age$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:26 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[  979.999058] FAT-fs (loop7): bogus number of reserved sectors
[  979.999630] FAT-fs (loop7): Can't find a valid FAT filesystem
[  980.019624] loop1: detected capacity change from 0 to 40
03:10:26 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:10:26 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[  980.103051] loop0: detected capacity change from 0 to 40
03:10:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:26 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:26 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

[  980.189619] FAT-fs (loop7): bogus number of reserved sectors
[  980.190490] FAT-fs (loop7): Can't find a valid FAT filesystem
[  980.204886] loop6: detected capacity change from 0 to 40
[  980.223412] loop3: detected capacity change from 0 to 40
[  980.225858] loop1: detected capacity change from 0 to 40
[  980.231874] FAT-fs (loop3): bogus number of reserved sectors
[  980.232311] FAT-fs (loop3): Can't find a valid FAT filesystem
[  980.821470] loop4: detected capacity change from 0 to 40
03:10:27 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[  980.840625] loop1: detected capacity change from 0 to 40
[  980.850070] loop5: detected capacity change from 0 to 40
03:10:27 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

03:10:27 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[  980.859960] FAT-fs (loop4): bogus number of FAT sectors
[  980.860472] FAT-fs (loop4): Can't find a valid FAT filesystem
[  980.865357] FAT-fs (loop7): bogus number of reserved sectors
[  980.865996] FAT-fs (loop7): Can't find a valid FAT filesystem
03:10:27 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:27 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

03:10:27 executing program 2:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[  981.073783] loop1: detected capacity change from 0 to 40
[  981.076218] FAT-fs (loop7): bogus number of reserved sectors
[  981.076760] FAT-fs (loop7): Can't find a valid FAT filesystem
[  981.257556] syz-executor.5: attempt to access beyond end of device
[  981.257556] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[  981.258945] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:10:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[  994.843035] loop4: detected capacity change from 0 to 40
[  994.845268] FAT-fs (loop4): bogus number of FAT sectors
[  994.845666] FAT-fs (loop4): Can't find a valid FAT filesystem
03:10:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:41 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:10:41 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:41 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[  994.859096] loop3: detected capacity change from 0 to 40
[  994.865040] FAT-fs (loop3): bogus number of reserved sectors
[  994.865470] FAT-fs (loop3): Can't find a valid FAT filesystem
[  994.885274] loop1: detected capacity change from 0 to 40
[  994.913882] loop2: detected capacity change from 0 to 40
[  994.921543] loop0: detected capacity change from 0 to 40
[  994.927191] loop5: detected capacity change from 0 to 40
[  994.940941] FAT-fs (loop7): bogus number of reserved sectors
[  994.941805] FAT-fs (loop7): Can't find a valid FAT filesystem
[  995.383882] syz-executor.2: attempt to access beyond end of device
[  995.383882] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[  995.385021] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:10:55 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:55 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:10:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:55 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:10:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:10:55 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1009.042269] loop2: detected capacity change from 0 to 40
[ 1009.053657] loop1: detected capacity change from 0 to 40
[ 1009.079419] loop3: detected capacity change from 0 to 40
[ 1009.080289] loop5: detected capacity change from 0 to 40
[ 1009.081790] loop4: detected capacity change from 0 to 40
[ 1009.084974] loop0: detected capacity change from 0 to 40
[ 1009.086717] FAT-fs (loop3): bogus number of reserved sectors
[ 1009.087191] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1009.090581] FAT-fs (loop4): bogus number of FAT sectors
[ 1009.091041] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1009.091818] FAT-fs (loop7): bogus number of reserved sectors
[ 1009.092421] FAT-fs (loop7): Can't find a valid FAT filesystem
03:10:55 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:10:55 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1009.223600] loop1: detected capacity change from 0 to 40
[ 1009.237904] loop7: detected capacity change from 0 to 40
[ 1009.250396] FAT-fs (loop7): bogus number of reserved sectors
[ 1009.250881] FAT-fs (loop7): Can't find a valid FAT filesystem
03:10:55 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1009.384494] syz-executor.5: attempt to access beyond end of device
[ 1009.384494] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1009.385681] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1009.397807] loop7: detected capacity change from 0 to 40
03:10:55 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1009.420332] FAT-fs (loop7): bogus number of reserved sectors
[ 1009.420758] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1009.431999] loop1: detected capacity change from 0 to 40
03:10:55 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1009.534764] loop5: detected capacity change from 0 to 40
03:11:11 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:11 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:11 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:11 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:11:11 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1025.348289] loop2: detected capacity change from 0 to 40
[ 1025.352473] loop1: detected capacity change from 0 to 40
[ 1025.398093] loop3: detected capacity change from 0 to 40
[ 1025.408360] loop4: detected capacity change from 0 to 40
[ 1025.412895] loop7: detected capacity change from 0 to 40
[ 1025.417615] loop5: detected capacity change from 0 to 40
[ 1025.432480] FAT-fs (loop3): bogus number of reserved sectors
[ 1025.433352] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1025.434439] FAT-fs (loop7): bogus number of reserved sectors
[ 1025.435369] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:11 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1025.892855] loop7: detected capacity change from 0 to 40
[ 1025.908873] FAT-fs (loop7): bogus number of reserved sectors
[ 1025.910086] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:12 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:12 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1026.361827] loop7: detected capacity change from 0 to 40
[ 1026.364711] FAT-fs (loop7): Unrecognized mount option "./file0" or missing value
03:11:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:12 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:12 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1026.461959] loop5: detected capacity change from 0 to 40
03:11:12 executing program 2:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1026.487654] loop4: detected capacity change from 0 to 40
03:11:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:12 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1026.538838] loop3: detected capacity change from 0 to 40
[ 1026.550870] FAT-fs (loop3): bogus number of reserved sectors
[ 1026.551480] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1026.578056] loop1: detected capacity change from 0 to 40
[ 1026.578876] loop7: detected capacity change from 0 to 40
[ 1026.619415] FAT-fs (loop7): bogus number of reserved sectors
[ 1026.620013] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1026.631249] loop2: detected capacity change from 0 to 40
[ 1026.656424] FAT-fs (loop6): bogus number of reserved sectors
[ 1026.657584] FAT-fs (loop6): Can't find a valid FAT filesystem
03:11:13 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1027.060656] loop7: detected capacity change from 0 to 40
[ 1027.069259] FAT-fs (loop7): bogus number of reserved sectors
[ 1027.070054] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:27 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:11:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1041.194821] loop4: detected capacity change from 0 to 40
03:11:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:27 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:27 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:11:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1041.212313] loop3: detected capacity change from 0 to 40
[ 1041.220121] FAT-fs (loop3): bogus number of reserved sectors
[ 1041.220556] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1041.223609] loop2: detected capacity change from 0 to 40
[ 1041.243026] loop7: detected capacity change from 0 to 40
[ 1041.278070] FAT-fs (loop7): bogus number of reserved sectors
[ 1041.278977] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1041.282650] loop5: detected capacity change from 0 to 40
[ 1041.304825] FAT-fs (loop6): bogus number of reserved sectors
[ 1041.305571] FAT-fs (loop6): Can't find a valid FAT filesystem
03:11:27 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1041.553079] loop7: detected capacity change from 0 to 40
[ 1041.569696] FAT-fs (loop7): bogus number of reserved sectors
[ 1041.570668] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:28 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1041.742299] loop7: detected capacity change from 0 to 40
[ 1041.754071] FAT-fs (loop7): bogus number of reserved sectors
[ 1041.754507] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:28 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1041.898889] loop7: detected capacity change from 0 to 40
[ 1041.903475] FAT-fs (loop7): bogus number of reserved sectors
[ 1041.904084] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:28 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1042.182897] loop7: detected capacity change from 0 to 40
03:11:28 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1042.235175] FAT-fs (loop7): bogus number of reserved sectors
[ 1042.235989] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1042.396909] loop4: detected capacity change from 0 to 40
03:11:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:28 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:11:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1042.555434] loop2: detected capacity change from 0 to 40
[ 1042.557415] loop3: detected capacity change from 0 to 40
[ 1042.569941] loop5: detected capacity change from 0 to 40
[ 1042.588093] FAT-fs (loop3): bogus number of reserved sectors
[ 1042.589120] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1042.609170] FAT-fs (loop6): bogus number of reserved sectors
[ 1042.609933] FAT-fs (loop6): Can't find a valid FAT filesystem
03:11:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:44 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:44 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:11:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:44 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:11:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1058.035326] loop3: detected capacity change from 0 to 40
[ 1058.039360] loop2: detected capacity change from 0 to 40
[ 1058.044894] loop5: detected capacity change from 0 to 40
[ 1058.051401] loop4: detected capacity change from 0 to 40
[ 1058.052216] loop7: detected capacity change from 0 to 40
[ 1058.054020] FAT-fs (loop6): bogus number of reserved sectors
[ 1058.054649] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1058.063163] FAT-fs (loop3): bogus number of reserved sectors
[ 1058.064067] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1058.067941] FAT-fs (loop7): invalid media value (0x00)
[ 1058.068682] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:44 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1058.534660] loop7: detected capacity change from 0 to 40
[ 1058.537597] FAT-fs (loop7): invalid media value (0x00)
[ 1058.538018] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1071.628421] loop1: detected capacity change from 0 to 40
03:11:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:57 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:11:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:57 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1071.640061] loop7: detected capacity change from 0 to 40
03:11:57 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1071.648369] FAT-fs (loop6): bogus number of reserved sectors
[ 1071.648755] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1071.650431] FAT-fs (loop7): invalid media value (0x00)
[ 1071.650786] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1071.672303] loop3: detected capacity change from 0 to 40
[ 1071.688234] FAT-fs (loop3): invalid media value (0x00)
[ 1071.688978] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1071.702805] loop4: detected capacity change from 0 to 40
03:11:58 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1071.908907] loop7: detected capacity change from 0 to 40
[ 1071.912260] FAT-fs (loop7): invalid media value (0x00)
[ 1071.912624] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:58 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1072.119105] loop7: detected capacity change from 0 to 40
[ 1072.130785] FAT-fs (loop7): invalid media value (0x00)
[ 1072.131575] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1072.202882] syz-executor.1: attempt to access beyond end of device
[ 1072.202882] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1072.204031] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:11:58 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:11:58 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1072.354778] loop7: detected capacity change from 0 to 40
[ 1072.362636] FAT-fs (loop7): invalid media value (0x00)
[ 1072.363122] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:58 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:58 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:11:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1072.618547] FAT-fs (loop6): bogus number of reserved sectors
[ 1072.619019] FAT-fs (loop6): Can't find a valid FAT filesystem
03:11:58 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:58 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1072.696412] loop4: detected capacity change from 0 to 40
[ 1072.708721] loop3: detected capacity change from 0 to 40
[ 1072.721982] FAT-fs (loop3): invalid media value (0x00)
[ 1072.722377] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1072.785639] loop7: detected capacity change from 0 to 40
03:11:59 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1072.794626] FAT-fs (loop7): bogus number of FAT sectors
[ 1072.795491] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1072.893188] loop4: detected capacity change from 0 to 40
03:11:59 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:11:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1073.520644] loop6: detected capacity change from 0 to 40
[ 1073.546769] loop7: detected capacity change from 0 to 40
[ 1073.548763] FAT-fs (loop6): bogus number of reserved sectors
[ 1073.549469] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1073.554585] FAT-fs (loop7): bogus number of FAT sectors
[ 1073.555220] FAT-fs (loop7): Can't find a valid FAT filesystem
03:11:59 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1073.641784] loop1: detected capacity change from 0 to 40
[ 1073.745506] syz-executor.1: attempt to access beyond end of device
[ 1073.745506] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1073.746585] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:12:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:14 executing program 1:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1088.135424] FAT-fs (loop5): bogus number of reserved sectors
[ 1088.135882] FAT-fs (loop5): Can't find a valid FAT filesystem
03:12:14 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:14 executing program 0:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1088.155218] loop3: detected capacity change from 0 to 40
[ 1088.157944] FAT-fs (loop3): invalid media value (0x00)
[ 1088.158368] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1088.187864] loop1: detected capacity change from 0 to 40
[ 1088.200913] loop6: detected capacity change from 0 to 40
[ 1088.223002] FAT-fs (loop6): bogus number of reserved sectors
[ 1088.223455] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1088.227109] loop4: detected capacity change from 0 to 40
[ 1088.228593] loop7: detected capacity change from 0 to 40
03:12:14 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:15 executing program 1:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1089.051325] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1089.078785] loop7: detected capacity change from 0 to 40
[ 1089.084545] loop3: detected capacity change from 0 to 40
[ 1089.095378] FAT-fs (loop3): invalid media value (0x00)
[ 1089.095856] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1089.101806] loop4: detected capacity change from 0 to 40
[ 1089.177908] loop1: detected capacity change from 0 to 40
[ 1089.308002] syz-executor.1: attempt to access beyond end of device
[ 1089.308002] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1089.309439] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:12:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:29 executing program 1:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:29 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:29 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1103.209563] loop7: detected capacity change from 0 to 40
[ 1103.218326] loop1: detected capacity change from 0 to 40
[ 1103.230111] loop6: detected capacity change from 0 to 40
[ 1103.231260] loop3: detected capacity change from 0 to 40
[ 1103.244361] FAT-fs (loop6): bogus number of reserved sectors
[ 1103.244761] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1103.246985] FAT-fs (loop3): invalid media value (0x00)
[ 1103.247748] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1103.266584] FAT-fs (loop2): bogus number of reserved sectors
[ 1103.267003] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1103.277651] loop4: detected capacity change from 0 to 40
[ 1103.289930] FAT-fs (loop5): bogus number of reserved sectors
[ 1103.290802] FAT-fs (loop5): Can't find a valid FAT filesystem
03:12:29 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:29 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1103.395730] loop7: detected capacity change from 0 to 40
03:12:29 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1103.595915] loop4: detected capacity change from 0 to 40
[ 1103.628395] syz-executor.1: attempt to access beyond end of device
[ 1103.628395] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1103.629474] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:12:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:45 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:45 executing program 1:
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:45 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1118.921125] loop4: detected capacity change from 0 to 40
[ 1118.934644] FAT-fs (loop5): bogus number of reserved sectors
[ 1118.935110] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1118.944091] loop6: detected capacity change from 0 to 40
[ 1118.946455] FAT-fs (loop6): bogus number of reserved sectors
[ 1118.946919] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1118.978922] loop7: detected capacity change from 0 to 40
[ 1118.988773] loop3: detected capacity change from 0 to 40
[ 1118.992125] loop1: detected capacity change from 0 to 40
[ 1118.995846] FAT-fs (loop2): bogus number of reserved sectors
[ 1118.996445] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1119.013620] FAT-fs (loop3): invalid media value (0x00)
[ 1119.014077] FAT-fs (loop3): Can't find a valid FAT filesystem
03:12:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1119.064985] loop4: detected capacity change from 0 to 40
03:12:45 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:45 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1119.187221] syz-executor.1: attempt to access beyond end of device
[ 1119.187221] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1119.188400] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:12:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:45 executing program 1:
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1119.342578] loop7: detected capacity change from 0 to 40
03:12:45 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1119.383346] loop4: detected capacity change from 0 to 40
03:12:45 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1119.417066] loop1: detected capacity change from 0 to 40
[ 1119.485343] loop7: detected capacity change from 0 to 40
[ 1119.907356] syz-executor.1: attempt to access beyond end of device
[ 1119.907356] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1119.909162] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:12:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:59 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:12:59 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:59 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1133.239942] loop4: detected capacity change from 0 to 40
03:12:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:59 executing program 1:
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1133.247056] loop1: detected capacity change from 0 to 40
[ 1133.254189] FAT-fs (loop5): bogus number of reserved sectors
[ 1133.255270] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1133.256693] loop6: detected capacity change from 0 to 40
[ 1133.269382] FAT-fs (loop6): bogus number of reserved sectors
[ 1133.270539] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1133.285351] loop3: detected capacity change from 0 to 40
[ 1133.296271] FAT-fs (loop3): bogus number of FAT sectors
[ 1133.296621] FAT-fs (loop3): Can't find a valid FAT filesystem
03:12:59 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1133.298851] loop7: detected capacity change from 0 to 40
[ 1133.322689] FAT-fs (loop2): bogus number of reserved sectors
[ 1133.323888] FAT-fs (loop2): Can't find a valid FAT filesystem
03:12:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:59 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1133.438521] syz-executor.1: attempt to access beyond end of device
[ 1133.438521] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1133.439657] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1133.488101] loop4: detected capacity change from 0 to 40
03:12:59 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:12:59 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:12:59 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1133.581909] loop7: detected capacity change from 0 to 40
[ 1133.583956] loop1: detected capacity change from 0 to 40
03:12:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:00 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:00 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1133.774715] loop4: detected capacity change from 0 to 40
[ 1133.881289] loop7: detected capacity change from 0 to 40
03:13:00 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1134.067105] syz-executor.1: attempt to access beyond end of device
[ 1134.067105] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1134.068595] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:13:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:12 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:13:12 executing program 1:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:13:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:12 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1146.312492] loop3: detected capacity change from 0 to 40
[ 1146.326883] loop6: detected capacity change from 0 to 40
[ 1146.331504] loop7: detected capacity change from 0 to 40
[ 1146.335038] loop1: detected capacity change from 0 to 40
[ 1146.341860] FAT-fs (loop3): bogus number of FAT sectors
[ 1146.342322] FAT-fs (loop6): bogus number of reserved sectors
[ 1146.342665] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1146.343016] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1146.345577] FAT-fs (loop5): bogus number of reserved sectors
[ 1146.345988] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1146.355601] loop4: detected capacity change from 0 to 40
[ 1146.358922] FAT-fs (loop2): bogus number of reserved sectors
[ 1146.359772] FAT-fs (loop2): Can't find a valid FAT filesystem
03:13:12 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1146.500230] loop7: detected capacity change from 0 to 40
[ 1146.536418] syz-executor.1: attempt to access beyond end of device
[ 1146.536418] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1146.537547] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:13:12 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:13:12 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:12 executing program 1:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:13:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1146.706585] loop7: detected capacity change from 0 to 40
[ 1146.760053] loop1: detected capacity change from 0 to 40
[ 1146.772802] loop4: detected capacity change from 0 to 40
03:13:13 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1146.849749] loop7: detected capacity change from 0 to 40
03:13:13 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1147.192726] syz-executor.1: attempt to access beyond end of device
[ 1147.192726] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1147.193745] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:13:27 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:13:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:27 executing program 1:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1161.651848] loop4: detected capacity change from 0 to 40
03:13:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:27 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1161.699958] loop7: detected capacity change from 0 to 40
[ 1161.728738] loop6: detected capacity change from 0 to 40
[ 1161.731289] loop1: detected capacity change from 0 to 40
[ 1161.733095] FAT-fs (loop5): bogus number of reserved sectors
[ 1161.733898] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1161.735237] FAT-fs (loop2): bogus number of reserved sectors
[ 1161.735451] loop3: detected capacity change from 0 to 40
[ 1161.736006] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1161.743814] FAT-fs (loop6): bogus number of reserved sectors
[ 1161.744713] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1161.759543] FAT-fs (loop3): bogus number of FAT sectors
[ 1161.760115] FAT-fs (loop3): Can't find a valid FAT filesystem
03:13:28 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:28 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1161.938399] loop7: detected capacity change from 0 to 40
[ 1161.968462] loop4: detected capacity change from 0 to 40
03:13:28 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:13:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:28 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:28 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1162.348612] loop4: detected capacity change from 0 to 40
[ 1162.361719] loop7: detected capacity change from 0 to 40
[ 1162.383776] syz-executor.1: attempt to access beyond end of device
[ 1162.383776] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1162.384855] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:13:28 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:13:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1162.526783] loop1: detected capacity change from 0 to 40
[ 1162.578728] loop4: detected capacity change from 0 to 40
03:13:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:43 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1177.018172] loop4: detected capacity change from 0 to 40
[ 1177.042038] loop6: detected capacity change from 0 to 40
03:13:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:43 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:13:43 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1177.051756] loop5: detected capacity change from 0 to 40
[ 1177.054073] FAT-fs (loop2): bogus number of reserved sectors
[ 1177.054542] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1177.054935] loop1: detected capacity change from 0 to 40
[ 1177.056508] FAT-fs (loop6): bogus number of reserved sectors
[ 1177.056913] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1177.060192] FAT-fs (loop5): bogus number of reserved sectors
[ 1177.060628] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1177.092673] syz-executor.4: attempt to access beyond end of device
[ 1177.092673] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1177.093634] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:13:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1177.178659] loop7: detected capacity change from 0 to 40
[ 1177.180409] loop3: detected capacity change from 0 to 40
[ 1177.269327] loop4: detected capacity change from 0 to 40
[ 1177.376917] syz-executor.4: attempt to access beyond end of device
[ 1177.376917] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1177.378644] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:13:43 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1177.637015] loop7: detected capacity change from 0 to 40
03:13:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1177.788677] loop4: detected capacity change from 0 to 40
[ 1177.810335] loop3: detected capacity change from 0 to 40
03:13:44 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1177.983079] syz-executor.4: attempt to access beyond end of device
[ 1177.983079] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1177.985224] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:13:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1178.050812] loop6: detected capacity change from 0 to 40
03:13:44 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:13:44 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1178.072413] FAT-fs (loop6): bogus number of reserved sectors
[ 1178.073358] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1178.081489] loop7: detected capacity change from 0 to 40
03:13:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:13:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1178.178220] loop2: detected capacity change from 0 to 40
[ 1178.195628] loop5: detected capacity change from 0 to 40
[ 1178.197098] loop1: detected capacity change from 0 to 40
[ 1178.210197] FAT-fs (loop2): bogus number of reserved sectors
[ 1178.211448] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1178.213191] FAT-fs (loop5): bogus number of reserved sectors
[ 1178.214370] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1178.264536] loop4: detected capacity change from 0 to 40
[ 1178.423104] syz-executor.4: attempt to access beyond end of device
[ 1178.423104] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1178.424823] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:14:01 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:14:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:01 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:01 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1195.554653] loop2: detected capacity change from 0 to 40
[ 1195.560883] loop3: detected capacity change from 0 to 40
[ 1195.564874] loop4: detected capacity change from 0 to 40
[ 1195.565321] loop6: detected capacity change from 0 to 40
[ 1195.569001] loop7: detected capacity change from 0 to 40
[ 1195.571249] loop5: detected capacity change from 0 to 40
[ 1195.575774] loop1: detected capacity change from 0 to 40
[ 1195.581229] FAT-fs (loop2): bogus number of reserved sectors
[ 1195.582005] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1195.583541] FAT-fs (loop6): bogus number of reserved sectors
[ 1195.584379] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1195.586813] FAT-fs (loop5): bogus number of reserved sectors
[ 1195.587681] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1195.665486] perf: interrupt took too long (2555 > 2500), lowering kernel.perf_event_max_sample_rate to 78000
[ 1195.679891] perf: interrupt took too long (3242 > 3193), lowering kernel.perf_event_max_sample_rate to 61000
[ 1195.696399] perf: interrupt took too long (4063 > 4052), lowering kernel.perf_event_max_sample_rate to 49000
[ 1195.725820] syz-executor.4: attempt to access beyond end of device
[ 1195.725820] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1195.727508] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:14:02 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1195.966883] loop7: detected capacity change from 0 to 40
03:14:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1195.981937] perf: interrupt took too long (5090 > 5078), lowering kernel.perf_event_max_sample_rate to 39000
03:14:02 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1196.131945] perf: interrupt took too long (6381 > 6362), lowering kernel.perf_event_max_sample_rate to 31000
[ 1196.219793] loop4: detected capacity change from 0 to 40
[ 1196.278112] loop7: detected capacity change from 0 to 40
[ 1196.339770] perf: interrupt took too long (7983 > 7976), lowering kernel.perf_event_max_sample_rate to 25000
[ 1196.366615] syz-executor.4: attempt to access beyond end of device
[ 1196.366615] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1196.368301] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:14:02 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1196.489533] loop7: detected capacity change from 0 to 40
03:14:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1196.552082] syz-executor.1 (7284) used greatest stack depth: 22896 bytes left
[ 1196.635377] loop5: detected capacity change from 0 to 40
[ 1196.640878] FAT-fs (loop5): bogus number of reserved sectors
[ 1196.641897] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1197.486483] syz-executor.5 (7301) used greatest stack depth: 22832 bytes left
03:14:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:16 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1209.991668] loop2: detected capacity change from 0 to 40
03:14:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:16 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:14:16 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1210.002815] loop4: detected capacity change from 0 to 40
[ 1210.006387] FAT-fs (loop2): bogus number of reserved sectors
[ 1210.006857] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1210.011597] loop6: detected capacity change from 0 to 40
[ 1210.019012] syz-executor.4: attempt to access beyond end of device
[ 1210.019012] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1210.019924] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 1210.021837] loop5: detected capacity change from 0 to 40
[ 1210.033109] loop1: detected capacity change from 0 to 40
[ 1210.048418] FAT-fs (loop5): bogus number of reserved sectors
[ 1210.049462] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1210.056912] FAT-fs (loop6): bogus number of reserved sectors
[ 1210.058040] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1210.066315] loop7: detected capacity change from 0 to 40
[ 1210.080909] loop3: detected capacity change from 0 to 40
03:14:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1210.121332] loop4: detected capacity change from 0 to 40
[ 1210.164865] syz-executor.4: attempt to access beyond end of device
[ 1210.164865] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1210.165748] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:14:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:16 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1210.444566] loop4: detected capacity change from 0 to 40
[ 1210.505228] loop7: detected capacity change from 0 to 40
03:14:17 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:17 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1210.878903] loop7: detected capacity change from 0 to 40
[ 1210.899474] syz-executor.2 (7315) used greatest stack depth: 22640 bytes left
[ 1210.923736] loop4: detected capacity change from 0 to 40
[ 1210.926110] loop1: detected capacity change from 0 to 40
03:14:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:17 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1211.197583] loop5: detected capacity change from 0 to 40
[ 1211.207429] FAT-fs (loop5): bogus number of reserved sectors
[ 1211.208298] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1211.616347] perf: interrupt took too long (9980 > 9978), lowering kernel.perf_event_max_sample_rate to 20000
03:14:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1223.740466] loop4: detected capacity change from 0 to 40
03:14:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1223.752912] loop2: detected capacity change from 0 to 40
[ 1223.754805] loop5: detected capacity change from 0 to 40
[ 1223.760904] loop6: detected capacity change from 0 to 40
[ 1223.760955] FAT-fs (loop5): bogus number of reserved sectors
[ 1223.762105] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1223.769851] loop7: detected capacity change from 0 to 40
[ 1223.771646] FAT-fs (loop6): bogus number of reserved sectors
[ 1223.772323] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1223.773306] FAT-fs (loop2): bogus number of reserved sectors
[ 1223.774067] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1223.787935] loop3: detected capacity change from 0 to 40
03:14:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1224.111222] loop4: detected capacity change from 0 to 40
[ 1224.153966] loop7: detected capacity change from 0 to 40
03:14:30 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1224.478921] loop7: detected capacity change from 0 to 40
[ 1224.531182] loop4: detected capacity change from 0 to 40
03:14:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:30 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:14:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:31 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:31 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:14:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:31 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1224.780875] loop3: detected capacity change from 0 to 40
[ 1224.784917] loop4: detected capacity change from 0 to 40
[ 1224.799750] loop6: detected capacity change from 0 to 40
[ 1224.814037] FAT-fs (loop6): invalid media value (0x00)
[ 1224.814795] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1224.880152] loop7: detected capacity change from 0 to 40
[ 1224.884882] loop2: detected capacity change from 0 to 40
[ 1224.893660] FAT-fs (loop2): bogus number of reserved sectors
[ 1224.894440] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1224.907803] loop5: detected capacity change from 0 to 40
[ 1224.933714] FAT-fs (loop5): bogus number of reserved sectors
[ 1224.934848] FAT-fs (loop5): Can't find a valid FAT filesystem
03:14:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:31 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1225.252729] loop4: detected capacity change from 0 to 40
[ 1225.362756] loop7: detected capacity change from 0 to 40
03:14:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:31 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1225.629816] loop4: detected capacity change from 0 to 40
[ 1225.681482] loop7: detected capacity change from 0 to 40
03:14:32 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:14:32 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:14:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:32 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(0x0, &(0x7f0000000300))

