00657a69
XMM08=65657320636578650a0073746e696820 XMM09=09006c61746f7420636578650a007364
XMM10=20636578650e007a7a75662063657865 XMM11=20636578650d006574616469646e6163
XMM12=7320636578650a00657a696d696e696d XMM13=7220726f74756365786511006873616d
XMM14=65672063657865080073747261747365 XMM15=000065676169727420636578650b006e
info registers vcpu 1
RAX=ffffffff8441dde0 RBX=ffff888008e4d040 RCX=ffffffff843fe862 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff888008ebfe58
R8 =0000000000000001 R9 =ffff88806cf34f03 R10=ffffed100d9e69e0 R11=0000000000000001
R12=ffffed10011c9a08 R13=ffffffff85d07c90 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8441ddef RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe2b27f45000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe2b27f43000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fb159bb628 CR3=000000001af52000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004114c6e000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000