[ 1225.915230] loop7: detected capacity change from 0 to 40
[ 1225.941594] loop4: detected capacity change from 0 to 40
03:14:47 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:14:47 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:14:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:47 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(0x0, &(0x7f0000000300))

[ 1241.184033] loop7: detected capacity change from 0 to 40
[ 1241.204555] loop6: detected capacity change from 0 to 40
03:14:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:14:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1241.217626] FAT-fs (loop6): invalid media value (0x00)
[ 1241.218267] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1241.224475] loop4: detected capacity change from 0 to 40
[ 1241.228019] loop5: detected capacity change from 0 to 40
[ 1241.244789] loop2: detected capacity change from 0 to 40
[ 1241.245838] FAT-fs (loop1): bogus number of reserved sectors
[ 1241.246678] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1241.248937] FAT-fs (loop5): bogus number of reserved sectors
[ 1241.249734] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1241.265429] loop3: detected capacity change from 0 to 40
[ 1241.269832] FAT-fs (loop2): bogus number of reserved sectors
[ 1241.270755] FAT-fs (loop2): Can't find a valid FAT filesystem
03:14:47 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(0x0, &(0x7f0000000300))

[ 1241.362866] syz-executor.4: attempt to access beyond end of device
[ 1241.362866] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1241.364695] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:14:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:14:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

[ 1241.589058] loop7: detected capacity change from 0 to 40
[ 1241.604593] loop3: detected capacity change from 0 to 40
[ 1241.640358] loop4: detected capacity change from 0 to 40
03:14:48 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1241.752796] syz-executor.4: attempt to access beyond end of device
[ 1241.752796] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1241.754942] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:14:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1241.867121] loop7: detected capacity change from 0 to 40
03:14:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

[ 1242.018111] loop4: detected capacity change from 0 to 40
[ 1242.106541] syz-executor.4: attempt to access beyond end of device
[ 1242.106541] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1242.108388] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:14:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1242.154005] loop3: detected capacity change from 0 to 40
03:14:48 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1242.233422] loop4: detected capacity change from 0 to 40
[ 1242.284772] syz-executor.4: attempt to access beyond end of device
[ 1242.284772] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1242.286403] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 1242.341723] loop7: detected capacity change from 0 to 40
03:15:02 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:15:02 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:15:02 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:15:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:15:02 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:02 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1255.720863] loop5: detected capacity change from 0 to 40
[ 1255.723021] loop3: detected capacity change from 0 to 40
[ 1255.725085] loop6: detected capacity change from 0 to 40
[ 1255.725821] FAT-fs (loop5): bogus number of reserved sectors
[ 1255.726529] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1255.766375] FAT-fs (loop6): invalid media value (0x00)
[ 1255.766920] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1255.775754] FAT-fs (loop1): bogus number of reserved sectors
[ 1255.776697] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1255.780108] loop2: detected capacity change from 0 to 40
[ 1255.783528] loop4: detected capacity change from 0 to 40
[ 1255.792641] loop7: detected capacity change from 0 to 40
[ 1255.801836] FAT-fs (loop2): bogus number of reserved sectors
[ 1255.802683] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1255.856990] syz-executor.4: attempt to access beyond end of device
[ 1255.856990] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1255.858728] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:15:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1255.996840] loop3: detected capacity change from 0 to 40
[ 1256.034844] loop4: detected capacity change from 0 to 40
03:15:02 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1256.085879] loop7: detected capacity change from 0 to 40
03:15:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1256.150277] syz-executor.4: attempt to access beyond end of device
[ 1256.150277] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1256.151409] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 1256.250922] loop3: detected capacity change from 0 to 40
03:15:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1256.466869] loop3: detected capacity change from 0 to 40
03:15:02 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:15:02 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1256.603166] loop3: detected capacity change from 0 to 40
03:15:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1256.834030] loop5: detected capacity change from 0 to 40
[ 1256.842446] FAT-fs (loop5): bogus number of reserved sectors
[ 1256.843292] FAT-fs (loop5): Can't find a valid FAT filesystem
03:15:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1269.853030] loop7: detected capacity change from 0 to 40
[ 1269.866560] FAT-fs (loop7): bogus number of reserved sectors
[ 1269.866979] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1269.867748] loop6: detected capacity change from 0 to 40
[ 1269.872711] FAT-fs (loop6): invalid media value (0x00)
[ 1269.873432] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1269.884246] FAT-fs (loop4): bogus number of reserved sectors
[ 1269.885110] FAT-fs (loop4): Can't find a valid FAT filesystem
03:15:16 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:15:16 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:15:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1269.936751] loop3: detected capacity change from 0 to 40
[ 1269.938635] loop5: detected capacity change from 0 to 40
[ 1269.942026] loop2: detected capacity change from 0 to 40
[ 1269.958090] FAT-fs (loop5): bogus number of reserved sectors
[ 1269.959038] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1269.960195] FAT-fs (loop2): bogus number of reserved sectors
[ 1269.961005] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1269.963168] FAT-fs (loop1): bogus number of reserved sectors
[ 1269.964314] FAT-fs (loop1): Can't find a valid FAT filesystem
03:15:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1270.535181] loop3: detected capacity change from 0 to 40
03:15:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:17 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1270.985660] loop3: detected capacity change from 0 to 40
[ 1270.990566] loop2: detected capacity change from 0 to 40
[ 1271.004030] FAT-fs (loop2): bogus number of reserved sectors
[ 1271.005006] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1285.774007] loop2: detected capacity change from 0 to 40
[ 1285.790684] loop7: detected capacity change from 0 to 40
[ 1285.799995] FAT-fs (loop2): bogus number of reserved sectors
[ 1285.800469] FAT-fs (loop2): Can't find a valid FAT filesystem
03:15:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:32 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:15:32 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:15:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:32 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1285.801687] FAT-fs (loop7): bogus number of reserved sectors
[ 1285.802320] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1285.811390] loop3: detected capacity change from 0 to 40
[ 1285.819371] loop6: detected capacity change from 0 to 40
[ 1285.822542] loop5: detected capacity change from 0 to 40
[ 1285.824504] FAT-fs (loop1): bogus number of reserved sectors
[ 1285.825313] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1285.833040] FAT-fs (loop6): invalid media value (0x00)
[ 1285.833565] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1285.856539] FAT-fs (loop5): invalid media value (0x00)
[ 1285.856946] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1285.887423] FAT-fs (loop4): bogus number of reserved sectors
[ 1285.887860] FAT-fs (loop4): Can't find a valid FAT filesystem
03:15:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1286.045740] loop3: detected capacity change from 0 to 40
03:15:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1286.195878] loop3: detected capacity change from 0 to 40
03:15:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1286.412182] loop3: detected capacity change from 0 to 40
03:15:32 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1286.649800] loop3: detected capacity change from 0 to 40
03:15:33 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:33 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1286.742612] loop2: detected capacity change from 0 to 40
[ 1286.752980] FAT-fs (loop2): bogus number of reserved sectors
[ 1286.753440] FAT-fs (loop2): Can't find a valid FAT filesystem
03:15:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1286.830551] loop5: detected capacity change from 0 to 40
[ 1286.839393] FAT-fs (loop5): invalid media value (0x00)
[ 1286.839801] FAT-fs (loop5): Can't find a valid FAT filesystem
03:15:33 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1286.865678] loop3: detected capacity change from 0 to 40
03:15:33 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:15:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:33 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1286.913884] FAT-fs (loop1): bogus number of reserved sectors
[ 1286.914427] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1287.092810] loop6: detected capacity change from 0 to 40
[ 1287.140078] FAT-fs (loop6): invalid media value (0x00)
[ 1287.141023] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1287.167916] loop7: detected capacity change from 0 to 40
03:15:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:47 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:15:47 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1301.048615] loop5: detected capacity change from 0 to 40
[ 1301.057903] loop6: detected capacity change from 0 to 40
[ 1301.058474] FAT-fs (loop5): invalid media value (0x00)
[ 1301.059035] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1301.060228] loop3: detected capacity change from 0 to 40
[ 1301.063851] FAT-fs (loop1): bogus number of reserved sectors
[ 1301.064374] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1301.068421] FAT-fs (loop6): bogus number of FAT sectors
[ 1301.068819] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1301.088510] loop4: detected capacity change from 0 to 40
[ 1301.089987] loop2: detected capacity change from 0 to 40
[ 1301.095366] loop7: detected capacity change from 0 to 40
[ 1301.110714] FAT-fs (loop4): invalid media value (0x00)
[ 1301.111487] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1301.113973] FAT-fs (loop2): bogus number of reserved sectors
[ 1301.114780] FAT-fs (loop2): Can't find a valid FAT filesystem
03:15:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1301.337993] loop3: detected capacity change from 0 to 40
[ 1301.439638] syz-executor.3: attempt to access beyond end of device
[ 1301.439638] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1301.440533] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:15:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1301.659730] loop3: detected capacity change from 0 to 40
[ 1301.695031] syz-executor.3: attempt to access beyond end of device
[ 1301.695031] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1301.695971] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:15:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1301.910502] loop3: detected capacity change from 0 to 40
03:15:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1301.939686] syz-executor.3: attempt to access beyond end of device
[ 1301.939686] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1301.940596] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:15:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1302.083677] loop3: detected capacity change from 0 to 40
[ 1302.121604] loop5: detected capacity change from 0 to 40
03:15:48 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:15:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:15:48 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1302.148612] FAT-fs (loop5): invalid media value (0x00)
[ 1302.149470] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1302.204769] loop2: detected capacity change from 0 to 40
[ 1302.207427] FAT-fs (loop2): invalid media value (0x00)
[ 1302.207828] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1302.221755] syz-executor.3: attempt to access beyond end of device
[ 1302.221755] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1302.222621] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1302.282572] loop1: detected capacity change from 0 to 40
[ 1302.285469] FAT-fs (loop1): bogus number of reserved sectors
[ 1302.285872] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1323.708273] loop3: detected capacity change from 0 to 40
[ 1323.750310] loop2: detected capacity change from 0 to 40
03:16:10 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:16:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:10 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:16:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:10 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1323.763725] loop1: detected capacity change from 0 to 40
[ 1323.769288] loop7: detected capacity change from 0 to 40
[ 1323.771476] loop5: detected capacity change from 0 to 40
[ 1323.773883] FAT-fs (loop4): bogus number of reserved sectors
[ 1323.774748] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1323.777318] loop6: detected capacity change from 0 to 40
[ 1323.783784] FAT-fs (loop2): invalid media value (0x00)
[ 1323.784366] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1323.787093] FAT-fs (loop6): bogus number of FAT sectors
[ 1323.788021] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1323.792286] FAT-fs (loop5): invalid media value (0x00)
[ 1323.793363] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1323.794516] FAT-fs (loop1): bogus number of reserved sectors
[ 1323.795467] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1323.882644] syz-executor.3: attempt to access beyond end of device
[ 1323.882644] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1323.883909] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1324.149810] loop3: detected capacity change from 0 to 40
[ 1324.300486] syz-executor.3: attempt to access beyond end of device
[ 1324.300486] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1324.301821] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:10 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1324.675408] loop3: detected capacity change from 0 to 40
03:16:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1324.822498] loop2: detected capacity change from 0 to 40
[ 1324.826664] FAT-fs (loop2): invalid media value (0x00)
[ 1324.827038] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1324.867998] loop1: detected capacity change from 0 to 40
03:16:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1324.894677] FAT-fs (loop1): bogus number of reserved sectors
[ 1324.895599] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1324.896902] loop5: detected capacity change from 0 to 40
[ 1324.899929] FAT-fs (loop5): invalid media value (0x00)
[ 1324.900429] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1324.913678] syz-executor.3: attempt to access beyond end of device
[ 1324.913678] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1324.915336] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1338.015490] loop4: detected capacity change from 0 to 40
[ 1338.018641] loop5: detected capacity change from 0 to 40
[ 1338.031213] FAT-fs (loop5): bogus number of FAT sectors
[ 1338.031638] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1338.033147] FAT-fs (loop4): invalid media value (0x00)
[ 1338.033583] FAT-fs (loop4): Can't find a valid FAT filesystem
03:16:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:24 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:16:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:16:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1338.042966] loop1: detected capacity change from 0 to 40
[ 1338.045095] loop2: detected capacity change from 0 to 40
[ 1338.052665] loop7: detected capacity change from 0 to 40
[ 1338.061035] FAT-fs (loop1): bogus number of reserved sectors
[ 1338.061365] loop6: detected capacity change from 0 to 40
[ 1338.061563] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1338.063805] FAT-fs (loop2): invalid media value (0x00)
[ 1338.064239] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1338.069080] loop3: detected capacity change from 0 to 40
[ 1338.076224] FAT-fs (loop7): bogus number of FAT sectors
[ 1338.076916] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1338.080574] FAT-fs (loop6): bogus number of FAT sectors
[ 1338.081455] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1338.184635] syz-executor.3: attempt to access beyond end of device
[ 1338.184635] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1338.186644] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:16:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1338.365610] loop3: detected capacity change from 0 to 40
[ 1338.537933] syz-executor.3: attempt to access beyond end of device
[ 1338.537933] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1338.539265] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:16:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1338.941739] loop3: detected capacity change from 0 to 40
[ 1339.022051] syz-executor.3: attempt to access beyond end of device
[ 1339.022051] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1339.023314] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:16:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:39 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:16:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:39 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:16:39 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:16:39 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:16:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1353.592938] loop3: detected capacity change from 0 to 40
03:16:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1353.596017] loop1: detected capacity change from 0 to 40
[ 1353.598434] FAT-fs (loop1): bogus number of reserved sectors
[ 1353.598867] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1353.601701] loop7: detected capacity change from 0 to 40
[ 1353.624908] loop2: detected capacity change from 0 to 40
[ 1353.625164] loop5: detected capacity change from 0 to 40
[ 1353.642341] FAT-fs (loop5): bogus number of FAT sectors
[ 1353.643104] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1353.653837] FAT-fs (loop2): invalid media value (0x00)
[ 1353.654425] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1353.677588] loop6: detected capacity change from 0 to 40
[ 1353.711839] syz-executor.3: attempt to access beyond end of device
[ 1353.711839] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1353.712800] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1353.801775] syz-executor.7: attempt to access beyond end of device
[ 1353.801775] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1353.803902] Buffer I/O error on dev loop7, logical block 10, lost async page write
03:16:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1354.016273] loop3: detected capacity change from 0 to 40
03:16:40 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1354.099334] syz-executor.3: attempt to access beyond end of device
[ 1354.099334] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1354.101414] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:16:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1354.349373] loop7: detected capacity change from 0 to 40
[ 1354.500755] loop3: detected capacity change from 0 to 40
[ 1354.624801] syz-executor.7: attempt to access beyond end of device
[ 1354.624801] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1354.626663] Buffer I/O error on dev loop7, logical block 10, lost async page write
03:16:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:41 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:16:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1354.790964] loop6: detected capacity change from 0 to 40
[ 1354.817102] loop5: detected capacity change from 0 to 40
[ 1354.835890] loop2: detected capacity change from 0 to 40
03:16:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1354.842613] FAT-fs (loop5): bogus number of FAT sectors
[ 1354.843433] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1354.847223] FAT-fs (loop2): invalid media value (0x00)
[ 1354.847631] FAT-fs (loop2): Can't find a valid FAT filesystem
03:16:41 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:16:41 executing program 7:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1354.903617] FAT-fs (loop4): bogus number of reserved sectors
[ 1354.904389] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1354.955405] loop1: detected capacity change from 0 to 40
[ 1354.999226] FAT-fs (loop1): bogus number of reserved sectors
[ 1355.000066] FAT-fs (loop1): Can't find a valid FAT filesystem
03:16:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1355.321845] loop7: detected capacity change from 0 to 40
03:16:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1355.429871] loop7: detected capacity change from 0 to 40
[ 1355.444315] FAT-fs (loop7): bogus number of FAT sectors
[ 1355.444725] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 1355.505572] loop3: detected capacity change from 0 to 40
[ 1355.564401] syz-executor.3: attempt to access beyond end of device
[ 1355.564401] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1355.565298] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:16:42 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

03:16:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1355.876419] loop3: detected capacity change from 0 to 40
[ 1355.947004] syz-executor.3: attempt to access beyond end of device
[ 1355.947004] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1355.948658] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1355.952895] loop6: detected capacity change from 0 to 40
03:16:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1371.112543] loop3: detected capacity change from 0 to 40
[ 1371.113974] loop6: detected capacity change from 0 to 40
[ 1371.116747] loop1: detected capacity change from 0 to 40
[ 1371.117704] loop7: detected capacity change from 0 to 40
[ 1371.118842] FAT-fs (loop1): bogus number of reserved sectors
03:16:57 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:57 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:57 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:16:57 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:16:57 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 1371.119500] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1371.131651] loop5: detected capacity change from 0 to 40
[ 1371.135166] FAT-fs (loop4): bogus number of reserved sectors
[ 1371.135586] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1371.144746] loop2: detected capacity change from 0 to 40
[ 1371.192827] FAT-fs (loop2): bogus number of FAT sectors
[ 1371.193922] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1371.244938] syz-executor.3: attempt to access beyond end of device
[ 1371.244938] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1371.246040] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1384.922370] loop7: detected capacity change from 0 to 40
03:17:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:11 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

03:17:11 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:11 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:17:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1384.925647] loop3: detected capacity change from 0 to 40
[ 1384.928622] loop5: detected capacity change from 0 to 40
[ 1384.939360] loop1: detected capacity change from 0 to 40
[ 1384.941518] FAT-fs (loop1): bogus number of reserved sectors
[ 1384.941959] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1384.942089] loop2: detected capacity change from 0 to 40
[ 1384.945064] loop6: detected capacity change from 0 to 40
[ 1384.973680] FAT-fs (loop2): bogus number of FAT sectors
[ 1384.974258] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1384.997778] loop4: detected capacity change from 0 to 40
03:17:11 executing program 7:
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1385.011176] FAT-fs (loop4): bogus number of FAT sectors
[ 1385.011573] FAT-fs (loop4): Can't find a valid FAT filesystem
03:17:11 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:17:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1385.096260] loop7: detected capacity change from 0 to 40
[ 1385.179418] loop3: detected capacity change from 0 to 40
[ 1385.266884] syz-executor.7: attempt to access beyond end of device
[ 1385.266884] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1385.267987] Buffer I/O error on dev loop7, logical block 10, lost async page write
03:17:11 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:17:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1385.550109] loop3: detected capacity change from 0 to 40
[ 1385.573207] FAT-fs (loop7): bogus number of reserved sectors
[ 1385.573750] FAT-fs (loop7): Can't find a valid FAT filesystem
03:17:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1385.804228] loop3: detected capacity change from 0 to 40
03:17:27 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:27 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:17:27 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:17:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:27 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:17:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1400.931059] loop7: detected capacity change from 0 to 40
[ 1400.954076] loop2: detected capacity change from 0 to 40
[ 1400.957292] loop3: detected capacity change from 0 to 40
[ 1400.959873] loop4: detected capacity change from 0 to 40
[ 1400.963792] FAT-fs (loop2): bogus number of FAT sectors
[ 1400.964189] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 1400.983930] loop5: detected capacity change from 0 to 40
[ 1400.993361] loop1: detected capacity change from 0 to 40
[ 1401.007409] loop6: detected capacity change from 0 to 40
[ 1401.010297] FAT-fs (loop1): bogus number of reserved sectors
[ 1401.011090] FAT-fs (loop1): Can't find a valid FAT filesystem
03:17:27 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1401.178625] syz-executor.4: attempt to access beyond end of device
[ 1401.178625] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1401.180524] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:17:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:27 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 1401.292886] loop7: detected capacity change from 0 to 40
03:17:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1401.474937] loop3: detected capacity change from 0 to 40
[ 1401.513581] syz-executor.7: attempt to access beyond end of device
[ 1401.513581] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1401.515767] Buffer I/O error on dev loop7, logical block 10, lost async page write
03:17:28 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:17:28 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

03:17:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1401.846921] loop7: detected capacity change from 0 to 40
[ 1401.881913] loop3: detected capacity change from 0 to 40
03:17:28 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)

03:17:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:28 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1401.988091] syz-executor.7: attempt to access beyond end of device
[ 1401.988091] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1401.990600] Buffer I/O error on dev loop7, logical block 10, lost async page write
03:17:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:28 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:17:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1402.106466] loop3: detected capacity change from 0 to 40
[ 1402.108061] loop1: detected capacity change from 0 to 40
[ 1402.127924] FAT-fs (loop1): bogus number of reserved sectors
[ 1402.128819] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1402.164735] loop5: detected capacity change from 0 to 40
[ 1402.194349] loop2: detected capacity change from 0 to 40
[ 1402.218789] loop6: detected capacity change from 0 to 40
03:17:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:41 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1415.648966] loop6: detected capacity change from 0 to 40
03:17:41 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1415.655431] loop2: detected capacity change from 0 to 40
[ 1415.670334] FAT-fs (loop0): bogus number of reserved sectors
[ 1415.670845] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 1415.688056] loop5: detected capacity change from 0 to 40
03:17:41 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1415.695759] loop3: detected capacity change from 0 to 40
[ 1415.697935] loop1: detected capacity change from 0 to 40
[ 1415.712394] loop4: detected capacity change from 0 to 40
[ 1415.715298] FAT-fs (loop4): bogus number of FAT sectors
[ 1415.715703] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1415.722828] FAT-fs (loop1): bogus number of reserved sectors
[ 1415.723971] FAT-fs (loop1): Can't find a valid FAT filesystem
03:17:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:42 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

[ 1415.885061] loop4: detected capacity change from 0 to 40
[ 1415.899095] FAT-fs (loop4): bogus number of FAT sectors
[ 1415.899679] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1415.930586] loop3: detected capacity change from 0 to 40
03:17:42 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1415.969751] loop6: detected capacity change from 0 to 40
[ 1416.005202] syz-executor.3: attempt to access beyond end of device
[ 1416.005202] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1416.007197] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1416.078111] FAT-fs (loop4): bogus number of reserved sectors
[ 1416.079098] FAT-fs (loop4): Can't find a valid FAT filesystem
03:17:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:17:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1416.241210] loop6: detected capacity change from 0 to 40
03:17:42 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1416.318909] loop3: detected capacity change from 0 to 40
[ 1416.437439] loop6: detected capacity change from 0 to 40
[ 1416.445800] syz-executor.3: attempt to access beyond end of device
[ 1416.445800] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1416.447493] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:17:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

[ 1416.662560] loop3: detected capacity change from 0 to 40
[ 1416.705436] syz-executor.3: attempt to access beyond end of device
[ 1416.705436] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1416.706444] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:17:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:17:55 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1429.309045] loop6: detected capacity change from 0 to 40
03:17:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:55 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:17:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1429.327202] loop3: detected capacity change from 0 to 40
03:17:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1429.344000] loop5: detected capacity change from 0 to 40
[ 1429.350564] FAT-fs (loop0): bogus number of reserved sectors
[ 1429.351202] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 1429.400525] loop4: detected capacity change from 0 to 40
[ 1429.402574] loop1: detected capacity change from 0 to 40
[ 1429.404248] loop2: detected capacity change from 0 to 40
[ 1429.422872] FAT-fs (loop1): bogus number of reserved sectors
[ 1429.423841] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1429.506578] syz-executor.3: attempt to access beyond end of device
[ 1429.506578] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1429.508192] Buffer I/O error on dev loop3, logical block 10, lost async page write
03:17:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1429.704535] syz-executor.4: attempt to access beyond end of device
[ 1429.704535] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1429.706437] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 1429.779846] loop6: detected capacity change from 0 to 40
03:17:56 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:17:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1430.065025] loop4: detected capacity change from 0 to 40
[ 1430.073282] FAT-fs (loop4): bogus number of reserved sectors
[ 1430.074273] FAT-fs (loop4): Can't find a valid FAT filesystem
03:17:56 executing program 3:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1430.227650] loop3: detected capacity change from 0 to 40
[ 1430.235512] loop6: detected capacity change from 0 to 40
[ 1430.258454] FAT-fs (loop3): invalid media value (0x00)
[ 1430.259370] FAT-fs (loop3): Can't find a valid FAT filesystem
03:17:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1430.398767] loop2: detected capacity change from 0 to 40
03:17:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:17:56 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:17:56 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1430.631247] loop3: detected capacity change from 0 to 40
[ 1430.632935] loop6: detected capacity change from 0 to 40
[ 1430.636511] loop5: detected capacity change from 0 to 40
[ 1430.652615] loop1: detected capacity change from 0 to 40
[ 1430.679690] FAT-fs (loop1): invalid media value (0x00)
[ 1430.680934] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1443.270010] loop3: detected capacity change from 0 to 40
[ 1443.270054] loop6: detected capacity change from 0 to 40
[ 1443.280656] loop7: detected capacity change from 0 to 40
[ 1443.284583] FAT-fs (loop7): bogus number of reserved sectors
[ 1443.285015] FAT-fs (loop7): Can't find a valid FAT filesystem
03:18:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:09 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:09 executing program 7:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1443.295396] loop1: detected capacity change from 0 to 40
[ 1443.322184] FAT-fs (loop1): invalid media value (0x00)
[ 1443.322925] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1443.337740] loop2: detected capacity change from 0 to 40
[ 1443.356039] loop5: detected capacity change from 0 to 40
[ 1443.361738] loop4: detected capacity change from 0 to 40
[ 1443.367838] FAT-fs (loop0): bogus number of reserved sectors
[ 1443.368647] FAT-fs (loop0): Can't find a valid FAT filesystem
[ 1455.746457] loop5: detected capacity change from 0 to 40
03:18:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:22 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1455.760006] loop2: detected capacity change from 0 to 40
[ 1455.762880] loop3: detected capacity change from 0 to 40
[ 1455.767393] loop6: detected capacity change from 0 to 40
[ 1455.771036] loop1: detected capacity change from 0 to 40
03:18:22 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:22 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:22 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1455.776050] FAT-fs (loop1): invalid media value (0x00)
[ 1455.776570] FAT-fs (loop1): Can't find a valid FAT filesystem
03:18:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1455.869605] loop4: detected capacity change from 0 to 40
[ 1455.945925] loop5: detected capacity change from 0 to 40
[ 1455.950483] loop6: detected capacity change from 0 to 40
03:18:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1456.245534] loop5: detected capacity change from 0 to 40
[ 1456.269003] loop6: detected capacity change from 0 to 40
03:18:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1456.482290] loop5: detected capacity change from 0 to 40
[ 1456.552538] loop6: detected capacity change from 0 to 40
03:18:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1456.755658] loop5: detected capacity change from 0 to 40
03:18:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:38 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:38 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1471.786876] loop4: detected capacity change from 0 to 40
[ 1471.790274] loop7: detected capacity change from 0 to 40
[ 1471.814007] loop5: detected capacity change from 0 to 40
[ 1471.817027] loop6: detected capacity change from 0 to 40
[ 1471.817242] loop2: detected capacity change from 0 to 40
[ 1471.821481] loop3: detected capacity change from 0 to 40
[ 1471.832590] loop0: detected capacity change from 0 to 40
[ 1471.835369] loop1: detected capacity change from 0 to 40
[ 1471.839604] FAT-fs (loop3): bogus number of FAT sectors
[ 1471.840351] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1471.851566] FAT-fs (loop1): invalid media value (0x00)
[ 1471.852402] FAT-fs (loop1): Can't find a valid FAT filesystem
03:18:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1472.126487] loop6: detected capacity change from 0 to 40
[ 1472.191210] loop5: detected capacity change from 0 to 40
03:18:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1472.264307] loop2: detected capacity change from 0 to 40
[ 1472.287670] loop0: detected capacity change from 0 to 40
03:18:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1472.393833] loop6: detected capacity change from 0 to 40
[ 1472.456664] loop5: detected capacity change from 0 to 40
03:18:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1472.603759] syz-executor.0: attempt to access beyond end of device
[ 1472.603759] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1472.605846] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1472.638865] loop2: detected capacity change from 0 to 40
[ 1472.750480] loop6: detected capacity change from 0 to 40
[ 1472.769514] loop5: detected capacity change from 0 to 40
03:18:39 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1472.923510] loop0: detected capacity change from 0 to 40
[ 1472.991897] syz-executor.0: attempt to access beyond end of device
[ 1472.991897] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1472.993819] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:18:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:53 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:53 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:53 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:53 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:53 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:18:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1486.810213] loop2: detected capacity change from 0 to 40
[ 1486.811769] loop6: detected capacity change from 0 to 40
[ 1486.821686] loop1: detected capacity change from 0 to 40
[ 1486.833922] FAT-fs (loop1): invalid media value (0x00)
[ 1486.834670] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1486.846790] loop5: detected capacity change from 0 to 40
[ 1486.846868] loop4: detected capacity change from 0 to 40
[ 1486.850616] loop7: detected capacity change from 0 to 40
[ 1486.903550] syz-executor.6: attempt to access beyond end of device
[ 1486.903550] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1486.905216] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:18:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1487.092882] loop5: detected capacity change from 0 to 40
03:18:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1487.274675] loop2: detected capacity change from 0 to 40
03:18:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1487.342906] loop6: detected capacity change from 0 to 40
[ 1487.454916] syz-executor.6: attempt to access beyond end of device
[ 1487.454916] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1487.456619] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1487.483017] loop5: detected capacity change from 0 to 40
03:18:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1487.589940] loop2: detected capacity change from 0 to 40
03:18:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:18:54 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1487.820708] loop6: detected capacity change from 0 to 40
03:18:54 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1487.927374] syz-executor.6: attempt to access beyond end of device
[ 1487.927374] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1487.929000] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1487.932998] loop5: detected capacity change from 0 to 40
[ 1487.948837] loop1: detected capacity change from 0 to 40
[ 1487.963171] FAT-fs (loop1): invalid media value (0x00)
[ 1487.963915] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1487.981169] FAT-fs (loop4): bogus number of reserved sectors
[ 1487.981965] FAT-fs (loop4): Can't find a valid FAT filesystem
03:19:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:07 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:19:07 executing program 4:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:07 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:19:07 executing program 0:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1501.671147] loop1: detected capacity change from 0 to 40
[ 1501.683819] FAT-fs (loop1): bogus number of FAT sectors
[ 1501.684197] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1501.686794] loop6: detected capacity change from 0 to 40
[ 1501.693354] loop2: detected capacity change from 0 to 40
03:19:07 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:07 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1501.723888] loop0: detected capacity change from 0 to 40
[ 1501.737203] loop5: detected capacity change from 0 to 40
[ 1501.752584] loop7: detected capacity change from 0 to 40
03:19:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1501.862986] syz-executor.6: attempt to access beyond end of device
[ 1501.862986] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1501.864761] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1501.997667] loop2: detected capacity change from 0 to 40
03:19:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1502.301220] loop5: detected capacity change from 0 to 40
[ 1502.360482] loop6: detected capacity change from 0 to 40
[ 1502.381675] loop2: detected capacity change from 0 to 40
03:19:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1502.524982] syz-executor.6: attempt to access beyond end of device
[ 1502.524982] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1502.527953] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1502.648513] loop5: detected capacity change from 0 to 40
03:19:25 executing program 0:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:25 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:19:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:25 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:19:25 executing program 4:
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1519.416962] loop6: detected capacity change from 0 to 40
[ 1519.420077] loop3: detected capacity change from 0 to 40
[ 1519.434564] loop1: detected capacity change from 0 to 40
[ 1519.438811] loop5: detected capacity change from 0 to 40
[ 1519.443826] loop4: detected capacity change from 0 to 40
[ 1519.454099] loop7: detected capacity change from 0 to 40
[ 1519.455343] loop2: detected capacity change from 0 to 40
[ 1519.457364] FAT-fs (loop1): bogus number of FAT sectors
[ 1519.458199] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1519.474419] loop0: detected capacity change from 0 to 40
[ 1519.509059] syz-executor.5: attempt to access beyond end of device
[ 1519.509059] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1519.509970] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:19:25 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1519.561281] syz-executor.6: attempt to access beyond end of device
[ 1519.561281] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1519.562186] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:19:25 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1519.624632] loop3: detected capacity change from 0 to 40
03:19:25 executing program 4:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1519.669222] loop5: detected capacity change from 0 to 40
[ 1519.703918] loop4: detected capacity change from 0 to 40
03:19:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1519.738354] syz-executor.5: attempt to access beyond end of device
[ 1519.738354] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1519.738891] loop7: detected capacity change from 0 to 40
[ 1519.739258] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1519.740394] loop2: detected capacity change from 0 to 40
03:19:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1519.815472] syz-executor.7: attempt to access beyond end of device
[ 1519.815472] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1519.817257] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1519.840970] loop6: detected capacity change from 0 to 40
[ 1519.844952] FAT-fs (loop3): bogus number of reserved sectors
[ 1519.845479] FAT-fs (loop3): Can't find a valid FAT filesystem
03:19:26 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1519.929840] syz-executor.6: attempt to access beyond end of device
[ 1519.929840] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1519.930990] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1519.973444] loop4: detected capacity change from 0 to 40
03:19:26 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x2c27, &(0x7f0000000480)={0x0, 0xe28a, 0x21, 0x1, 0x3e0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "950b8bbc34bf9b44a5f783e82416e13437591aaea9e99d56d9fa2b62c996fb937ef8e5bb361a4eb72e3b338b3d456d93c2993fc14a84c9df4fca9a60ad24fe51c5a3fc272feb82e0053d62793dcbb53a9aac338c90f5cdae9589decd38f50a09d93770fe9fffa2570bae21a6c16607cb009087b6f6850ff959c7cde98a4e32896d4e19a961e665ed3624ef5c69dc0964b4e762a597e962c8f0c77006ae2c2e61c9d589d8075d51ad024b5e6af6d9ad992d0bf7c9b663e91485d32a9e7ee3febf65c5d7f7d8cf1d6ee7a1d12df1d9a056d2c44371e7d7376e0baa911ce2fb91f811506149e1b2bcf3dc0e9c94a294388d4636547a098e57bad5c0bf1ee2d21aabc22fc193ed1e85886abdeb6944ead2082984e3b7724633f58c76185a0e7814cf6745bb5ca89b88abdf102a0bcf9fb0c1b2eed6553ee3a0eab3b9bcebf70187adf95f5a2564a6d081679f6988f7e0fffda8c75027eec9fd9177d245704a2f1348f6aa2141357964efb85de30e3be48ba72b34f46a53c393aacb648b728316adf6edc89a128dac296e8022e3457cda709d3f4ee82e744910890ba79420b32572d19d21d965bb5f7be6713d2aff1c6a47589d00d173a4f7f75c191247fb6eea511c85f1f2ca3389aeec86fa05b79a53eadd44f6928fd6492e18d1de7614e68ab21dfd71508786e535de92de39236ea42fbaa81ae85784b5c24c89f6bee084493fc227b3c9f620efa3b7c13b48c1bd1bc20f5972f2a94a68b6717e2f0524741ee7d55a39eee078436f0af9a982a0953bd1cd57849007d08bfbf1dfe814c8448539baa1c5b8ced883da94c7b946cb9e205c83941172aa1bc8e710fe6efec7ef16639408348485e6890ea289fabb6a872c634aa21059ca2bd3cf3deae4bfada536780a9f11ef2a84a17bc2e5ffefc8b7f1aa708f2d89e496578b78381a82916a7a2b36413b76171af62915c76d20d2ec695f0d7dd0ae6a5a890e1070500a62f4267321900efe7073474e030a3ab8086275b552ac0ca8e94f438307b354e39005cddc582c5da0f3753b37643cc13bdff1efef66055f16e871e8ad26a502e5e7509d05f98f32f3f0b5d563c498e860b5b931e36ccd1e7d7f5a0904288aecd9c6a5bbda28d43169cb7967d69d124f5cf6fd1574ba9a9eabd5b8b0b27bb48ac5659c2734e21eb8cd71ba8c7fd8ff7b7cb65d7d127ff0f53fc25d2f3eb05586d7299eb8cb1eb255a460c9a05151ceead842b1c21e8c19ebecf6cb1a7f9a19a254c9e39bfbcb905d6d0265b37fae4d15ef8e4c56f82bf976662e0d258c2e7ba2ebe6ca3e9ea3d0ea52ee8b67d8f318a2a27a716977d4fe916264e11788a1e80dde6a0100b156b89f11e4e3bf78c66d535e46477fcd9f568578523406f21a6796ac3c1e0f6ba31a471f359579b103299799606a766a1ca7148c153d85c5420bd1e1ee0564c08c88dec5d248eccf1f63cf01015197f6a3fa61a598e8ad327cd6dfe3cf9f0b4e685dc0e9b10908f68b2290a3741a90991e1f67c04015a780a87c89644280b032722ceb2531bbed8e4459edad3409cbe1ddfd071052277cd908cebe5c00009c3f3a33b9ec60b200e700eb9d48954461c82591a5ffeec87f12d081d30e4c61999879c607cc653a3b2478439b42ea05b469534f20653d8d61a55e9761dd331386109af0b2453eb2e8ba54e7c16e890727c133b442956db67278d661166a9290d4fe8008821649eeefba119ba3776597654a546611693db7b3fc63aa2d01047dbf8a6db146b0fcf3afc8d819575f642dc87ffbd0a42bb68c20f1ea1dac2804db95adab571d2ca60c679a8db02ba3cd5765713e5c3748205b56fd3f6f6e32f628c5b986b1f9d218df36b03db78ee74544555dfa7506a939f48c10a9df0620a841f7e9c67cbf5b367c4c0bbd69b76956326f1737d143d49619691433473fd5fed20fc5710ff0f7c6288a4071f02f741532e3080d59b039466ab62972ecc563ee511e8a9d56fa7179569f1d2420ddc90c62d654331771dd8515ecb6d9030901de113996870c1d921fca0d39a5da13183ab12506008f3074a26ef1990fdabfea0d42d346748959a35e0e07c447c03a591c54ae61186cf579e2636e89d3b3f06c5a019330dbb2d313cff036624a789abb4d5a76ea83e31774be2280de447a053e29a2cb6c4fe62292b61e6513098cc0269a6d526aab3dba820ebe9408839a8f96a5cd09bb29dd6e1b2bdfd31d6b93ceb47976f6650f0c294b061fd25118d364cb0654b0f87741953c3fb2a590394179678b1fab1390db08d599bc418f168f4aa56ebbf3fc9f1597151c83e989770349402695c8b2bfd2b488e0735a071650d4fe1420804c66ce4261424f60424c0390397e7eea3ca904173b8620d74799ae84204abc9548801f3ca29973a33110c6b13d0aaaf316948e1d6fb99ca3150864361418d7f05f39ba7b9026a356f185ad23542e6f0af8d71989486bde21d7451acf86bab6ed27271f395ab31e88e6cd6ff6da710e6ae680fc1711a1319694f9ac56cdcfd46a10db35295627a7dcd4c605e98e455164ff21927b904929973b7520f752b76e6cd3732e540371fd78a5a42611f42d0b185d213a47abd2dfdc37c79894d3323900631655bc263fb5e8aa6b6f32c9f8ced4acc81c6d4bc95fa48faee5697d4221cc576bae07afe10057cf40423318fcd32c3158d65eb770728028f8e5354069ec4f4f63b9a4cd68172397bfa5371a43697e7bc26d777c55ce5f0a225324397a7567b0b969604db7d32c95b05017db53bad3cc1ac3f3d3bc0287d7794f9baf0f1a7064258586e39743dc150637d84c47fce0feb9e9f3c1fbddcdc9de4a1011a54cf9a74fd28b029f0bfb45f723e4dbe9910a203e98fdbe6fa0d562ead671d5ecaba5f2f29d8e37dcae6b3b6e0cc4917ef4da6b9f0baacbc51840ebaf85f0f7d11897d8887a35d99f50eedefcb07913a665d0843f68a73767df874c5995936bf5c03bf40ff54e179c094127af6254e22da82484472eca7a48bf932c2470ad5c6bc43b2392ebae24692e73ae1c6e0c03eb958b78952531156d7509da69cfd9d8e5068e560fc7f28a974490ecbbc79aafb65f525e5b8d04aaed3b683c6b23703d6ff361f5bd57a9b62ffa5e994b9bbaaf582688f78bc13ef909f9634324fbf6859646b673e2b1d80f56a58bffdac390c245d8cc3036da0e6656f24af365da36ec6cc74847ccfb4a36115c1f19cc6e848f909089a2ac660d1223765295f37c442f987ed98b3f7b3b963213d2e6289b147c80dfc239800f0d48d37fc4739fa521dd686f5413261a9cd06f1c09c598d3d91e66db106ef212c3a1b8c02834f9cc3634ca938df7a478c25b55f0c654bc4f70057a60a7bbf02706f048329d3ad3052f23b698b8ffb97085f121249359320efff2add0c35db60e7cf74e0169e9cf13c0c3725768fea6e928a213e61bae007bc307e4fe63b0905772c469747b5884509acce8b7c368b417b44460d6e5d3ab9dec690c43a029122ba37216d48a0d7eb519fcd0257df3a693711ffa60c8a3855713f359c3780f4a40694982d7ce84e40f03faaf942730e9daa8777d7a8909999df47955ea430bb443789f047066426df0a7fe04f741420b0db3c5e54f0b03e60b5897e96c4bf34f324ef899b9ea4b36c44b2496f043e7be07f3a58bb094caab78f168d9486d0dfd1adc97ae3ce5e710a9e47e6b5f8360417d1462acb4062057dda820c5d4b4cc90a13732fc2b52b12b2d255cb01f529a597e5ee29eb36e0c479896ae189103580a633c4a09621043df2205d00b45a84cd8ebe81c483cdf66994827672942dba7674e2090829a33744394e7b9c81ff273a5df6e0eceaa9b2abad932c8740d3b0b977e91fc03f4020a4459fa582d48673215c14f0da08a82a67b8bb804915c9d1218d7a9de94033a32725f30f9f9e81987d63cca018d12c3894b7fbeb95901f382bdee8595b2e6b7f42d0ada636db6e000625dfaa79a6309b2dd279fff258cefcc044a06bdbe489230ffdd90efdda0df2da52742a59e24b8c50ec68790fc62207ac2cd6d4997d6a4faa5e2645e30228f39094750eef3ce56b1569438750ff50130c64e8f37d8ff49fa9d9c0d409e9f60f347cb386946ce117b4c40a9a53c7359d3a966c7326263270eb16876ff1e6da42a73a634ac661327a916b8416bac1bb49a5e9b8da0dc7170d833d07df1fab73a7f202aaa768049efefc4b399611a6fdbe29aaccfb6416be56f30e9fce9602d0cf57c1c70b321974e3518434ca828f1a51d4191b99e0e0a7451ba3b4f2b5cf95b44fc417abcc5b0b13bae366614f75c98aade49013475086a48d9e64ba7701d6aa7997132e56b97b962921a73e7a70de0f32c06d0117b24708867f7247024a28096607669001e87ec188812d0eab256b0296e0f70c47c6ca89dd511c1362523930a546a44ebc421e03e979a5bba49732d437d82e7555e5a10c4a1fd933c6c50380d3d7a147586e4033005f533f7ade992af2696c4d122311a473f97644095805a18da9d0b52e2f72dd386a3d14f478c7ba144503ee2e94bfb3853fb37adca2f7bf51872fd3a54e392c8b6dbf142c6ae83ca21575ca6a1d3fa1b1de90f4a816d093561f88f6e6aaf782d08c798147a64851759b8667a1531da2d571e1457edd13d7d0929ae02daed710e9ae1a2796e38a1c2921dd2fd57f825f4cf95f02e34e9cf3e894d57cfde113224210caec0b4ab2901262b6e36d96ea1febc8c73a12f0e40f6b47b13709cfecbec1420fcb5cdc2b5986d0a54fe0459ba5f77b90bc9d2cbdd86663910fed740f6f41d94cb1b3818a550f8da00f6d17b150e4872fec8712a7490a1782a82b9680ceeeb41fdb8c95c1d3d574437d3bd1915020d96e411978c1738d7683b62f5dbf6280dc72860a2b6fa1de548e6a22987f1d3b5eb010172d7c684e9943e32b140fc51cd8c7046a2cc604244a7aad63a9edd2f64c31c8fe127a2cb965ac0a374b24e475bc78f4cbdda40b39b282af1d192bd2a967fc6b7811f8ef8be8d65cd8d3ddbf1e69989c073a16c9c1896ca8a734bc6a4df17d39d30a8b8c1ec3d93534747e8e9a769f60a9e10cc69ea5903993bc481630e1df50eedc1a1a51d96de8fcd27a3ba4108349c92d52b81886d19217b10508527634c58af2806b2dae8c71aaeb6946896decd03266a75bccf676d86064188d0da683b3b38a3c03fc22bbf6c8d8bdea829bc5aa5d5521da096718aa6a629f174e510b1215b49f27db3c145555baa329d15de80976748b68648482cb8cf9e79cc3acefe4d8436c04e882934abc30ac5886d10a54b759f1b4407d1ea9d8cc1049e4f60c9dc96dbda9dbc581d31bb3dcfe32598bac97974d6c8625a2be3d48ef98edfbf0725cc18f21b50a67b0de8ff6544cd67ce0d43fcc1d248"})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
openat(r1, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r2, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x2c27, &(0x7f0000000480)={0x0, 0xe28a, 0x21, 0x1, 0x3e0, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "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"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1520.400054] loop2: detected capacity change from 0 to 40
[ 1520.409423] loop5: detected capacity change from 0 to 40
[ 1520.412244] loop4: detected capacity change from 0 to 40
[ 1520.414600] loop7: detected capacity change from 0 to 40
[ 1520.415770] loop6: detected capacity change from 0 to 40
[ 1520.424339] loop1: detected capacity change from 0 to 40
[ 1520.425834] FAT-fs (loop1): bogus number of FAT sectors
[ 1520.426484] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1520.487759] loop0: detected capacity change from 0 to 40
[ 1520.490793] syz-executor.5: attempt to access beyond end of device
[ 1520.490793] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1520.491787] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1520.538428] syz-executor.6: attempt to access beyond end of device
[ 1520.538428] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1520.539332] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:19:26 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:26 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1520.625680] syz-executor.7: attempt to access beyond end of device
[ 1520.625680] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1520.626969] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1520.683451] loop5: detected capacity change from 0 to 40
[ 1520.697503] loop4: detected capacity change from 0 to 40
[ 1520.698676] loop2: detected capacity change from 0 to 40
03:19:27 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x2c27, &(0x7f0000000480)={0x0, 0xe28a, 0x21, 0x1, 0x3e0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "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"})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
openat(r1, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r2, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1520.769707] syz-executor.5: attempt to access beyond end of device
[ 1520.769707] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1520.770923] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1520.781325] loop6: detected capacity change from 0 to 40
03:19:27 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1520.802778] loop0: detected capacity change from 0 to 40
03:19:27 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1520.861961] syz-executor.6: attempt to access beyond end of device
[ 1520.861961] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1520.862867] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1520.934572] loop7: detected capacity change from 0 to 40
[ 1520.985904] loop4: detected capacity change from 0 to 40
03:19:39 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x2c27, &(0x7f0000000480)={0x0, 0xe28a, 0x21, 0x1, 0x3e0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
openat(r1, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:39 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x2c27, &(0x7f0000000480)={0x0, 0xe28a, 0x21, 0x1, 0x3e0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
openat(r1, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:39 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x2c27, &(0x7f0000000480)={0x0, 0xe28a, 0x21, 0x1, 0x3e0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "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", "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"})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
openat(r1, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:39 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:39 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1533.303059] loop3: detected capacity change from 0 to 40
[ 1533.316897] loop6: detected capacity change from 0 to 40
[ 1533.325770] loop1: detected capacity change from 0 to 40
[ 1533.332950] loop0: detected capacity change from 0 to 40
[ 1533.337621] loop2: detected capacity change from 0 to 40
[ 1533.341773] loop5: detected capacity change from 0 to 40
[ 1533.360014] loop7: detected capacity change from 0 to 40
[ 1533.403385] loop4: detected capacity change from 0 to 40
[ 1533.539495] syz-executor.6: attempt to access beyond end of device
[ 1533.539495] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1533.541684] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1533.577859] syz-executor.5: attempt to access beyond end of device
[ 1533.577859] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1533.579975] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:19:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1546.080403] loop1: detected capacity change from 0 to 40
03:19:52 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x2c27, &(0x7f0000000480)={0x0, 0xe28a, 0x21, 0x1, 0x3e0, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005e2c0)={0x0, 0x0, "d1f14792bb10750ea9e86f2109c85a306eac969c225abcf9542493077458dc50dd5546ef22c70a8bd6b5a45e86c81b77924f226ab6e09915cbe829241e71703056bc95c7386df10315c79284a94c638e15bb1a293b37fce9ccef990b6b10fb9c04f3786fecc4e7d36ad34a037174328cfbd507df8590cdb8df705efb63f6d543b899d97ca79e8c4414fd5da623d28f9252c13428af0998f63ad30f909619b043f0a7aa899a6d92a2a5e61460066587029f38eff5aeafc3e8b67b97ebf6c447380bd9fd03521069fdc0d128d6041c0c873b2d58b8881c4a4c74e260693309049d39b69a09df12caf88245f7f4dc058c0fb2295afbe717134ff663413f7d075e5e", "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"})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x301c03, 0x0)
openat(r1, &(0x7f0000000180)='./file2\x00', 0x8080, 0x25)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r3, r2, 0x0, 0xfffffdef)

03:19:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x108)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/keyboard', 0x66200, 0xa4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x6, 0x2, 0x0, 0x7, 0x0, 0x2c, 0x40004, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x9e, 0x7}, 0x20, 0x10000, 0x0, 0x5, 0x3f, 0xfffffffd, 0x7, 0x0, 0x7f, 0x0, 0xffffffffffffffc0}, 0xffffffffffffffff, 0xc, r2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000})

03:19:52 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:19:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:52 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1020a8, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:19:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:52 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1546.101527] loop4: detected capacity change from 0 to 40
[ 1546.104243] loop0: detected capacity change from 0 to 40
[ 1546.110412] loop5: detected capacity change from 0 to 40
[ 1546.113736] loop6: detected capacity change from 0 to 40
[ 1546.128575] loop2: detected capacity change from 0 to 40
03:19:52 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1546.204861] syz-executor.6: attempt to access beyond end of device
[ 1546.204861] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1546.205820] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:19:52 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1020a8, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1546.277408] syz-executor.5: attempt to access beyond end of device
[ 1546.277408] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1546.278684] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:19:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1546.291430] syz-executor.0: attempt to access beyond end of device
[ 1546.291430] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1546.292591] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1546.309046] loop4: detected capacity change from 0 to 40
03:19:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1546.374811] loop6: detected capacity change from 0 to 40
03:19:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x108)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/keyboard', 0x66200, 0xa4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x6, 0x2, 0x0, 0x7, 0x0, 0x2c, 0x40004, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x9e, 0x7}, 0x20, 0x10000, 0x0, 0x5, 0x3f, 0xfffffffd, 0x7, 0x0, 0x7f, 0x0, 0xffffffffffffffc0}, 0xffffffffffffffff, 0xc, r2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000})

[ 1546.381315] loop2: detected capacity change from 0 to 40
03:19:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:19:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1546.500381] syz-executor.6: attempt to access beyond end of device
[ 1546.500381] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1546.501861] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1546.525063] loop5: detected capacity change from 0 to 40
[ 1546.536556] loop0: detected capacity change from 0 to 40
[ 1546.609058] syz-executor.5: attempt to access beyond end of device
[ 1546.609058] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1546.610287] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:20:04 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:20:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:04 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1020a8, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:20:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:20:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x108)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/keyboard', 0x66200, 0xa4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x6, 0x2, 0x0, 0x7, 0x0, 0x2c, 0x40004, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x9e, 0x7}, 0x20, 0x10000, 0x0, 0x5, 0x3f, 0xfffffffd, 0x7, 0x0, 0x7f, 0x0, 0xffffffffffffffc0}, 0xffffffffffffffff, 0xc, r2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0x0, 0x700000000})

[ 1558.366860] loop5: detected capacity change from 0 to 40
[ 1558.381757] loop2: detected capacity change from 0 to 40
03:20:04 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1558.397254] loop1: detected capacity change from 0 to 40
[ 1558.399944] loop4: detected capacity change from 0 to 40
[ 1558.401725] loop6: detected capacity change from 0 to 40
[ 1558.403896] loop0: detected capacity change from 0 to 40
03:20:04 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1020a8, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1558.481787] syz-executor.6: attempt to access beyond end of device
[ 1558.481787] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1558.482715] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1558.535811] FAULT_INJECTION: forcing a failure.
[ 1558.535811] name failslab, interval 1, probability 0, space 0, times 1
[ 1558.537304] CPU: 0 PID: 8406 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1558.538279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1558.539288] Call Trace:
[ 1558.539633]  <TASK>
[ 1558.539933]  dump_stack_lvl+0x8f/0xb7
[ 1558.540471]  should_fail_ex.cold+0x5/0xa
[ 1558.541012]  should_failslab+0x9/0x20
[ 1558.541521]  __kmem_cache_alloc_node+0x5b/0x400
[ 1558.542130]  ? alloc_pipe_info+0x109/0x590
[ 1558.542684]  kmalloc_trace+0x26/0x60
[ 1558.543179]  alloc_pipe_info+0x109/0x590
[ 1558.543715]  splice_direct_to_actor+0x6e6/0x8c0
[ 1558.544353]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1558.545025]  ? inode_security+0x105/0x140
[ 1558.545594]  ? avc_policy_seqno+0xd/0x70
[ 1558.546156]  ? selinux_file_permission+0x3a/0x510
[ 1558.546811]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1558.547514]  ? security_file_permission+0xb5/0xe0
[ 1558.548191]  do_splice_direct+0x1bc/0x290
[ 1558.548770]  ? __pfx_do_splice_direct+0x10/0x10
[ 1558.549422]  ? lock_is_held_type+0xdb/0x130
[ 1558.550030]  do_sendfile+0xb1d/0x1280
[ 1558.550588]  ? __pfx_do_sendfile+0x10/0x10
[ 1558.551159]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 1558.551856]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1558.552645]  __x64_sys_sendfile64+0x248/0x2a0
[ 1558.553262]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1558.553940]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1558.554647]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1558.555364]  do_syscall_64+0x3f/0x90
[ 1558.555882]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1558.556603] RIP: 0033:0x7fdc7e53db19
[ 1558.557101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1558.559456] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1558.560610] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1558.561549] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1558.562492] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1558.563426] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1558.564352] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1558.565329]  </TASK>
[ 1558.608960] syz-executor.5: attempt to access beyond end of device
[ 1558.608960] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1558.610852] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:20:05 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:20:05 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)

[ 1558.821766] loop2: detected capacity change from 0 to 40
03:20:05 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1020a8, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1558.825766] loop4: detected capacity change from 0 to 40
[ 1558.844805] loop6: detected capacity change from 0 to 40
[ 1558.980941] loop0: detected capacity change from 0 to 40
[ 1559.059670] FAULT_INJECTION: forcing a failure.
[ 1559.059670] name failslab, interval 1, probability 0, space 0, times 0
[ 1559.061414] CPU: 1 PID: 8434 Comm: syz-executor.3 Not tainted 6.1.0-next-20221213 #1
[ 1559.062444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1559.063411] Call Trace:
[ 1559.063738]  <TASK>
[ 1559.064030]  dump_stack_lvl+0x8f/0xb7
[ 1559.064546]  should_fail_ex.cold+0x5/0xa
[ 1559.065067]  should_failslab+0x9/0x20
[ 1559.065226] syz-executor.6: attempt to access beyond end of device
[ 1559.065226] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1559.065544]  __kmem_cache_alloc_node+0x5b/0x400
[ 1559.067224] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1559.067693]  ? alloc_pipe_info+0x109/0x590
[ 1559.069447]  kmalloc_trace+0x26/0x60
[ 1559.070031]  alloc_pipe_info+0x109/0x590
[ 1559.070659]  splice_direct_to_actor+0x6e6/0x8c0
[ 1559.071378]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1559.072119]  ? inode_security+0x105/0x140
[ 1559.072803]  ? avc_policy_seqno+0xd/0x70
[ 1559.073431]  ? selinux_file_permission+0x3a/0x510
[ 1559.074163]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1559.074944]  ? security_file_permission+0xb5/0xe0
[ 1559.075698]  do_splice_direct+0x1bc/0x290
[ 1559.076362]  ? __pfx_do_splice_direct+0x10/0x10
[ 1559.077097]  ? lock_is_held_type+0xdb/0x130
[ 1559.077774]  do_sendfile+0xb1d/0x1280
[ 1559.078394]  ? __pfx_do_sendfile+0x10/0x10
[ 1559.079078]  __x64_sys_sendfile64+0x248/0x2a0
[ 1559.079769]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1559.080571]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1559.081362]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1559.082165]  do_syscall_64+0x3f/0x90
[ 1559.082737]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1559.083529] RIP: 0033:0x7fa3e9d58b19
[ 1559.084091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1559.086439] RSP: 002b:00007fa3e72ce188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1559.087557] RAX: ffffffffffffffda RBX: 00007fa3e9e6bf60 RCX: 00007fa3e9d58b19
[ 1559.088624] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[ 1559.089668] RBP: 00007fa3e72ce1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1559.090709] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1559.091748] R13: 00007ffc78e4fc3f R14: 00007fa3e72ce300 R15: 0000000000022000
[ 1559.092861]  </TASK>
[ 1559.138062] syz-executor.0: attempt to access beyond end of device
[ 1559.138062] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1559.139944] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1573.008830] loop5: detected capacity change from 0 to 40
03:20:19 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1020a8, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

03:20:19 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:19 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:20:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:20:19 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)

03:20:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1573.011656] loop1: detected capacity change from 0 to 40
[ 1573.019239] loop2: detected capacity change from 0 to 40
[ 1573.034889] loop6: detected capacity change from 0 to 40
[ 1573.061424] loop0: detected capacity change from 0 to 40
03:20:19 executing program 7:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:20:19 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1573.116580] syz-executor.5: attempt to access beyond end of device
[ 1573.116580] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1573.118625] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1573.143536] FAULT_INJECTION: forcing a failure.
[ 1573.143536] name failslab, interval 1, probability 0, space 0, times 0
[ 1573.144316] CPU: 1 PID: 8457 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1573.144857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1573.145413] Call Trace:
[ 1573.145599]  <TASK>
[ 1573.145764]  dump_stack_lvl+0x8f/0xb7
[ 1573.146051]  should_fail_ex.cold+0x5/0xa
[ 1573.146356]  should_failslab+0x9/0x20
[ 1573.146640]  __kmem_cache_alloc_node+0x5b/0x400
[ 1573.146973]  ? alloc_pipe_info+0x1e4/0x590
[ 1573.147273]  ? alloc_pipe_info+0x1e4/0x590
[ 1573.147569]  __kmalloc+0x46/0xc0
[ 1573.147826]  alloc_pipe_info+0x1e4/0x590
[ 1573.148119]  splice_direct_to_actor+0x6e6/0x8c0
[ 1573.148470]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1573.148817]  ? inode_security+0x105/0x140
[ 1573.149132]  ? avc_policy_seqno+0xd/0x70
[ 1573.149427]  ? selinux_file_permission+0x3a/0x510
[ 1573.149780]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1573.150146]  ? security_file_permission+0xb5/0xe0
[ 1573.150502]  do_splice_direct+0x1bc/0x290
[ 1573.150798]  ? __pfx_do_splice_direct+0x10/0x10
[ 1573.151130]  ? lock_is_held_type+0xdb/0x130
[ 1573.151451]  do_sendfile+0xb1d/0x1280
[ 1573.151750]  ? __pfx_do_sendfile+0x10/0x10
[ 1573.152079]  __x64_sys_sendfile64+0x248/0x2a0
[ 1573.152424]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1573.152787]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1573.153162]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1573.153554]  do_syscall_64+0x3f/0x90
[ 1573.153833]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1573.154220] RIP: 0033:0x7fdc7e53db19
[ 1573.154496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1573.155781] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1573.156326] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1573.156851] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1573.157364] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1573.157880] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1573.158390] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1573.158903]  </TASK>
03:20:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:19 executing program 7:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:20:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:20:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1573.280071] syz-executor.2: attempt to access beyond end of device
[ 1573.280071] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1573.281047] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1573.291519] loop6: detected capacity change from 0 to 40
[ 1573.367213] loop0: detected capacity change from 0 to 40
[ 1573.371335] loop5: detected capacity change from 0 to 40
[ 1573.417915] syz-executor.0: attempt to access beyond end of device
[ 1573.417915] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1573.419823] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1573.465704] syz-executor.5: attempt to access beyond end of device
[ 1573.465704] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1573.466603] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:20:32 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:20:32 executing program 4:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:32 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:20:32 executing program 7:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:20:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1586.418141] loop5: detected capacity change from 0 to 40
03:20:32 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x1020a8, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1586.434609] loop2: detected capacity change from 0 to 40
[ 1586.446622] loop6: detected capacity change from 0 to 40
[ 1586.465308] loop1: detected capacity change from 0 to 40
[ 1586.466685] loop0: detected capacity change from 0 to 40
[ 1586.500852] syz-executor.2: attempt to access beyond end of device
[ 1586.500852] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1586.501785] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:20:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1586.562048] FAULT_INJECTION: forcing a failure.
[ 1586.562048] name failslab, interval 1, probability 0, space 0, times 0
[ 1586.563848] CPU: 0 PID: 8495 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1586.564978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1586.566054] Call Trace:
[ 1586.566415]  <TASK>
[ 1586.566747]  dump_stack_lvl+0x8f/0xb7
[ 1586.567314]  should_fail_ex.cold+0x5/0xa
[ 1586.567894]  should_failslab+0x9/0x20
[ 1586.568431]  __kmem_cache_alloc_node+0x5b/0x400
[ 1586.569099]  ? iter_file_splice_write+0x169/0xcb0
[ 1586.569777]  ? iter_file_splice_write+0x169/0xcb0
[ 1586.570443]  __kmalloc+0x46/0xc0
[ 1586.570935]  iter_file_splice_write+0x169/0xcb0
[ 1586.571585]  ? generic_file_read_iter+0x330/0x550
[ 1586.572299]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1586.573044]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1586.573776]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1586.574538]  ? inode_security+0x105/0x140
[ 1586.575162]  ? security_file_permission+0xb5/0xe0
[ 1586.575863]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1586.576360] loop4: detected capacity change from 0 to 40
[ 1586.576605]  direct_splice_actor+0x113/0x180
[ 1586.577595]  splice_direct_to_actor+0x33a/0x8c0
[ 1586.578271]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1586.578984]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1586.579695]  ? security_file_permission+0xb5/0xe0
[ 1586.580371]  do_splice_direct+0x1bc/0x290
[ 1586.580976]  ? __pfx_do_splice_direct+0x10/0x10
[ 1586.581640]  ? lock_is_held_type+0xdb/0x130
[ 1586.582258]  do_sendfile+0xb1d/0x1280
[ 1586.582851]  ? __pfx_do_sendfile+0x10/0x10
[ 1586.583478]  __x64_sys_sendfile64+0x248/0x2a0
[ 1586.584128]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1586.584835]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1586.585586]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1586.586321]  do_syscall_64+0x3f/0x90
[ 1586.586875]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1586.587607] RIP: 0033:0x7fdc7e53db19
[ 1586.588144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1586.590588] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1586.591653] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1586.592668] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1586.593667] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1586.594645] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1586.595630] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1586.596663]  </TASK>
[ 1586.629418] syz-executor.5: attempt to access beyond end of device
[ 1586.629418] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1586.631107] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:20:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:33 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:33 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1586.742331] loop4: detected capacity change from 0 to 40
[ 1586.743934] loop2: detected capacity change from 0 to 40
03:20:33 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:33 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1586.842722] loop0: detected capacity change from 0 to 40
[ 1586.849936] loop6: detected capacity change from 0 to 40
03:20:33 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x1020a8, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1586.874586] syz-executor.0: attempt to access beyond end of device
[ 1586.874586] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1586.875451] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1586.930422] syz-executor.2: attempt to access beyond end of device
[ 1586.930422] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1586.931984] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1586.935734] loop5: detected capacity change from 0 to 40
[ 1586.999371] syz-executor.5: attempt to access beyond end of device
[ 1586.999371] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1587.000365] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:20:46 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:20:46 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r3)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000140)={0x100000001})
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 1600.352942] loop2: detected capacity change from 0 to 40
[ 1600.361944] loop5: detected capacity change from 0 to 40
03:20:46 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:20:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:46 executing program 7:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x1020a8, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:20:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1600.372245] loop6: detected capacity change from 0 to 40
[ 1600.396906] loop0: detected capacity change from 0 to 40
[ 1600.426722] syz-executor.2: attempt to access beyond end of device
[ 1600.426722] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1600.427593] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1600.429512] syz-executor.5: attempt to access beyond end of device
[ 1600.429512] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1600.430409] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1600.435734] loop1: detected capacity change from 0 to 40
03:20:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1600.456804] loop4: detected capacity change from 0 to 40
03:20:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1600.536324] loop6: detected capacity change from 0 to 40
[ 1600.554543] loop2: detected capacity change from 0 to 40
[ 1600.565577] loop5: detected capacity change from 0 to 40
03:20:46 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1600.600961] syz-executor.5: attempt to access beyond end of device
[ 1600.600961] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1600.601937] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1600.614015] syz-executor.2: attempt to access beyond end of device
[ 1600.614015] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1600.615022] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:20:46 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:20:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1600.692614] syz-executor.0: attempt to access beyond end of device
[ 1600.692614] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1600.692778] loop6: detected capacity change from 0 to 40
[ 1600.694504] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:20:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1600.739683] loop5: detected capacity change from 0 to 40
[ 1600.775566] syz-executor.5: attempt to access beyond end of device
[ 1600.775566] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1600.776446] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1600.791007] loop2: detected capacity change from 0 to 40
[ 1600.850084] loop4: detected capacity change from 0 to 40
[ 1600.882417] syz-executor.2: attempt to access beyond end of device
[ 1600.882417] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1600.884165] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:21:02 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:02 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1616.142131] loop2: detected capacity change from 0 to 40
03:21:02 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)={{0x107, 0x0, 0x7f, 0x47, 0x19e, 0x1, 0x46, 0x3}, "7c0be86d3809251ad765091a48009df602638de240c6a2555e4570e6e5c438ea877abaddd9f340b7c2cda7b86681640e3f6888663a44bc3269de52d5ea8c9a7f0f1efcfe386a2184b69dda9533f61466c75d013dd4869e27e42563028ddf8f20e53cfee32cec83f4fd99d03de1fc0f9f7878d8b14ce9388dbbd3af3edc69b747c5b8de", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/167, 0xa7}, {&(0x7f0000000200)=""/72, 0x48}], 0x2, 0xff, 0x3ff)

03:21:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:02 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1616.158519] loop6: detected capacity change from 0 to 40
[ 1616.161001] loop1: detected capacity change from 0 to 40
03:21:02 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1616.191832] loop5: detected capacity change from 0 to 40
[ 1616.193873] loop4: detected capacity change from 0 to 40
[ 1616.203951] loop0: detected capacity change from 0 to 40
03:21:02 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:02 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:21:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:02 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1616.305676] syz-executor.5: attempt to access beyond end of device
[ 1616.305676] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1616.306597] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:21:02 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1616.362623] syz-executor.0: attempt to access beyond end of device
[ 1616.362623] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1616.363509] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1616.390179] loop6: detected capacity change from 0 to 40
[ 1616.402855] loop4: detected capacity change from 0 to 40
[ 1616.410804] loop1: detected capacity change from 0 to 40
[ 1616.415294] loop5: detected capacity change from 0 to 40
[ 1616.441968] loop2: detected capacity change from 0 to 40
03:21:02 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:21:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:02 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:21:02 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1/file0\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
r5 = syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f00000003c0)='./file1\x00', 0x4, 0x3, &(0x7f0000000680)=[{&(0x7f0000000400)="0d9ed11a19736a4157a5393aa81b4eb70f0bb54ab88c934a26c5ad09b8ff1aed77301abc52d6519504f47390a071d6a457e624bebb04f2bb4d06e66b46bcf4aed842406cbd7c016553354e3263f6a410d0dd43f940243ea87daad51eb0207b5fe8a80c5d1ef3f824a5d12dca3166686870c7d4de26642e9b473819b67dd571d9872491eb3fd7653b7a94bf75538797ba559771e3", 0x94, 0x4}, {&(0x7f00000004c0)="41edf46039b8950b5c6b98ad11022eb8496740492b8ac675a30daf00f63ae1eb60f913dba9edf444c3121ad05fa5a215c562fddcab3169dc527c3b5283aa7e1be52769c8b94cd5b8c5bfd5b53459001cfafe5d25787d34741e2fec8ad8e74b05cfb0c0b86cdc6402fcc4c9ae5be16dc16384a65536170c303ef3a82c1ecf3edf2acf2975ae226bee85bba3212536d1a388be05c076a03b01d217279ba46e9b444c1ecf7644ff101ce9c9d44de2f1f2557501bb54fccaf9537791ef6b767b09daa16b000000", 0xc5, 0x7}, {&(0x7f00000005c0)="f70d9a3130b64378b00d30c828cd9460ba7519ccd87c0c4625f392212f303449cb730041d07d53fc7ed52e4e6c3de050e5b2daace266d7b312b797ade5ea4efea937c583394bdc980168d582d3790f46121a7457270029781501495467cc0d31db1e21728d5052cbb31f8857adf4a800547e480cb9581fafc6f7611f6628a8d14eb9b41104c260e32d1d1136b9bf7e078dac4c63629bc75227b1e531d16682410a41a4f2da3c", 0xa6, 0x6243}], 0x1000004, &(0x7f0000000800)={[{'+&*'}, {}, {'/dev/hwrngLw;\t\xee_Q\xed\x87\x1c\xec\x0e\xf6\x87\xb8\xa8\xadx9\x93\xb2\xdf\xdb\x86\r-^\n%\xca\xfb\x00'}], [{@measure}]})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup(r6)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
sendfile(r5, r7, &(0x7f0000000740)=0x6, 0x7)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r8 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r9 = openat$incfs(r1, &(0x7f0000000780)='.pending_reads\x00', 0x204802, 0x4)
openat(r9, &(0x7f00000007c0)='./file1/file0\x00', 0x2080, 0x1e0)
pwrite64(r8, &(0x7f0000000300)="3d0dccc1bd5551af5238979f94d35ac10bb57b343112ee792d1483fe926cd98eb9b38de739f0948059606a5be2cf70ea9591ecabdddbb44cc15bb2c3d0b75bd5c152d9964fd88e2e056d2c0134da5261e5d719ffdb0a870fb80d0c7cb9898d96fb908a17412dd676abc642ad6c64ec6a82b9641d8665ed925735ad48201c70756dc15174fbabb1dadfbd8a215a5b520ee49dd8b909b7c7d5270cfba72adb52a17880765f1822f0842b7afc41157307942307c071f27309eea3a02e1cecc81c", 0xbf, 0x80000000)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x100)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x2, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x30}, 0x1, 0x0, 0x0, 0x14048000}, 0x40040)

03:21:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1616.532778] loop0: detected capacity change from 0 to 40
[ 1616.548252] loop6: detected capacity change from 0 to 40
03:21:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:02 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1616.569434] loop5: detected capacity change from 0 to 40
[ 1616.590370] syz-executor.0: attempt to access beyond end of device
[ 1616.590370] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1616.591223] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1616.649810] loop4: detected capacity change from 0 to 40
[ 1616.671863] loop3: detected capacity change from 0 to 98
[ 1616.673362] nfs4: Unknown parameter '+&*'
[ 1616.708858] syz-executor.6: attempt to access beyond end of device
[ 1616.708858] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1616.710577] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1616.717011] loop3: detected capacity change from 0 to 98
[ 1616.717617] nfs4: Unknown parameter '+&*'
03:21:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:18 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:21:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:18 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000))

[ 1632.103946] loop5: detected capacity change from 0 to 40
[ 1632.106667] loop2: detected capacity change from 0 to 40
[ 1632.118239] loop1: detected capacity change from 0 to 40
03:21:18 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:21:18 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1632.145494] loop6: detected capacity change from 0 to 40
03:21:18 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

03:21:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1632.191525] loop0: detected capacity change from 0 to 40
[ 1632.274383] syz-executor.6: attempt to access beyond end of device
[ 1632.274383] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1632.276508] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:21:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1632.359901] syz-executor.0: attempt to access beyond end of device
[ 1632.359901] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1632.361522] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:21:18 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1632.416872] loop2: detected capacity change from 0 to 40
[ 1632.455920] loop1: detected capacity change from 0 to 40
03:21:30 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

03:21:30 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:21:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:30 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181042, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0)
write(r0, &(0x7f0000000080)="0e173d4a124c3e451131f5c30df038aec41dcc8502f96720a107082488f107259cdedf6ca3a1bc694903e6719d2aa9dea0b2235aa8b393d9af", 0x39)
ioctl$BLKTRACESTOP(r2, 0x1275, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x533100, 0x0)
fadvise64(r4, 0x3, 0x400, 0x1)
sendfile(r3, r1, 0x0, 0xfffffdef)

03:21:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:21:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1644.483326] loop0: detected capacity change from 0 to 40
[ 1644.490674] loop2: detected capacity change from 0 to 40
[ 1644.493147] loop1: detected capacity change from 0 to 40
[ 1644.505044] loop6: detected capacity change from 0 to 40
[ 1644.514446] loop5: detected capacity change from 0 to 40
[ 1644.611782] syz-executor.0: attempt to access beyond end of device
[ 1644.611782] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1644.613412] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1644.641843] syz-executor.6: attempt to access beyond end of device
[ 1644.641843] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1644.643544] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:21:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:30 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

03:21:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:31 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:21:31 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:31 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:31 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1644.860795] loop6: detected capacity change from 0 to 40
03:21:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1644.904460] loop2: detected capacity change from 0 to 40
[ 1644.924370] loop1: detected capacity change from 0 to 40
[ 1644.990045] loop5: detected capacity change from 0 to 40
[ 1644.992624] FAT-fs (loop4): bogus number of reserved sectors
[ 1644.993567] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1645.042384] syz-executor.6: attempt to access beyond end of device
[ 1645.042384] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1645.044142] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1645.064294] loop0: detected capacity change from 0 to 40
[ 1645.083526] perf: interrupt took too long (12476 > 12475), lowering kernel.perf_event_max_sample_rate to 16000
[ 1645.219469] syz-executor.0: attempt to access beyond end of device
[ 1645.219469] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1645.221441] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:21:43 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

03:21:43 executing program 3:
fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.opaque\x00')
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1657.605305] loop5: detected capacity change from 0 to 40
03:21:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:43 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:21:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1657.632909] loop1: detected capacity change from 0 to 40
[ 1657.635486] loop0: detected capacity change from 0 to 40
[ 1657.673409] loop2: detected capacity change from 0 to 40
[ 1657.681261] FAT-fs (loop4): bogus number of reserved sectors
[ 1657.682149] FAT-fs (loop4): Can't find a valid FAT filesystem
03:21:44 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

03:21:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

[ 1657.723787] loop6: detected capacity change from 0 to 40
03:21:44 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1657.741476] FAULT_INJECTION: forcing a failure.
[ 1657.741476] name failslab, interval 1, probability 0, space 0, times 0
[ 1657.743571] CPU: 0 PID: 8714 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1657.744961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1657.746082] Call Trace:
[ 1657.746555]  <TASK>
[ 1657.746970]  dump_stack_lvl+0x8f/0xb7
[ 1657.747695]  should_fail_ex.cold+0x5/0xa
[ 1657.748461]  should_failslab+0x9/0x20
[ 1657.749168]  __kmem_cache_alloc_node+0x5b/0x400
[ 1657.750036]  ? iter_file_splice_write+0x169/0xcb0
[ 1657.750931]  ? iter_file_splice_write+0x169/0xcb0
[ 1657.751604]  __kmalloc+0x46/0xc0
[ 1657.752255]  iter_file_splice_write+0x169/0xcb0
[ 1657.752910]  ? generic_file_read_iter+0x330/0x550
[ 1657.753844]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1657.754547]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1657.755482]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1657.756239]  ? inode_security+0x105/0x140
[ 1657.756996]  ? security_file_permission+0xb5/0xe0
[ 1657.757703]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1657.758430]  direct_splice_actor+0x113/0x180
[ 1657.759058]  splice_direct_to_actor+0x33a/0x8c0
[ 1657.759731]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1657.760432]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1657.761338]  ? security_file_permission+0xb5/0xe0
[ 1657.762044]  do_splice_direct+0x1bc/0x290
[ 1657.762634]  ? __pfx_do_splice_direct+0x10/0x10
[ 1657.763309]  ? lock_is_held_type+0xdb/0x130
[ 1657.763928]  do_sendfile+0xb1d/0x1280
[ 1657.764514]  ? __pfx_do_sendfile+0x10/0x10
[ 1657.765311]  __x64_sys_sendfile64+0x248/0x2a0
[ 1657.765979]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1657.766678]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1657.767406]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1657.768138]  do_syscall_64+0x3f/0x90
[ 1657.768665]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1657.769394] RIP: 0033:0x7fdc7e53db19
[ 1657.769936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1657.772312] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1657.773333] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1657.774320] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1657.775270] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1657.776217] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1657.777168] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1657.778156]  </TASK>
[ 1657.793826] syz-executor.6: attempt to access beyond end of device
[ 1657.793826] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1657.794788] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 1657.838681] loop1: detected capacity change from 0 to 40
03:21:44 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))

03:21:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1657.888707] loop5: detected capacity change from 0 to 40
[ 1657.936821] FAT-fs (loop4): bogus number of reserved sectors
[ 1657.937459] FAT-fs (loop4): Can't find a valid FAT filesystem
03:21:44 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1657.958297] loop2: detected capacity change from 0 to 40
03:21:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:44 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1658.082630] loop1: detected capacity change from 0 to 40
[ 1658.084625] loop0: detected capacity change from 0 to 40
[ 1658.161307] syz-executor.0: attempt to access beyond end of device
[ 1658.161307] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1658.162712] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1670.686778] loop2: detected capacity change from 0 to 40
03:21:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:56 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:21:57 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:57 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:21:57 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))

[ 1670.713048] loop0: detected capacity change from 0 to 40
[ 1670.716550] loop1: detected capacity change from 0 to 40
[ 1670.721930] FAT-fs (loop4): bogus number of reserved sectors
[ 1670.722411] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1670.732189] loop5: detected capacity change from 0 to 40
03:21:57 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))

03:21:57 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:21:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:57 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:21:57 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1670.904430] loop2: detected capacity change from 0 to 40
[ 1670.905948] syz-executor.0: attempt to access beyond end of device
[ 1670.905948] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1670.907909] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:21:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1670.963756] FAT-fs (loop4): bogus number of reserved sectors
[ 1670.964636] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1671.020082] syz-executor.2: attempt to access beyond end of device
[ 1671.020082] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1671.022073] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1671.025718] loop1: detected capacity change from 0 to 40
[ 1671.096437] loop5: detected capacity change from 0 to 40
03:21:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:21:57 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))

03:21:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:21:57 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1671.317061] loop0: detected capacity change from 0 to 40
[ 1671.377861] FAT-fs (loop4): bogus number of reserved sectors
[ 1671.379010] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1671.524092] syz-executor.0: attempt to access beyond end of device
[ 1671.524092] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1671.525798] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1684.924026] loop5: detected capacity change from 0 to 40
[ 1684.930861] loop7: detected capacity change from 0 to 40
[ 1684.942591] loop4: detected capacity change from 0 to 40
03:22:11 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:22:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:22:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:11 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

03:22:11 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:22:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:22:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:22:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1684.954255] FAT-fs (loop4): bogus number of reserved sectors
[ 1684.954739] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1684.968280] loop2: detected capacity change from 0 to 40
[ 1684.985460] syz-executor.7: attempt to access beyond end of device
[ 1684.985460] loop7: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1684.986540] Buffer I/O error on dev loop7, logical block 10, lost async page write
[ 1684.997982] loop0: detected capacity change from 0 to 40
[ 1685.006226] loop1: detected capacity change from 0 to 40
[ 1685.026165] syz-executor.2: attempt to access beyond end of device
[ 1685.026165] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1685.027005] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:22:11 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

03:22:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1685.074678] syz-executor.5: attempt to access beyond end of device
[ 1685.074678] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1685.075785] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:22:11 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) (fail_nth: 1)

03:22:11 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1685.160408] syz-executor.0: attempt to access beyond end of device
[ 1685.160408] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1685.162351] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1685.191521] loop4: detected capacity change from 0 to 40
03:22:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

[ 1685.206015] FAT-fs (loop4): bogus number of reserved sectors
[ 1685.206717] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1685.229675] FAULT_INJECTION: forcing a failure.
[ 1685.229675] name failslab, interval 1, probability 0, space 0, times 0
[ 1685.231566] CPU: 1 PID: 8829 Comm: syz-executor.7 Not tainted 6.1.0-next-20221213 #1
[ 1685.232610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1685.233824] Call Trace:
[ 1685.234177]  <TASK>
[ 1685.234577]  dump_stack_lvl+0x8f/0xb7
[ 1685.235122]  should_fail_ex.cold+0x5/0xa
[ 1685.235719]  ? jbd2__journal_start+0x194/0x6b0
[ 1685.236397]  should_failslab+0x9/0x20
[ 1685.236997]  kmem_cache_alloc+0x5a/0x410
[ 1685.237641]  ? lock_is_held_type+0xdb/0x130
[ 1685.238308]  jbd2__journal_start+0x194/0x6b0
[ 1685.238975]  __ext4_journal_start_sb+0x4a5/0x6b0
[ 1685.239669]  ? ext4_fileattr_set+0x75c/0x19f0
[ 1685.240361]  ext4_fileattr_set+0x75c/0x19f0
[ 1685.241033]  ? __pfx_ext4_fileattr_set+0x10/0x10
[ 1685.241792]  ? lock_acquire+0x32/0xc0
[ 1685.242378]  ? vfs_fileattr_set+0x14c/0xb90
[ 1685.243056]  ? down_write+0x157/0x220
[ 1685.243664]  ? memset+0x24/0x50
[ 1685.244251]  ? fileattr_fill_flags+0x27f/0x320
[ 1685.244980]  vfs_fileattr_set+0x780/0xb90
[ 1685.245572]  ? __pfx_vfs_fileattr_set+0x10/0x10
[ 1685.246354]  ? __mnt_want_write+0x1fe/0x2f0
[ 1685.247106]  ? memset+0x24/0x50
[ 1685.247620]  do_vfs_ioctl+0xa6c/0x1af0
[ 1685.248238]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1685.248984]  ? inode_has_perm+0x171/0x1d0
[ 1685.249687]  ? __pfx_file_has_perm+0x10/0x10
[ 1685.250415]  ? __pfx___fget_files+0x10/0x10
[ 1685.251105]  ? lock_acquire+0x32/0xc0
[ 1685.251746]  ? selinux_file_ioctl+0xb5/0x260
[ 1685.252366]  __x64_sys_ioctl+0x110/0x210
[ 1685.252991]  do_syscall_64+0x3f/0x90
[ 1685.253512]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1685.254361] RIP: 0033:0x7fab32b4cb19
[ 1685.254957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1685.257709] RSP: 002b:00007fab300c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1685.258917] RAX: ffffffffffffffda RBX: 00007fab32c5ff60 RCX: 00007fab32b4cb19
[ 1685.260010] RDX: 0000000020000040 RSI: 0000000040086602 RDI: 0000000000000003
[ 1685.261123] RBP: 00007fab300c21d0 R08: 0000000000000000 R09: 0000000000000000
[ 1685.262250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1685.263298] R13: 00007ffd5acd771f R14: 00007fab300c2300 R15: 0000000000022000
[ 1685.264515]  </TASK>
[ 1685.265827] loop2: detected capacity change from 0 to 40
03:22:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

[ 1685.365644] loop1: detected capacity change from 0 to 40
[ 1685.374374] syz-executor.2: attempt to access beyond end of device
[ 1685.374374] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1685.376144] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1685.458311] loop5: detected capacity change from 0 to 40
[ 1685.533814] syz-executor.5: attempt to access beyond end of device
[ 1685.533814] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1685.534800] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:22:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:22:24 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendmmsg$sock(r0, &(0x7f0000002300)=[{{&(0x7f0000000140)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="f4b8e843efa0a44808c98bcd50b69ada16864fd0b989d07fe84dd79f78e033f6d70497fbe808eae5cd1322ccc98999ec0e55392d6c044a767fe6d37dab402f9ddea70372356be75194d08c17870a60f32c33ce9588136fa6cdd9682c376c9441f5b0115ce1896a0b6847638150348c71a2ed459973fc7cd6b9f23349cac695aad3843002c732944c6a96a449f34aa625644f496000c555649fa76fb4f34b863d949696c14f7fa14dec64f510d68e6637ec7048bc1512b9af5baa1cb7d666eb1b7c21407cda54f30b5f471f7f014e761d943490e5a02e3994187e70ba0879ea92f820", 0xe2}, {&(0x7f00000001c0)="e3d1998544963cf9055edfc63d94cbd9901d4fa959186ebd", 0x18}], 0x2}}, {{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)="eab1", 0x2}, {&(0x7f0000000480)="2f220b3b9631be79da657c68e0b7867c238dd9fd6ce3e67f996b542ad34046fd62b4b240d834069a750e945124f5904ff3ac2fd00e6416e243b7b9586de8f0f342b8479ddd15a1c1c5c64c272d792e2d35b62a1a77ca55cb6f51d34b74ad9851cdc52b8d507c0572", 0x68}, {&(0x7f0000000500)="e6afcc4ba1d872224c6b1b1617f02bab474e6fda1da708bdb97010167012557817acc46de9fa2176a61ea0ea3bc2a68df4399eac60698758e6721d49833e8a12ce281cc0537e017a8cd49d5fc6488e1fbe05218df32edb060928297933eb75d8579c67435b40a26a3d211b6a4d6938fc595f74667c20e565400fea96c03bb6cb747c41ccd94c4ff6a08b0e7d1045b04f79f3740df5195a93284c45e174983dc83fa7d8a3797cfa4b6d3229c197473ead2d9f27354d6b26344b7db3ba955e6e8ce3081d7901c01149413a91df986b67a5aaf455130c7c54a2fef1872a2063f3449c4c25d134e3e25c8fa5a7a16e127b60", 0xf0}, {&(0x7f0000000600)="c8ffe7bf86a903c4a2f4445084c9227845943ad6b0105a649fd23b97f8ddf40505790dddbd98cc52ee94c2315b4925f5734c5213f00e4d419d2ef71cb56b43e09302720e911c73f80816722f3bceeae9af0842f2f2634eba81cad372178471156159c77a7e5145c7d0a8900e23c9928a528fba606f5374becdc227361bfebcecb1a45c05f7cfdcc88a1e40b5bf3aedf60b28cba087b32c74dfa797c91d0261ed8988ee5e09a5fc352b34e7ac9c6bf614b58ad0", 0xb3}, {&(0x7f00000006c0)="8894646075e6b3e5d3dc69891aaa34e086b0997ca0c0283f26bf7d61664ef8cdd1c24af78f63cc6caa45b144da512f99ea93aa4e568e4f6aea7a7d927a61151e06c6c1eb6965ddf688b58e0057ee1ef2c063207bd48ee441dec430ec8dc0bdf38ce9443b60987a570a6976a848ed16894461ff14e0d0e91dd38555f9253cadccfde234324b7c8ac83116e8b50599b0cd24ee0262f54444e2e5720ec8b99c", 0x9e}], 0x5, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}, {{&(0x7f0000000840)=@isdn={0x22, 0x9, 0x8, 0xfc, 0x1f}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000008c0)="5cdec0d43c5572396ca7f9987819e0638a2ee0179f4ec8c32ad6abc5d2ac156fc6044dc5ceaaf8d89a5675b02486f9d175f71e31a998451e2141078a69ebdd425bfb73c2066aa18d8308e465d77776c802c74fd54e3e504d1738a92b85e755fbf0fe03b49d1988b48c3b9d47", 0x6c}, {&(0x7f0000000940)="b8678385ae5bd8", 0x7}, {&(0x7f0000000980)="1ffe94d1f2baa867a4f0ffa60842def87096ed0d8a6263e73a592931a585ce2c2e0afba25c501c81fb68b981bb836814129b12c10b3aa7477fa2aaed7b8374836a37b9922e501b24fa6a7c867bdd72e691d14dc73b9f53270398259019d7ee024acb9862285574c55d14de556b8296ae71f5883f452c", 0x76}, {&(0x7f0000000a00)="07c9ec109d28c11775537f7ddaa87f26682622a14dcc5636c4178a82923c5bf0a1f22f857b67acb9fa0d8887672101b926fdcd0b92a9562c48b956ee200e78dd777c019d94e187a39867a387d5b4533fca90482e095b7f7b088108ba31a413048c82e6d0fd2cdf13c344d52aeb3496c5ee86f14cfb3cfebb95af2254c41e850f3fb973d7077ec0b5073ece80bb7b980e1a4ecb5d3a3736ff0e5d9e76eff0d39c8c9c9b11fe57948241033bac12f6c748b040dc17796237b549b52f82e200", 0xbe}, {&(0x7f0000000ac0)="28e1c1e143e57578e90a8fddfcf13f0f06765925c826c84489e82b19e4c57250f9cbf06558ef780c3262e5426615136dfe0286a18c7d03a1bab654e9b9954032a2c2974947c69afeb64533d21611c41ea044431a069e695f626a09c13ca79407390f3f74d3224f5b00c4568075718d3c1e7cf8b7915061be94be56ab552463ae6a41aff004b71fe6e5e25fd5e9d2f045bdf7b019171c047205e7e7", 0x9b}, {&(0x7f0000000b80)="e2698ee9107ec712b948f248f2278d83d3d8c9d8580969d3d9ac3b5eb58e766376dc8ed4b9102513aa81675b38c48b22d3d40d636bb0a1d435652bc5c8523172b640c4e6117c5b783d8977487bb94aec475e92073d9f826078e7187ab27514be171dfe7f2d65909ae1e0ce9d857ed3ffbab2384169766e7e83bd45781247447f76ed6adfc0069ce8245d157ca3d38189b672f6010ece5dc8866619bdc5492aa16e3c9ea38854cdbb87fe441706716ab4fdfab45e46ff5e5961acc0c180da1a95b46e0c1bc7b89d70d623f291bb24e53612118db4edb25a65f39c233c64aaa878", 0xe0}, {&(0x7f0000000c80)="3754e7b9db1bfa20bd14ca71b3384204d6c4459e76ada7252a0f2d5da8dab931ce94d8db2e9258f282c28fe85149098c2f37dcd4fdd6d0d275db2f827e25c6084f53bfb522cee734c2c5d78f2f8a73aa99666266525b64d8567b463c689a4fd5abf74d37446d9d09b39a7ca5713d4689f2f06cfcd781bf92327920cc4e79ca4562046a7f9523bdbd4365e70bd9ad9d0f4b7a6a644b2f90022361a304e23e73251048e7362386c18cc5348ddf539ac5b9c819f73c9bf681fb8c6b93a71d15520d08006563df0a89a2c6cfbc10", 0xcc}, {&(0x7f0000000d80)="19b61cea8c83043d2dc7fa0727685025db754089e5d4d24bb74f9f7dcc59a4bae5654190df66b5600c1daba0ea58870bdc7e1945a2d37126ff097fcabfbbe508b552d9e164bc7dd6b075a6cd5fb1e6db059b1f0b0c397463ec59fd253f21c77afd75e89a77448ef4c2fb44fe367d598219cba40aff2459d79529f550a010ba44430106e51017e162a58a6e1bfbf2def5b5598a6a1a85384047372b65192cae584686c40e6a3cb77284f01bc55d88db", 0xaf}, {&(0x7f0000000e40)="71b77fb61f7407855906a3a02742a29d6b6e3e58415f1b72d1dc4a81b63c72c95ba07d0ecd97eb3be7ecc6d7b74cd691c0eabc6b89b1875418660095945faccb4574707a246dca7646b57fef7ca85a4ba883c6dbc72203543be47a28904f2e461bac846d63d3dab245cd07e11a896745ebae08689117c3c996e3fd43460f99a66cdd7804c3cadcaff12c29a0ca7d0deb4d770d283a8ae3c552", 0x99}], 0x9}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000fc0)="a7a79cecbbc1eeb7e711825cac9a3a4b9b7e656de535256c3417bbf390d396c52e860a4e6880867d1f2a34488ee736067eff6ff2c17c13fad39dc8aac2", 0x3d}, {&(0x7f0000001000)="e8c0c12b11021fba55dfcf3435e2cb7a9f29e0c72c5e6b5665890df3e6df26db5f9f3dfc95a9f546800416a69167fb677645b55587f2e9e2b4dc85c9662f91f65d21910c3f7621e149600bd5f460d6d82cc2f2d872a5ee6781245560278cf7cedef82f2908936421d1bdd83edc1d519c38414cf139b7a043961304f8b9c20a5fb52718e9988466693b46be28c5a09ba9b07ff8b4fd66f6", 0x97}, {&(0x7f00000010c0)="af45544099b02d22d28e2a1dddf8577537970800d7b29da9786e85be574743984a3ff3d8860e51b05717b2dc51b381631cbddd113ac827332aa129e988e8bf0e79d28288107ad48052", 0x49}, {&(0x7f0000001140)="84c4e9007060ad7639d7550decbfae759d311e0a82bc546a65504b21d2e019c18592c49259aeb377da55784d7d3e02c178c588b491b50f3a7eeb85ab62552a19b7687ba4abd56ee4550e75d6e4cbf157a43a45b6817028aa33a072756a0e2c1c1bdf3355ec3f0da93098db6d38726ee5018ffc4553e9caaaba604346472b19badd19cd9b5103b96d13bcdc4935e69c8d8480e72e46b30a0cb6c254b7f7", 0x9d}, {&(0x7f0000001200)="3cfa4a3ab32b3b5c6076cef47f5a48b4f7374585c875643769f6492d8ec54be9a1de281c2067922bd15a9ae98d5c40b172f55f580bcbf6b4cb1c270d239ddc50", 0x40}, {&(0x7f0000001240)="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", 0x1000}], 0x6, &(0x7f00000022c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}], 0x18}}], 0x4, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000002400)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:22:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(0x0, &(0x7f0000000300))

03:22:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:22:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) (fail_nth: 2)

03:22:24 executing program 6:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1698.518853] loop0: detected capacity change from 0 to 40
[ 1698.530385] loop4: detected capacity change from 0 to 40
[ 1698.538070] FAT-fs (loop4): bogus number of reserved sectors
[ 1698.538521] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1698.541019] loop5: detected capacity change from 0 to 40
[ 1698.596904] loop2: detected capacity change from 0 to 40
[ 1698.599806] loop1: detected capacity change from 0 to 40
[ 1698.604734] syz-executor.0: attempt to access beyond end of device
[ 1698.604734] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1698.606395] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:22:24 executing program 6:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1698.704475] syz-executor.2: attempt to access beyond end of device
[ 1698.704475] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1698.706544] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:22:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1698.732930] syz-executor.5: attempt to access beyond end of device
[ 1698.732930] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1698.734801] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:22:25 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) (fail_nth: 3)

03:22:25 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:22:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:22:25 executing program 6:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1698.973307] loop0: detected capacity change from 0 to 40
03:22:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:25 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1699.059696] loop1: detected capacity change from 0 to 40
[ 1699.072716] loop4: detected capacity change from 0 to 40
03:22:25 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) (fail_nth: 4)

[ 1699.118621] FAT-fs (loop4): bogus number of reserved sectors
[ 1699.119526] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1699.155378] syz-executor.0: attempt to access beyond end of device
[ 1699.155378] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1699.156932] loop5: detected capacity change from 0 to 40
[ 1699.157043] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1699.167056] loop2: detected capacity change from 0 to 40
[ 1699.321648] syz-executor.5: attempt to access beyond end of device
[ 1699.321648] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1699.323495] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1699.347592] syz-executor.2: attempt to access beyond end of device
[ 1699.347592] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1699.349158] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:22:38 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:22:38 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) (fail_nth: 5)

03:22:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:38 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x8002, 0x53)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:22:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:22:38 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:22:38 executing program 5:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendmmsg$sock(r0, &(0x7f0000002300)=[{{&(0x7f0000000140)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="f4b8e843efa0a44808c98bcd50b69ada16864fd0b989d07fe84dd79f78e033f6d70497fbe808eae5cd1322ccc98999ec0e55392d6c044a767fe6d37dab402f9ddea70372356be75194d08c17870a60f32c33ce9588136fa6cdd9682c376c9441f5b0115ce1896a0b6847638150348c71a2ed459973fc7cd6b9f23349cac695aad3843002c732944c6a96a449f34aa625644f496000c555649fa76fb4f34b863d949696c14f7fa14dec64f510d68e6637ec7048bc1512b9af5baa1cb7d666eb1b7c21407cda54f30b5f471f7f014e761d943490e5a02e3994187e70ba0879ea92f820", 0xe2}, {&(0x7f00000001c0)="e3d1998544963cf9055edfc63d94cbd9901d4fa959186ebd", 0x18}], 0x2}}, {{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)="eab1", 0x2}, {&(0x7f0000000480)="2f220b3b9631be79da657c68e0b7867c238dd9fd6ce3e67f996b542ad34046fd62b4b240d834069a750e945124f5904ff3ac2fd00e6416e243b7b9586de8f0f342b8479ddd15a1c1c5c64c272d792e2d35b62a1a77ca55cb6f51d34b74ad9851cdc52b8d507c0572", 0x68}, {&(0x7f0000000500)="e6afcc4ba1d872224c6b1b1617f02bab474e6fda1da708bdb97010167012557817acc46de9fa2176a61ea0ea3bc2a68df4399eac60698758e6721d49833e8a12ce281cc0537e017a8cd49d5fc6488e1fbe05218df32edb060928297933eb75d8579c67435b40a26a3d211b6a4d6938fc595f74667c20e565400fea96c03bb6cb747c41ccd94c4ff6a08b0e7d1045b04f79f3740df5195a93284c45e174983dc83fa7d8a3797cfa4b6d3229c197473ead2d9f27354d6b26344b7db3ba955e6e8ce3081d7901c01149413a91df986b67a5aaf455130c7c54a2fef1872a2063f3449c4c25d134e3e25c8fa5a7a16e127b60", 0xf0}, {&(0x7f0000000600)="c8ffe7bf86a903c4a2f4445084c9227845943ad6b0105a649fd23b97f8ddf40505790dddbd98cc52ee94c2315b4925f5734c5213f00e4d419d2ef71cb56b43e09302720e911c73f80816722f3bceeae9af0842f2f2634eba81cad372178471156159c77a7e5145c7d0a8900e23c9928a528fba606f5374becdc227361bfebcecb1a45c05f7cfdcc88a1e40b5bf3aedf60b28cba087b32c74dfa797c91d0261ed8988ee5e09a5fc352b34e7ac9c6bf614b58ad0", 0xb3}, {&(0x7f00000006c0)="8894646075e6b3e5d3dc69891aaa34e086b0997ca0c0283f26bf7d61664ef8cdd1c24af78f63cc6caa45b144da512f99ea93aa4e568e4f6aea7a7d927a61151e06c6c1eb6965ddf688b58e0057ee1ef2c063207bd48ee441dec430ec8dc0bdf38ce9443b60987a570a6976a848ed16894461ff14e0d0e91dd38555f9253cadccfde234324b7c8ac83116e8b50599b0cd24ee0262f54444e2e5720ec8b99c", 0x9e}], 0x5, &(0x7f0000000800)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x18}}, {{&(0x7f0000000840)=@isdn={0x22, 0x9, 0x8, 0xfc, 0x1f}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000008c0)="5cdec0d43c5572396ca7f9987819e0638a2ee0179f4ec8c32ad6abc5d2ac156fc6044dc5ceaaf8d89a5675b02486f9d175f71e31a998451e2141078a69ebdd425bfb73c2066aa18d8308e465d77776c802c74fd54e3e504d1738a92b85e755fbf0fe03b49d1988b48c3b9d47", 0x6c}, {&(0x7f0000000940)="b8678385ae5bd8", 0x7}, {&(0x7f0000000980)="1ffe94d1f2baa867a4f0ffa60842def87096ed0d8a6263e73a592931a585ce2c2e0afba25c501c81fb68b981bb836814129b12c10b3aa7477fa2aaed7b8374836a37b9922e501b24fa6a7c867bdd72e691d14dc73b9f53270398259019d7ee024acb9862285574c55d14de556b8296ae71f5883f452c", 0x76}, {&(0x7f0000000a00)="07c9ec109d28c11775537f7ddaa87f26682622a14dcc5636c4178a82923c5bf0a1f22f857b67acb9fa0d8887672101b926fdcd0b92a9562c48b956ee200e78dd777c019d94e187a39867a387d5b4533fca90482e095b7f7b088108ba31a413048c82e6d0fd2cdf13c344d52aeb3496c5ee86f14cfb3cfebb95af2254c41e850f3fb973d7077ec0b5073ece80bb7b980e1a4ecb5d3a3736ff0e5d9e76eff0d39c8c9c9b11fe57948241033bac12f6c748b040dc17796237b549b52f82e200", 0xbe}, {&(0x7f0000000ac0)="28e1c1e143e57578e90a8fddfcf13f0f06765925c826c84489e82b19e4c57250f9cbf06558ef780c3262e5426615136dfe0286a18c7d03a1bab654e9b9954032a2c2974947c69afeb64533d21611c41ea044431a069e695f626a09c13ca79407390f3f74d3224f5b00c4568075718d3c1e7cf8b7915061be94be56ab552463ae6a41aff004b71fe6e5e25fd5e9d2f045bdf7b019171c047205e7e7", 0x9b}, {&(0x7f0000000b80)="e2698ee9107ec712b948f248f2278d83d3d8c9d8580969d3d9ac3b5eb58e766376dc8ed4b9102513aa81675b38c48b22d3d40d636bb0a1d435652bc5c8523172b640c4e6117c5b783d8977487bb94aec475e92073d9f826078e7187ab27514be171dfe7f2d65909ae1e0ce9d857ed3ffbab2384169766e7e83bd45781247447f76ed6adfc0069ce8245d157ca3d38189b672f6010ece5dc8866619bdc5492aa16e3c9ea38854cdbb87fe441706716ab4fdfab45e46ff5e5961acc0c180da1a95b46e0c1bc7b89d70d623f291bb24e53612118db4edb25a65f39c233c64aaa878", 0xe0}, {&(0x7f0000000c80)="3754e7b9db1bfa20bd14ca71b3384204d6c4459e76ada7252a0f2d5da8dab931ce94d8db2e9258f282c28fe85149098c2f37dcd4fdd6d0d275db2f827e25c6084f53bfb522cee734c2c5d78f2f8a73aa99666266525b64d8567b463c689a4fd5abf74d37446d9d09b39a7ca5713d4689f2f06cfcd781bf92327920cc4e79ca4562046a7f9523bdbd4365e70bd9ad9d0f4b7a6a644b2f90022361a304e23e73251048e7362386c18cc5348ddf539ac5b9c819f73c9bf681fb8c6b93a71d15520d08006563df0a89a2c6cfbc10", 0xcc}, {&(0x7f0000000d80)="19b61cea8c83043d2dc7fa0727685025db754089e5d4d24bb74f9f7dcc59a4bae5654190df66b5600c1daba0ea58870bdc7e1945a2d37126ff097fcabfbbe508b552d9e164bc7dd6b075a6cd5fb1e6db059b1f0b0c397463ec59fd253f21c77afd75e89a77448ef4c2fb44fe367d598219cba40aff2459d79529f550a010ba44430106e51017e162a58a6e1bfbf2def5b5598a6a1a85384047372b65192cae584686c40e6a3cb77284f01bc55d88db", 0xaf}, {&(0x7f0000000e40)="71b77fb61f7407855906a3a02742a29d6b6e3e58415f1b72d1dc4a81b63c72c95ba07d0ecd97eb3be7ecc6d7b74cd691c0eabc6b89b1875418660095945faccb4574707a246dca7646b57fef7ca85a4ba883c6dbc72203543be47a28904f2e461bac846d63d3dab245cd07e11a896745ebae08689117c3c996e3fd43460f99a66cdd7804c3cadcaff12c29a0ca7d0deb4d770d283a8ae3c552", 0x99}], 0x9}}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000fc0)="a7a79cecbbc1eeb7e711825cac9a3a4b9b7e656de535256c3417bbf390d396c52e860a4e6880867d1f2a34488ee736067eff6ff2c17c13fad39dc8aac2", 0x3d}, {&(0x7f0000001000)="e8c0c12b11021fba55dfcf3435e2cb7a9f29e0c72c5e6b5665890df3e6df26db5f9f3dfc95a9f546800416a69167fb677645b55587f2e9e2b4dc85c9662f91f65d21910c3f7621e149600bd5f460d6d82cc2f2d872a5ee6781245560278cf7cedef82f2908936421d1bdd83edc1d519c38414cf139b7a043961304f8b9c20a5fb52718e9988466693b46be28c5a09ba9b07ff8b4fd66f6", 0x97}, {&(0x7f00000010c0)="af45544099b02d22d28e2a1dddf8577537970800d7b29da9786e85be574743984a3ff3d8860e51b05717b2dc51b381631cbddd113ac827332aa129e988e8bf0e79d28288107ad48052", 0x49}, {&(0x7f0000001140)="84c4e9007060ad7639d7550decbfae759d311e0a82bc546a65504b21d2e019c18592c49259aeb377da55784d7d3e02c178c588b491b50f3a7eeb85ab62552a19b7687ba4abd56ee4550e75d6e4cbf157a43a45b6817028aa33a072756a0e2c1c1bdf3355ec3f0da93098db6d38726ee5018ffc4553e9caaaba604346472b19badd19cd9b5103b96d13bcdc4935e69c8d8480e72e46b30a0cb6c254b7f7", 0x9d}, {&(0x7f0000001200)="3cfa4a3ab32b3b5c6076cef47f5a48b4f7374585c875643769f6492d8ec54be9a1de281c2067922bd15a9ae98d5c40b172f55f580bcbf6b4cb1c270d239ddc50", 0x40}, {&(0x7f0000001240)="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", 0x1000}], 0x6, &(0x7f00000022c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}], 0x18}}], 0x4, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000002400)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:22:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1712.642651] loop0: detected capacity change from 0 to 40
[ 1712.695722] loop4: detected capacity change from 0 to 40
[ 1712.697764] FAULT_INJECTION: forcing a failure.
[ 1712.697764] name failslab, interval 1, probability 0, space 0, times 0
[ 1712.699569] CPU: 1 PID: 8903 Comm: syz-executor.7 Not tainted 6.1.0-next-20221213 #1
[ 1712.699864] loop2: detected capacity change from 0 to 40
[ 1712.700533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1712.700585] Call Trace:
[ 1712.700596]  <TASK>
[ 1712.703016]  dump_stack_lvl+0x8f/0xb7
[ 1712.703549]  should_fail_ex.cold+0x5/0xa
[ 1712.704088]  ? jbd2__journal_start+0x194/0x6b0
[ 1712.704708]  should_failslab+0x9/0x20
[ 1712.705224]  kmem_cache_alloc+0x5a/0x410
[ 1712.705752]  ? lock_is_held_type+0xdb/0x130
[ 1712.706449]  jbd2__journal_start+0x194/0x6b0
[ 1712.707199]  __ext4_journal_start_sb+0x4a5/0x6b0
[ 1712.707989]  ? ext4_ind_migrate+0x2cb/0x840
[ 1712.708704]  ext4_ind_migrate+0x2cb/0x840
[ 1712.709387]  ? ext4_change_inode_journal_flag+0x361/0x550
[ 1712.710291]  ? __ext4_journal_stop+0x10b/0x1f0
[ 1712.711050]  ext4_fileattr_set+0x1521/0x19f0
[ 1712.711809]  ? __pfx_ext4_fileattr_set+0x10/0x10
[ 1712.712591]  ? lock_acquire+0x32/0xc0
[ 1712.713255]  ? down_write+0x157/0x220
[ 1712.713868]  ? memset+0x24/0x50
[ 1712.714460]  ? fileattr_fill_flags+0x27f/0x320
[ 1712.715235]  vfs_fileattr_set+0x780/0xb90
[ 1712.715990]  ? __pfx_vfs_fileattr_set+0x10/0x10
[ 1712.716601]  ? __mnt_want_write+0x1fe/0x2f0
[ 1712.717329]  ? memset+0x24/0x50
[ 1712.717774]  do_vfs_ioctl+0xa6c/0x1af0
[ 1712.718434]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1712.718990]  ? inode_has_perm+0x171/0x1d0
[ 1712.719709]  ? __pfx_file_has_perm+0x10/0x10
[ 1712.720285]  ? __pfx___fget_files+0x10/0x10
[ 1712.720827]  ? lock_acquire+0x32/0xc0
[ 1712.721482]  ? selinux_file_ioctl+0xb5/0x260
[ 1712.722064]  __x64_sys_ioctl+0x110/0x210
[ 1712.722777]  do_syscall_64+0x3f/0x90
[ 1712.723256]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1712.724115] RIP: 0033:0x7fab32b4cb19
[ 1712.724579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1712.727536] RSP: 002b:00007fab300c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1712.727978] loop1: detected capacity change from 0 to 40
[ 1712.728434] RAX: ffffffffffffffda RBX: 00007fab32c5ff60 RCX: 00007fab32b4cb19
[ 1712.728460] RDX: 0000000020000040 RSI: 0000000040086602 RDI: 0000000000000003
[ 1712.728480] RBP: 00007fab300c21d0 R08: 0000000000000000 R09: 0000000000000000
[ 1712.731792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1712.732636] R13: 00007ffd5acd771f R14: 00007fab300c2300 R15: 0000000000022000
[ 1712.733513]  </TASK>
[ 1712.760643] FAT-fs (loop4): bogus number of reserved sectors
[ 1712.761444] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1712.786993] FAULT_INJECTION: forcing a failure.
[ 1712.786993] name failslab, interval 1, probability 0, space 0, times 0
[ 1712.788679] CPU: 0 PID: 8912 Comm: syz-executor.2 Not tainted 6.1.0-next-20221213 #1
[ 1712.789660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1712.790693] Call Trace:
[ 1712.791030]  <TASK>
[ 1712.791388]  dump_stack_lvl+0x8f/0xb7
[ 1712.791916]  should_fail_ex.cold+0x5/0xa
[ 1712.792473]  should_failslab+0x9/0x20
[ 1712.792979]  __kmem_cache_alloc_node+0x5b/0x400
[ 1712.793584]  ? alloc_pipe_info+0x109/0x590
[ 1712.794139]  kmalloc_trace+0x26/0x60
[ 1712.794692]  alloc_pipe_info+0x109/0x590
[ 1712.795230]  splice_direct_to_actor+0x6e6/0x8c0
[ 1712.795865]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1712.796517]  ? inode_security+0x105/0x140
[ 1712.797094]  ? avc_policy_seqno+0xd/0x70
[ 1712.797651]  ? selinux_file_permission+0x3a/0x510
[ 1712.798303]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1712.798988]  ? security_file_permission+0xb5/0xe0
[ 1712.799648]  do_splice_direct+0x1bc/0x290
[ 1712.800208]  ? __pfx_do_splice_direct+0x10/0x10
[ 1712.800843]  ? lock_is_held_type+0xdb/0x130
[ 1712.801439]  do_sendfile+0xb1d/0x1280
[ 1712.801981]  ? __pfx_do_sendfile+0x10/0x10
[ 1712.802594]  __x64_sys_sendfile64+0x248/0x2a0
[ 1712.803196]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1712.803855]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1712.804544]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1712.805242]  do_syscall_64+0x3f/0x90
[ 1712.805739]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1712.806453] RIP: 0033:0x7fa357d41b19
[ 1712.807010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1712.809296] RSP: 002b:00007fa3552b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1712.810285] RAX: ffffffffffffffda RBX: 00007fa357e54f60 RCX: 00007fa357d41b19
[ 1712.810339] syz-executor.0: attempt to access beyond end of device
[ 1712.810339] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1712.811184] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1712.811205] RBP: 00007fa3552b71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1712.811224] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1712.812961] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1712.813816] R13: 00007ffedac6f33f R14: 00007fa3552b7300 R15: 0000000000022000
[ 1712.813868]  </TASK>
03:22:39 executing program 6:
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:22:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:22:39 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) (fail_nth: 6)

03:22:39 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1713.001056] loop0: detected capacity change from 0 to 40
03:22:39 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1713.051618] FAULT_INJECTION: forcing a failure.
[ 1713.051618] name failslab, interval 1, probability 0, space 0, times 0
[ 1713.053316] CPU: 1 PID: 8919 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1713.054423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1713.055553] Call Trace:
[ 1713.055911]  <TASK>
[ 1713.056234]  dump_stack_lvl+0x8f/0xb7
[ 1713.056788]  should_fail_ex.cold+0x5/0xa
[ 1713.057359]  should_failslab+0x9/0x20
[ 1713.057905]  __kmem_cache_alloc_node+0x5b/0x400
[ 1713.058546]  ? iter_file_splice_write+0x169/0xcb0
[ 1713.059191]  ? iter_file_splice_write+0x169/0xcb0
[ 1713.059825]  __kmalloc+0x46/0xc0
[ 1713.060301]  iter_file_splice_write+0x169/0xcb0
[ 1713.060926]  ? generic_file_read_iter+0x330/0x550
[ 1713.061588]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1713.062250]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1713.062920]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1713.063591]  ? preempt_schedule_common+0x59/0xc0
[ 1713.064363]  ? inode_security+0x105/0x140
[ 1713.065072]  ? security_file_permission+0xb5/0xe0
[ 1713.065865]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1713.066711]  direct_splice_actor+0x113/0x180
[ 1713.067440]  splice_direct_to_actor+0x33a/0x8c0
[ 1713.068210]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1713.069016]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1713.069846]  ? security_file_permission+0xb5/0xe0
[ 1713.070680]  do_splice_direct+0x1bc/0x290
[ 1713.071368]  ? __pfx_do_splice_direct+0x10/0x10
[ 1713.072142]  ? lock_is_held_type+0xdb/0x130
[ 1713.072868]  do_sendfile+0xb1d/0x1280
[ 1713.073533]  ? __pfx_do_sendfile+0x10/0x10
[ 1713.074274]  __x64_sys_sendfile64+0x248/0x2a0
[ 1713.075011]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1713.075837]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1713.076685]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1713.077569]  do_syscall_64+0x3f/0x90
[ 1713.078181]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1713.079064] RIP: 0033:0x7fdc7e53db19
[ 1713.079670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1713.082469] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1713.083666] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1713.084784] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1713.085894] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1713.087026] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1713.088149] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1713.089322]  </TASK>
[ 1713.155270] loop1: detected capacity change from 0 to 40
[ 1713.158947] loop4: detected capacity change from 0 to 40
[ 1713.173368] FAT-fs (loop4): bogus number of reserved sectors
[ 1713.174225] FAT-fs (loop4): Can't find a valid FAT filesystem
03:22:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1713.442187] loop2: detected capacity change from 0 to 40
[ 1713.544817] syz-executor.2: attempt to access beyond end of device
[ 1713.544817] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1713.546332] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:22:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1727.564959] loop0: detected capacity change from 0 to 40
[ 1727.574509] loop1: detected capacity change from 0 to 40
[ 1727.586138] loop5: detected capacity change from 0 to 40
03:22:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:22:53 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) (fail_nth: 7)

03:22:53 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:22:53 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, 0x0, 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:22:53 executing program 3:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000480)=0x3)

[ 1727.612508] loop4: detected capacity change from 0 to 40
[ 1727.626676] loop2: detected capacity change from 0 to 40
[ 1727.640379] FAT-fs (loop4): bogus number of reserved sectors
[ 1727.641925] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1727.646389] FAULT_INJECTION: forcing a failure.
[ 1727.646389] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1727.648261] CPU: 0 PID: 8952 Comm: syz-executor.7 Not tainted 6.1.0-next-20221213 #1
[ 1727.649255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1727.650306] Call Trace:
[ 1727.650666]  <TASK>
[ 1727.650988]  dump_stack_lvl+0x8f/0xb7
[ 1727.651518]  should_fail_ex.cold+0x5/0xa
[ 1727.652088]  _copy_to_user+0x30/0x1c0
[ 1727.652597]  simple_read_from_buffer+0xd0/0x170
[ 1727.653247]  proc_fail_nth_read+0x19c/0x230
[ 1727.653845]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1727.654497]  ? security_file_permission+0xb5/0xe0
[ 1727.655161]  vfs_read+0x2e1/0x9f0
[ 1727.655647]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1727.656287]  ? __pfx_vfs_read+0x10/0x10
[ 1727.656858]  ? __fget_files+0x270/0x450
[ 1727.657436]  ksys_read+0x12b/0x260
[ 1727.657992]  ? __pfx_ksys_read+0x10/0x10
[ 1727.658567]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1727.659287]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1727.660022]  do_syscall_64+0x3f/0x90
[ 1727.660540]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1727.661267] RIP: 0033:0x7fab32aff69c
[ 1727.661774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1727.664173] RSP: 002b:00007fab300c2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1727.665178] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab32aff69c
[ 1727.666146] RDX: 000000000000000f RSI: 00007fab300c21e0 RDI: 0000000000000004
[ 1727.667112] RBP: 00007fab300c21d0 R08: 0000000000000000 R09: 0000000000000000
[ 1727.668056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1727.668998] R13: 00007ffd5acd771f R14: 00007fab300c2300 R15: 0000000000022000
[ 1727.669995]  </TASK>
[ 1727.672063] FAULT_INJECTION: forcing a failure.
[ 1727.672063] name failslab, interval 1, probability 0, space 0, times 0
[ 1727.673563] CPU: 0 PID: 8949 Comm: syz-executor.5 Not tainted 6.1.0-next-20221213 #1
[ 1727.674639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1727.675751] Call Trace:
[ 1727.676106]  <TASK>
[ 1727.676428]  dump_stack_lvl+0x8f/0xb7
[ 1727.677005]  should_fail_ex.cold+0x5/0xa
[ 1727.677587]  should_failslab+0x9/0x20
[ 1727.678140]  __kmem_cache_alloc_node+0x5b/0x400
[ 1727.678804]  ? alloc_pipe_info+0x109/0x590
[ 1727.679385]  kmalloc_trace+0x26/0x60
[ 1727.679935]  alloc_pipe_info+0x109/0x590
[ 1727.680500]  splice_direct_to_actor+0x6e6/0x8c0
[ 1727.681152]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1727.681836]  ? inode_security+0x105/0x140
[ 1727.682441]  ? avc_policy_seqno+0xd/0x70
[ 1727.682994]  ? selinux_file_permission+0x3a/0x510
[ 1727.683658]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1727.684389]  ? security_file_permission+0xb5/0xe0
[ 1727.685098]  do_splice_direct+0x1bc/0x290
[ 1727.685672]  ? __pfx_do_splice_direct+0x10/0x10
[ 1727.686350]  ? lock_is_held_type+0xdb/0x130
[ 1727.686952]  do_sendfile+0xb1d/0x1280
03:22:54 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1727.687654]  ? __pfx_do_sendfile+0x10/0x10
[ 1727.688256]  __x64_sys_sendfile64+0x248/0x2a0
[ 1727.688882]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1727.689518]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1727.690211]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1727.690933]  do_syscall_64+0x3f/0x90
[ 1727.691420]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1727.692102] RIP: 0033:0x7faf07d6fb19
[ 1727.692577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1727.694848] RSP: 002b:00007faf052e5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1727.695807] RAX: ffffffffffffffda RBX: 00007faf07e82f60 RCX: 00007faf07d6fb19
[ 1727.696705] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1727.697610] RBP: 00007faf052e51d0 R08: 0000000000000000 R09: 0000000000000000
[ 1727.698524] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1727.699467] R13: 00007fff9087069f R14: 00007faf052e5300 R15: 0000000000022000
[ 1727.700505]  </TASK>
[ 1727.737992] FAULT_INJECTION: forcing a failure.
[ 1727.737992] name failslab, interval 1, probability 0, space 0, times 0
[ 1727.739907] CPU: 0 PID: 8957 Comm: syz-executor.2 Not tainted 6.1.0-next-20221213 #1
[ 1727.741120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1727.742452] Call Trace:
[ 1727.742911]  <TASK>
[ 1727.743310]  dump_stack_lvl+0x8f/0xb7
[ 1727.744002]  should_fail_ex.cold+0x5/0xa
[ 1727.744660]  should_failslab+0x9/0x20
[ 1727.745210]  __kmem_cache_alloc_node+0x5b/0x400
[ 1727.745837]  ? alloc_pipe_info+0x1e4/0x590
[ 1727.746388]  ? alloc_pipe_info+0x1e4/0x590
[ 1727.746958]  __kmalloc+0x46/0xc0
[ 1727.747424]  alloc_pipe_info+0x1e4/0x590
[ 1727.747988]  splice_direct_to_actor+0x6e6/0x8c0
[ 1727.748611]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1727.749263]  ? inode_security+0x105/0x140
[ 1727.749837]  ? avc_policy_seqno+0xd/0x70
[ 1727.750378]  ? selinux_file_permission+0x3a/0x510
[ 1727.751051]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1727.751728]  ? security_file_permission+0xb5/0xe0
[ 1727.752400]  do_splice_direct+0x1bc/0x290
[ 1727.752972]  ? __pfx_do_splice_direct+0x10/0x10
[ 1727.753601]  ? lock_is_held_type+0xdb/0x130
[ 1727.754198]  do_sendfile+0xb1d/0x1280
[ 1727.754760]  ? __pfx_do_sendfile+0x10/0x10
[ 1727.755360]  __x64_sys_sendfile64+0x248/0x2a0
[ 1727.755990]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1727.756640]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1727.757321]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1727.758029]  do_syscall_64+0x3f/0x90
[ 1727.758531]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1727.759224] RIP: 0033:0x7fa357d41b19
[ 1727.759710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1727.761997] RSP: 002b:00007fa3552b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1727.762996] RAX: ffffffffffffffda RBX: 00007fa357e54f60 RCX: 00007fa357d41b19
[ 1727.763897] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1727.764813] RBP: 00007fa3552b71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1727.765698] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1727.766611] R13: 00007ffedac6f33f R14: 00007fa3552b7300 R15: 0000000000022000
[ 1727.767546]  </TASK>
[ 1727.790701] syz-executor.0: attempt to access beyond end of device
[ 1727.790701] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1727.792348] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:22:54 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:22:54 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1727.845607] loop1: detected capacity change from 0 to 40
03:22:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1727.935990] syz-executor.1: attempt to access beyond end of device
[ 1727.935990] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1727.937651] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:22:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1728.053010] loop4: detected capacity change from 0 to 40
03:22:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:22:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1728.084709] FAT-fs (loop4): bogus number of reserved sectors
[ 1728.085672] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1728.100945] loop0: detected capacity change from 0 to 40
03:22:54 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x2, &(0x7f0000000040)=0x4000)

03:22:54 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1728.174661] FAULT_INJECTION: forcing a failure.
[ 1728.174661] name failslab, interval 1, probability 0, space 0, times 0
[ 1728.176673] CPU: 0 PID: 8976 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1728.177664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1728.178696] Call Trace:
[ 1728.179038]  <TASK>
[ 1728.179348]  dump_stack_lvl+0x8f/0xb7
[ 1728.179881]  should_fail_ex.cold+0x5/0xa
[ 1728.180433]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 1728.181057]  should_failslab+0x9/0x20
[ 1728.181576]  kmem_cache_alloc+0x5a/0x410
[ 1728.182134]  fat_cache_add.part.0+0x5b4/0xb50
[ 1728.182780]  fat_get_cluster+0x922/0xd40
[ 1728.183349]  ? __pfx_fat_get_cluster+0x10/0x10
[ 1728.183967]  ? __brelse+0x88/0xa0
[ 1728.184473]  fat_get_mapped_cluster+0x216/0x450
[ 1728.185131]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 1728.185845]  ? mark_lock.part.0+0xef/0x2f70
[ 1728.186462]  fat_bmap+0x1fc/0x460
[ 1728.186966]  fat_get_block+0x33e/0x930
[ 1728.187528]  ? __pfx_fat_get_block+0x10/0x10
[ 1728.188142]  ? lock_is_held_type+0xdb/0x130
[ 1728.188765]  __block_write_begin_int+0x380/0x13d0
[ 1728.189438]  ? __pfx_fat_get_block+0x10/0x10
[ 1728.190071]  ? __pfx___block_write_begin_int+0x10/0x10
[ 1728.190816]  ? __pfx___lock_acquire+0x10/0x10
[ 1728.191439]  ? PageHeadHuge+0x169/0x1b0
[ 1728.192002]  ? __pfx_fat_get_block+0x10/0x10
[ 1728.192600]  block_write_begin+0xb9/0x450
[ 1728.193179]  cont_write_begin+0x4fe/0x700
[ 1728.193757]  ? current_time+0x79/0x2c0
[ 1728.194308]  ? __pfx_fat_get_block+0x10/0x10
[ 1728.194918]  ? mark_held_locks+0x9e/0xe0
[ 1728.195487]  ? __pfx_cont_write_begin+0x10/0x10
[ 1728.196130]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1728.196828]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1728.197528]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1728.198152]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1728.198848]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 1728.199549]  fat_write_begin+0x89/0x180
[ 1728.200091]  ? __pfx_fat_get_block+0x10/0x10
[ 1728.200710]  generic_perform_write+0x25a/0x580
[ 1728.201358]  ? __pfx_generic_perform_write+0x10/0x10
[ 1728.202042]  ? __pfx_fat_update_time+0x10/0x10
[ 1728.202694]  ? __pfx_file_update_time+0x10/0x10
[ 1728.203347]  ? generic_write_checks+0x2c0/0x400
[ 1728.203465] loop2: detected capacity change from 0 to 40
[ 1728.203989]  __generic_file_write_iter+0x308/0x4b0
[ 1728.205360]  ? do_sendfile+0xb1d/0x1280
[ 1728.205920]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 1728.206576]  generic_file_write_iter+0xe7/0x350
[ 1728.207224]  do_iter_readv_writev+0x211/0x3c0
[ 1728.207846]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1728.208518]  ? avc_policy_seqno+0xd/0x70
[ 1728.209086]  ? security_file_permission+0xb5/0xe0
[ 1728.209756]  do_iter_write+0x18b/0x700
[ 1728.210303]  ? lock_is_held_type+0xdb/0x130
[ 1728.210912]  vfs_iter_write+0x74/0xb0
[ 1728.211449]  iter_file_splice_write+0x73e/0xcb0
[ 1728.212105]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1728.212802]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1728.213515]  ? inode_security+0x105/0x140
[ 1728.214103]  ? security_file_permission+0xb5/0xe0
[ 1728.214791]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1728.215487]  direct_splice_actor+0x113/0x180
[ 1728.216094]  splice_direct_to_actor+0x33a/0x8c0
[ 1728.216734]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1728.217391]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1728.218081]  ? security_file_permission+0xb5/0xe0
[ 1728.218753]  do_splice_direct+0x1bc/0x290
[ 1728.219325]  ? __pfx_do_splice_direct+0x10/0x10
[ 1728.219970]  ? lock_is_held_type+0xdb/0x130
[ 1728.220574]  do_sendfile+0xb1d/0x1280
[ 1728.221114]  ? __pfx_do_sendfile+0x10/0x10
[ 1728.221726]  __x64_sys_sendfile64+0x248/0x2a0
[ 1728.222199] loop1: detected capacity change from 0 to 40
[ 1728.222325]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1728.223696]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1728.224391]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1728.225093]  do_syscall_64+0x3f/0x90
[ 1728.225596]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1728.226286] RIP: 0033:0x7fdc7e53db19
[ 1728.226795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1728.227973] loop5: detected capacity change from 0 to 40
[ 1728.229051] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1728.229085] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1728.229107] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1728.229126] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1728.233432] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1728.234347] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1728.235312]  </TASK>
[ 1728.311697] syz-executor.2: attempt to access beyond end of device
[ 1728.311697] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1728.313333] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1728.313501] syz-executor.1: attempt to access beyond end of device
[ 1728.313501] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1728.315989] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1728.353679] syz-executor.5: attempt to access beyond end of device
[ 1728.353679] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1728.355287] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1728.395487] syz-executor.0: attempt to access beyond end of device
[ 1728.395487] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1728.397341] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:23:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:11 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

03:23:11 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:11 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4b47, &(0x7f0000000040)=0x4000)

03:23:11 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x204082, 0xa0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = dup(0xffffffffffffffff)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000200))
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
clone3(&(0x7f0000001380)={0x42000400, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x1f}, &(0x7f0000000240)=""/62, 0x3e, &(0x7f0000000280)=""/4096, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], 0x7}, 0x58)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x440, 0x103)
r5 = dup(r4)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0xfc, 0xfd, 0xe3, 0x0, 0x6, 0x101, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc1e5, 0x4, @perf_config_ext={0x2, 0x3}, 0x8800, 0x3f, 0x4, 0x8, 0x200000000002, 0x2, 0x3, 0x0, 0xfffffff7, 0x0, 0x5}, r3, 0xd, r5, 0xa)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup(r6)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r7, 0x6)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:23:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1745.403674] loop5: detected capacity change from 0 to 40
[ 1745.404681] loop4: detected capacity change from 0 to 40
[ 1745.409946] FAT-fs (loop4): bogus number of reserved sectors
[ 1745.410427] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1745.452650] loop0: detected capacity change from 0 to 40
[ 1745.455404] loop1: detected capacity change from 0 to 40
[ 1745.460093] loop2: detected capacity change from 0 to 40
[ 1745.505675] FAULT_INJECTION: forcing a failure.
[ 1745.505675] name failslab, interval 1, probability 0, space 0, times 0
[ 1745.507208] CPU: 1 PID: 9012 Comm: syz-executor.2 Not tainted 6.1.0-next-20221213 #1
[ 1745.508197] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1745.509205] Call Trace:
[ 1745.509546]  <TASK>
[ 1745.509853]  dump_stack_lvl+0x8f/0xb7
[ 1745.510380]  should_fail_ex.cold+0x5/0xa
[ 1745.510948]  should_failslab+0x9/0x20
[ 1745.511470]  __kmem_cache_alloc_node+0x5b/0x400
[ 1745.512081]  ? iter_file_splice_write+0x169/0xcb0
[ 1745.512722]  ? iter_file_splice_write+0x169/0xcb0
[ 1745.513358]  __kmalloc+0x46/0xc0
[ 1745.513825]  iter_file_splice_write+0x169/0xcb0
[ 1745.514443]  ? generic_file_read_iter+0x330/0x550
[ 1745.515111]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1745.515785]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1745.516484]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1745.517204]  ? inode_security+0x105/0x140
[ 1745.517797]  ? security_file_permission+0xb5/0xe0
[ 1745.518465]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1745.519187]  direct_splice_actor+0x113/0x180
[ 1745.519802]  splice_direct_to_actor+0x33a/0x8c0
[ 1745.520436]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1745.521109]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1745.521814]  ? security_file_permission+0xb5/0xe0
[ 1745.522490]  do_splice_direct+0x1bc/0x290
[ 1745.523066]  ? __pfx_do_splice_direct+0x10/0x10
[ 1745.523725]  ? lock_is_held_type+0xdb/0x130
[ 1745.524334]  do_sendfile+0xb1d/0x1280
[ 1745.524891]  ? __pfx_do_sendfile+0x10/0x10
[ 1745.525506]  __x64_sys_sendfile64+0x248/0x2a0
[ 1745.526117]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1745.526808]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1745.527517]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1745.528236]  do_syscall_64+0x3f/0x90
[ 1745.528751]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1745.529459] RIP: 0033:0x7fa357d41b19
[ 1745.529963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1745.531533] syz-executor.1: attempt to access beyond end of device
[ 1745.531533] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1745.532314] RSP: 002b:00007fa3552b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1745.532347] RAX: ffffffffffffffda RBX: 00007fa357e54f60 RCX: 00007fa357d41b19
[ 1745.532369] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1745.534153] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1745.535098] RBP: 00007fa3552b71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1745.535120] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1745.535140] R13: 00007ffedac6f33f R14: 00007fa3552b7300 R15: 0000000000022000
[ 1745.535195]  </TASK>
[ 1745.545228] FAULT_INJECTION: forcing a failure.
[ 1745.545228] name failslab, interval 1, probability 0, space 0, times 0
[ 1745.546717] CPU: 1 PID: 9002 Comm: syz-executor.5 Not tainted 6.1.0-next-20221213 #1
[ 1745.547746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1745.548804] Call Trace:
[ 1745.549157]  <TASK>
[ 1745.549473]  dump_stack_lvl+0x8f/0xb7
[ 1745.550015]  should_fail_ex.cold+0x5/0xa
[ 1745.550578]  should_failslab+0x9/0x20
[ 1745.551120]  __kmem_cache_alloc_node+0x5b/0x400
[ 1745.551755]  ? alloc_pipe_info+0x1e4/0x590
[ 1745.552330]  ? alloc_pipe_info+0x1e4/0x590
[ 1745.552903]  __kmalloc+0x46/0xc0
[ 1745.553386]  alloc_pipe_info+0x1e4/0x590
[ 1745.553940]  splice_direct_to_actor+0x6e6/0x8c0
[ 1745.554577]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1745.555277]  ? inode_security+0x105/0x140
[ 1745.555862]  ? avc_policy_seqno+0xd/0x70
[ 1745.556427]  ? selinux_file_permission+0x3a/0x510
[ 1745.557078]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1745.557772]  ? security_file_permission+0xb5/0xe0
[ 1745.558449]  do_splice_direct+0x1bc/0x290
[ 1745.559020]  ? __pfx_do_splice_direct+0x10/0x10
[ 1745.559666]  ? lock_is_held_type+0xdb/0x130
[ 1745.560264]  do_sendfile+0xb1d/0x1280
[ 1745.560819]  ? __pfx_do_sendfile+0x10/0x10
[ 1745.561427]  __x64_sys_sendfile64+0x248/0x2a0
[ 1745.562039]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1745.562717]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1745.563422]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1745.564137]  do_syscall_64+0x3f/0x90
[ 1745.564643]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1745.565350] RIP: 0033:0x7faf07d6fb19
[ 1745.565848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1745.568199] RSP: 002b:00007faf052e5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1745.569196] RAX: ffffffffffffffda RBX: 00007faf07e82f60 RCX: 00007faf07d6fb19
[ 1745.570123] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1745.571068] RBP: 00007faf052e51d0 R08: 0000000000000000 R09: 0000000000000000
[ 1745.572004] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1745.572939] R13: 00007fff9087069f R14: 00007faf052e5300 R15: 0000000000022000
[ 1745.573897]  </TASK>
03:23:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:11 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1745.629455] syz-executor.0: attempt to access beyond end of device
[ 1745.629455] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1745.631181] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:23:12 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4b49, &(0x7f0000000040)=0x4000)

03:23:12 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:12 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1745.739280] loop4: detected capacity change from 0 to 40
[ 1745.756845] FAT-fs (loop4): bogus number of reserved sectors
[ 1745.757659] FAT-fs (loop4): Can't find a valid FAT filesystem
03:23:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1745.848852] loop0: detected capacity change from 0 to 40
[ 1745.866257] loop1: detected capacity change from 0 to 40
[ 1745.915389] loop2: detected capacity change from 0 to 40
[ 1745.935371] loop5: detected capacity change from 0 to 40
[ 1745.971962] syz-executor.0: attempt to access beyond end of device
[ 1745.971962] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1745.973652] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1746.012306] syz-executor.2: attempt to access beyond end of device
[ 1746.012306] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1746.013845] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1746.027436] syz-executor.1: attempt to access beyond end of device
[ 1746.027436] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1746.029073] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1746.050705] syz-executor.5: attempt to access beyond end of device
[ 1746.050705] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1746.052748] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1758.101956] loop0: detected capacity change from 0 to 40
03:23:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x541b, &(0x7f0000000040)=0x4000)

03:23:24 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
recvmmsg$unix(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000540)=""/96, 0x60}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/52, 0x34}, {&(0x7f0000000800)=""/223, 0xdf}], 0x9, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000c4c3829ca007d8ad40f35db507320641dc0ba6f532b640e8c2b4f8af18a9c00daf952f4985ef64194560d5142174d4d5d930f48c9dbf6008295c324df2fae6ac", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="000000009f95de974927c9e59c6e359ef2fc659a6ceb6eed36f63447e4b1c8c8d2ce87f37e62201dc57aac3615b438471647849ae356000af1be9b9de0af2f20960c1de853884cc97dfe37f41bfca9c406c700573d5601a07151148b690b87a6ca22e6aa2a69d6d7eefb2dea1d38588ec54d4813f21b3ca4e06276c2334e69c9ff9ba6b1b04d98866c7b90a533bb78237e18776fdfdb8e375f3bb58721971bcfd21d273ca120c20a6b41d4f010af0742fbdb34009295a8842464ade36c41e74278df9680000000bbc63e3b29a51c3f88a1021b9231a990124f"], 0xe8}}], 0x1, 0x20, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000b00)={0x7f, 0xffffffff8cd91d75, 0x300000000000000})
rmdir(&(0x7f0000000140)='./file1\x00')
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x2, 0x0, 0x5, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x1f, 0x1, 0x5, 0xffff, 0x4, "8ac8ceae9861020e"})
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x80010, r2, 0x5d330000)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = dup(r5)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
symlinkat(&(0x7f0000000c00)='./file0\x00', r6, &(0x7f0000000c40)='./file1\x00')
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x185000, 0x0)
lsetxattr$security_selinux(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0)='system_u:object_r:passwd_exec_t:s0\x00', 0x23, 0x1)

03:23:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:24 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

[ 1758.130239] loop2: detected capacity change from 0 to 40
[ 1758.171318] loop1: detected capacity change from 0 to 40
[ 1758.176551] loop4: detected capacity change from 0 to 40
[ 1758.185920] loop5: detected capacity change from 0 to 40
[ 1758.193574] FAT-fs (loop4): bogus number of reserved sectors
[ 1758.194443] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1758.230085] FAULT_INJECTION: forcing a failure.
[ 1758.230085] name failslab, interval 1, probability 0, space 0, times 0
[ 1758.231794] CPU: 1 PID: 9067 Comm: syz-executor.5 Not tainted 6.1.0-next-20221213 #1
[ 1758.232776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1758.233780] Call Trace:
[ 1758.234112]  <TASK>
[ 1758.234411]  dump_stack_lvl+0x8f/0xb7
[ 1758.234960]  should_fail_ex.cold+0x5/0xa
[ 1758.235039] syz-executor.2: attempt to access beyond end of device
[ 1758.235039] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.235490]  should_failslab+0x9/0x20
[ 1758.237147] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1758.237560]  __kmem_cache_alloc_node+0x5b/0x400
[ 1758.239150]  ? iter_file_splice_write+0x169/0xcb0
[ 1758.239789]  ? iter_file_splice_write+0x169/0xcb0
[ 1758.240412]  __kmalloc+0x46/0xc0
[ 1758.240874]  iter_file_splice_write+0x169/0xcb0
[ 1758.241478]  ? generic_file_read_iter+0x330/0x550
[ 1758.242122]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1758.242767]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1758.243460]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1758.244148]  ? inode_security+0x105/0x140
[ 1758.244717]  ? security_file_permission+0xb5/0xe0
[ 1758.245345]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1758.246012]  direct_splice_actor+0x113/0x180
[ 1758.246591]  splice_direct_to_actor+0x33a/0x8c0
[ 1758.247231]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1758.247904]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1758.248597]  ? security_file_permission+0xb5/0xe0
[ 1758.249270]  do_splice_direct+0x1bc/0x290
[ 1758.249813]  ? __pfx_do_splice_direct+0x10/0x10
[ 1758.250458]  ? lock_is_held_type+0xdb/0x130
[ 1758.251065]  do_sendfile+0xb1d/0x1280
[ 1758.251616]  ? __pfx_do_sendfile+0x10/0x10
[ 1758.252228]  __x64_sys_sendfile64+0x248/0x2a0
[ 1758.252838]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1758.253505]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1758.254210]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1758.254942]  do_syscall_64+0x3f/0x90
[ 1758.255452]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1758.256150] RIP: 0033:0x7faf07d6fb19
[ 1758.256648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1758.258965] RSP: 002b:00007faf052e5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1758.259943] RAX: ffffffffffffffda RBX: 00007faf07e82f60 RCX: 00007faf07d6fb19
[ 1758.260867] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1758.261792] RBP: 00007faf052e51d0 R08: 0000000000000000 R09: 0000000000000000
[ 1758.262710] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1758.263665] R13: 00007fff9087069f R14: 00007faf052e5300 R15: 0000000000022000
[ 1758.264620]  </TASK>
03:23:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x5421, &(0x7f0000000040)=0x4000)

[ 1758.299790] syz-executor.1: attempt to access beyond end of device
[ 1758.299790] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.301619] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:23:24 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

03:23:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x5, 0x40)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {0xee00, 0xee01}}, './file1\x00'})
perf_event_open(&(0x7f0000000140)={0x5def98cf8f3ed9bb, 0x80, 0x3, 0x32, 0x2c, 0x4, 0x0, 0x8, 0x50800, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x6}, 0x40, 0xfffffffffffffff9, 0x495, 0x8, 0x6, 0xffffffc0, 0x6c, 0x0, 0xffffff6e, 0x0, 0x3}, 0x0, 0x10, r2, 0x8)
sendfile(r1, r0, 0x0, 0xfffffdef)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x2)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r4)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)={0x124, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "314bab001b074629451dd778a70c5a94794f4c70ac78a2851236b381d759347e68c161fee6d9cd454ff571d88073abc7677e728d7db624f4ff279f1e19bb20832fe76adcee01c2d75d16e619a5e3c6552e4c3e91751c5eefa6d7"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x84, 0x7, 0x1, 0x0, "ce8bc263fda541d3a6e9f227313b256048f59f0e0de35438ba1e7e367313191c590ccb1cdbff94669d6bc3b4a38721e7c17befa2ddf8a2e96499cd81accde405f9a3db905fa66035644616a3bcc76a6cbdb0d275a71f416fa2d2aa34670614ae3f664bce8c5469b530212ebf1cb0f510e4a016571a36dd705aa99e20f2dc720e"}]}, 0x124}, 0x1, 0x0, 0x0, 0x85}, 0x4044)
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000300)={{r4}, "4ad72c9b3b3a4cb6ab3a306cf015f876baa93426dd13fb31509cc9eab91cccbdceb6ec1a685bff867f163312a7a3fe3e7163650861bc6ea0123a782e63c26321a87535b36484b41bbf32dec11e0f1695eae9a012d64910f98a97a239417e96ce2c4fb11874b593ba17813a567e6fc2af3e45763668873b84c7acad7799d1ca44caad5ee4fad39226c398bfad54384e5e280d1dc0678083cd5858cf61b3269c646ac49e9584657fa9961541b759b550a9229a56d0ed4e093a92330a3308b668e49e29ccc1ffcea36be1451d74c7c1f35b5136a24ebd5c0ffe8ea363f75f4f5aa1fab445db1edd8e2e9325e85f2ca588efb7c4383c149b3785305eea4eea739984ada6080e154200deef7975900e216210b6170fd5dc3da2d5ed4958a1c0da64352262d15782ea94437ca307de45eb014ed590245422ac73880d0018c88879e1831f592a281be0e86b01bfe0c781ea7dd608cec360842279478257708b7f7e05c9306e96f25d92db6b1146c75af98cbd9606fbf03e1cd2f7bb863de4c0c043719d82d79edae460827b03dc3c1697263d944ebe5199672cfb259d5a9daeb27e1e248445fd87756a877fa7c64ebe0d8fa547cf644a43020c9b58146cb846fbfbe75219418ca2003a866c0aedfe760c6186c864934ed424de806e4ed07d0e46c381611d9a5683c494216bbf985046f3c0c77d12f417d03dff7d35d2f2f79afa85f04e0526e8738d1f15e59073fec3fe8c9ad2ecfbe11b9e9947cb2de29dd475ad8b4fe60d391825a9c7db6e07ecc0c332095e8f72ccf6707044f8195efab42680486e533700dd3fd36e36fbf9124d9a353261d52bb5890fa90ef5125c326737fbc3c7ae356aff9ad1d82581b2c360a077f5bf736495740659c42b08db308076c54a8b4df216599a1c5876d1b9508b64be81e300e7df0097530194b67c0aa0d9fa48e50a8372b51e1b47bb577b1cbcbec813080d2457d4d1856412174aff8f3da35dd296817dbff895c6b3da4fc237b6beaa25979078f42a3cbf4e19b7649747d7a55076c27748a7b60443060e7ed1469521a96f3b5abd03486279c48ff9036c90253142b1899b36bca9144b13aa514f4b2e12e95bf7d5c1965aa8199aa60779667139fcb9bde0e9420429114a5665966908dc86895cf77434a8567fd2ff4b101ed30412d44eead3fe9fd81d01be265aaf6f00338b74157976599e94e547fcc033b9e007de3acbcb0f88fd6f87ec4089990c79debd0a463c3da6c66fda53843b05ac172245bc175e9a9c40cf0fb9766c7714201b724738050da56677e982d9054541a03d2b10fbe080be025396438c8a56d151b4cee3f6d89863c912c8069b3ac3924476a416b567adf17558dea4f81cfa3a64ce87c09a91ef504cf0bf0f837a285b2dfc366b5c55acb7c22a56cefbbd856bf30ec75bdf74a3dba19ea4bc305064b9a6ef6dc2cf288bc80a3f124e079212d7f5968df48ba7d215bd800359a54d379d485475fef810480364951711b368002fd5cc4b8de1be6ab053f98e589d2818ca2676dc0d218c96a068eecf19f30cd79ce5f82aa48cea503471cb159bb8ab4afd75271bff01358f5cea1293a946895b06a6dbe8f9d96412dab5df0c5c61ed14e9f28718d630f0041815cd5b9b17b645633b8aef3b2c88a292b69fc9c4e0f7b4e667571c4f860c7444a05f8a371c0e38a617ccf3b41fa4ee75d05f85fe7a884e1d7f861fcd7ec8b1bee57bd529a7132f8306a90c181d0e2bd9f950895f1bbe67868756e4e05ab6ea662106414a7441fb0b5c15db3603af56416d3f34f6a7f6066b7576807d7afbbb5e331dba607af9646cc7cb474194558c9ddf543fa28babf0e46e76144cec206d85f00d433b1064f85c35d8cc6a2834cf961d1cfaaf598a0d51a59744933597c2aeb761775f9f324ac13a61d19a1169ee1064f7e8d385833109de9782c5db49936480857567eb04da5de7d01ef1c0988f377685b89a23acfa95036099c9e31c693beb003672f3cbf6f16f7ce30f4b65995b97e8cca7ab358a49760fd9da0e2b277bb0b75df01e8f66b419f3cc32c9fd6513d886a787f750c818aef507be7f2f2dece5584bc6871494c8fc3c91660abb6e772dc0cf5964acbf47a54b652477b7ab6ca8080a00cb93d287a2fa9e1de6685c50de0b881a50b9839c498725d617836e59940482c181fdc7571f435a7755125e8571fb24559b3d8ba8e36ce2fda8414702f6bef938be86e654b3f536aededc71b976af1dc6b538c026596b4328c0d5eb92c173ebf66ddef501606cf32308d873644c5c1ea8b004ecf1b1a724a1c29c31f8507745ef66985a27a06c8b0e6dad5e51e583de1ab522a122b15dce1701099cf4cd8e966b0323dbcf614eed7a874dccbc357a59d39b0b961c674c89059ce10501496701bfb383d17041a0b465c45f609946c653169c698ddbdb34f2ce68585950256c2fed1053576ff497eee023920ae2cbf1b5adb49bfe874f1412c1560fd38444885be610a910fbd2958692ac1a4a610c72cceaf780793adfbf4a25295aacfdb06842a52888609b683c3c457b06f93fb81a02fd49cf1b46dd3f11d83f07d044014624cb68cbc19151f084ff0bd41b4053801d14f6260c6eab97d69165c84392c0b7fa9108b1441c3b35a246d8171659d1f56992ed73496b77e1ea6d1ec437a68107bd99a11471b3bcf8e8b8f74f3a114d8f19d09b567cc89db4b9772fda334f5e29bfef7fae7fd7fb7dc7f74bd0a0b911c83df0f511758167a6e2231249fb841dadd9f905e6cdd07e39e69a6e8af16af8313b8742e58db007c4658fae58c4e01ebb2e3f1a76c774acfa25b367f790d0d5dd07539a0be85acf8d60d1fc8ccef5e30163a978aa8d6e0333245e26f06a6b6c112f071c9af3860bab6f95bed495fa196962eb795d34922eabf113228f6d858357ef3af5f0a00e906ffbbc74a8f2de9804e18911de9817836fa51c93ae7efe04d0a08878281266ddb614fcb6b740c3495d80e9a7c9adae6849b5bcfac119219e48d14a4a8c4d8da4610cb9ca4770ab5d53b7eb90b5ca69afd2583f807d49a8a2a65d58d72dbc541f9ef590fa3e5131cf46c7d75681ab2fbed4629753a094a9ff7cf075273fd4d8423fa688cd3762612cfcbfaaceea12d5ed5acaeafc86ae48e03c5589fdf1d77f77a2daa937a08342e13e21a11f9d0c2d1c92d2d23d0da9aa64fdd6e362bc9978d17b1127bd03ec5e5e6b480a7775da4aa8bd08e71fc948036f3cd5ffb50fc7f5ba8d38c0402cf1b3d26ed0e38aed0a3426c01033f51e6ddbc16d80ff54073910c72079596b7cdf93f2b344008e4c6095a57f501e4e7e8bbecf4eb295251066e82c9630fb2c6733c3865fb7b0328824e4fb6448c11600194d361547776920038d6db26fde16a7bec989e0edfad3ab27b6c9e1a688bfc38729c6605101baacfca7a8c1aa984651c14aefc672c62398be0d45a49e0164157fa5b1ed5abefe63ef57c79466c86096335460f90df9266b5b0f0de4867f9fe4903457968ead1e18558ab6d7c7e9ae342d30509ed5f79e6ea594775f5bd2f871b1d0d1fa0fbcf89b66aae1d50901ad705c08d423ec5591e19394f699735df75dbdfd269c5c3d1becf741f08ae01b311b4e66b14935dae583df452ea127a74b3296eae50df512c9179d11f98c50be8bbaff8c96efac9a751b7ce60becd4e151fc4cb470f907de0b76a62f2206514dab1d746ec033f72b40b37e691c50f457ec96d2a0d4b667d44a250f2f906af90695abfb32b69901c1d59eb331385fc5916e842c4220791be2eb73b9b826c49d1b30b1a11f2ea7ea63df53c37f164ddd3e47c54fc51b8f4febef36fe9bc459a154b9a5d9c80231d70188ab1257a07c50608a79b8d19c3244588574f800711a9d50c71090ee880e811f62e882055c0f174866f8dccfd6adf6ac245ac3c5336df055114aa3801799d2663da3cb247f446c5da242195b84c498139465bad5d39d2140945abfeaf9e6472b282dc1e59cbb74dca1df632fa306d333ccbd0256e7094a5f47ce74782806af14b0d544b9a3cb5f8dcb356564896cd30e570e944d611d1391e43d5aab20b9037e54e6c14eec2bed7017f421e4ab9533ad3a08a839f655113584dd4aa50ea49af1c1555a35f0a09eef250387bca0379855c80eaf7a52b2b9310d4d171ef66579a92f4b085f3876e3ec99bc70716ee03d0f73453bf016474909a57b88d625d3408273131bfa000d1ab755d2f20fde49a840228b38800a0f5b6707494342b28a2c1703ad2bc2e118a25d134e3a564ed9103ccb5e902ac606a75e992843cc9548741a44e268086ad16f556b90ef546e7157d0c92dfa93b9e50dcdf4d5967a5592bdbf7ef075c8ba591dc125258e1680889365437eb878bd64a42310cf0fb3cd78fd71a1715179b643dc43d1f89f467337c2a7b01680268fadcd0cfe283d398775c165efeaa38be7d47a0beea13b81477cf71e6a4b28b2d9cc461f8b655bd22ee16f1830194dd6da1efc5c671bc82fb303b763085f6653c1405f2aaa258f1dac4cd10d7144f4ba6726930a2d5a028818fd438420d67a2b6589c48e090e2b30a5650b7dc2f1af57410b9f35a0781b5d8c8ca78ba78243ab65f914b0635005a9a8df0a7ddfd5bd71dfcfa1c9ec348b64bbce6d178bbd6651877f33d30eb46e68fe383cf08f8fdea778a344ef24e9ee5f5ce4336351437e2c610b2628fa4559f2854573df7cdb849b100a459747ada733ac99ea433477f0e7e258aae4d1b513172502a7f54ec5831487d5ac0a1ced9ee561c42521cc653784e7a799ed8e7479b6df459e004b7b3aff6bfc0b6f4f1884c2fd208956cbaac0772908150e66ad8c34678fa81f4c2c31c46d4ea9e8ffef94fed902153cd5327035e0257d442bdb93f036631767394d190a1f21cd2b5f0f89188a7f5a281c069256d77bb77848880623411b7b986ae125665653fadb822af2d7c5d81246856b2ba6ac52402313ea1e2901277e69e002b8334c03e939b4ea0da5e04035d38c8e5010249901af17035382c934779c62941c9ec86a6bcd8f7f25dc493b48af36cb7ff5eec2adea6aadbf14329c67a7766c3e7e397cc37bfbed55373c2d86966bb55b8fab6b714de08aef59bed9b1edf05f3ad2ff84b5bd330b0c62f0353f7254def04a1b2f3346325fba332ed5df6904346da15656fc047d7ec8e8283716672d460ff4e478c90045e692d954bbe0084640727ad147c93a34f5c40cbcfbf5ec9e04a4ee281171bab70ea36277d774b7ae27ab2778bc694e3dcb210628f90ac77eb974a8b8ed2dcc549d48108e4be44a13c092792a5186a61a83094ea0393ae6e49293fe339c738540ddfd21b835f0425fd34206c5a9afa73edb1ad12db98a87c947567a73ac2e935e4308baf1b24ea7178149b737b8a32e0a198c6b7f0db99772ddbf82288cf975dbbbafcb4155b90ba1e522c0008ef84d62860a4ca1da280e2aba18a3784d2d26cc0096fd1747ab666c29273b5e4d355e816ceeaa272bf03cab57b1c1513257c472a1740a9b2c25ce01338569ed601e583021be1618613830ad8361cfac7c7ef64ad6704d2e9b179243b2e21ffe2a0f10adec1a3f723ffe157f362854d27b2b9bf0470ce90f63f043b222192bc3d51c8ea755f404269cf9401ce5ab93ce11a9f7c3b781014cc6f95643b9b8dfa4c45c7ce4d860463117a1aff4d337bc823f60ed54a6b771dd485887131557004cdc857275d5dcd623cd71c675d009222c43edda83d2cc50344421c3d5e252769b41d88ea3e75c9239"})

[ 1758.335494] syz-executor.0: attempt to access beyond end of device
[ 1758.335494] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.337138] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:23:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1758.477177] loop4: detected capacity change from 0 to 40
03:23:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1758.513740] FAT-fs (loop4): bogus number of reserved sectors
[ 1758.514643] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1758.549152] loop2: detected capacity change from 0 to 40
[ 1758.564729] loop0: detected capacity change from 0 to 40
[ 1758.616248] syz-executor.0: attempt to access beyond end of device
[ 1758.616248] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.617784] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1758.627935] loop1: detected capacity change from 0 to 40
03:23:24 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

03:23:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x5450, &(0x7f0000000040)=0x4000)

[ 1758.721918] loop5: detected capacity change from 0 to 40
03:23:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1758.768233] syz-executor.1: attempt to access beyond end of device
[ 1758.768233] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.770043] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1758.773417] syz-executor.2: attempt to access beyond end of device
[ 1758.773417] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.775125] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1758.842789] loop0: detected capacity change from 0 to 40
03:23:25 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x5451, &(0x7f0000000040)=0x4000)

[ 1758.907585] loop4: detected capacity change from 0 to 40
[ 1758.919982] syz-executor.0: attempt to access beyond end of device
[ 1758.919982] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.921565] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1758.928185] FAT-fs (loop4): invalid media value (0x00)
[ 1758.928897] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1758.934244] syz-executor.5: attempt to access beyond end of device
[ 1758.934244] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1758.939610] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:23:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:25 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:25 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

03:23:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1759.121284] loop2: detected capacity change from 0 to 40
[ 1759.185308] syz-executor.2: attempt to access beyond end of device
[ 1759.185308] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1759.186868] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1759.236452] loop1: detected capacity change from 0 to 40
[ 1759.263610] loop4: detected capacity change from 0 to 40
[ 1759.265286] loop0: detected capacity change from 0 to 40
[ 1759.280073] FAT-fs (loop4): invalid media value (0x00)
[ 1759.281160] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1759.319364] syz-executor.1: attempt to access beyond end of device
[ 1759.319364] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1759.321078] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:23:37 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x5452, &(0x7f0000000040)=0x4000)

03:23:37 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x4800)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000000e06010200000000000000000000000709008920aa9d3c462d0200731b06c2eaebec8ed30001000700"/55], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4000890)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = open(&(0x7f0000000200)='./file1\x00', 0x14000, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300))
ioctl$FIOCLEX(r3, 0x5451)

03:23:37 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:37 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))

03:23:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1771.511830] loop2: detected capacity change from 0 to 40
[ 1771.514893] loop5: detected capacity change from 0 to 40
[ 1771.522584] loop1: detected capacity change from 0 to 40
[ 1771.581528] loop4: detected capacity change from 0 to 40
[ 1771.587532] bio_check_eod: 1 callbacks suppressed
[ 1771.587544] syz-executor.2: attempt to access beyond end of device
[ 1771.587544] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1771.588782] buffer_io_error: 1 callbacks suppressed
[ 1771.588791] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1771.588866] loop0: detected capacity change from 0 to 40
[ 1771.600413] syz-executor.5: attempt to access beyond end of device
[ 1771.600413] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1771.601318] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1771.613673] syz-executor.1: attempt to access beyond end of device
[ 1771.613673] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1771.615310] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1771.623387] FAT-fs (loop4): invalid media value (0x00)
[ 1771.624217] FAT-fs (loop4): Can't find a valid FAT filesystem
03:23:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1771.873232] syz-executor.0: attempt to access beyond end of device
[ 1771.873232] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1771.874835] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1771.994809] loop5: detected capacity change from 0 to 40
[ 1772.015148] loop2: detected capacity change from 0 to 40
[ 1772.107920] syz-executor.2: attempt to access beyond end of device
[ 1772.107920] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1772.108899] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1772.119676] syz-executor.5: attempt to access beyond end of device
[ 1772.119676] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1772.120647] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:23:53 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='/dev/nvram\x00', &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c)
r3 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x1)
ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000300)={{r0}, "9c1d350773b82b0cd3577fc332b91b696740174dce59bf278fdf741e0dba07c044068dc2e95ca8cd4a36bb81a63deb4d1a84e3749ac91f5cde8c1365797b6907b1c22b882efe5c1e3b3a5c209e32877b9c167facebb9eabfe937b4a2564158d7a9fa36c3d4819bc5f3678ea96ecd14662e851bdf95df6fb80dbdede619bd1d089ba9252483c01906520bafe9b94e172d7d5c42b417b19be81c06ef261fdb363264c087d8ad30ef2fda264577036873fb2441717a9069e24dee2a06b0531478c7823f41dfe2893144217c726bb5c167315e7fdf75edaa7c0007a11b1cb6f16d0cbb06b588e1a4d3a605e074fc38b0a723d1419682ca4c419322089632e3ad982ef3b8746efb1db46bb4bc6acd1808beca70170cd7e56c5a15706c240170009d20620a1ca7ad74baf58cd6f517dad524747df4d8026a089e176f1ce1efe8ad51998d81cfb101ef32d48c00bbd382297079ec51d882a364dbcd79e4d97d127aa596d9ac7067689bbac2cc190400e47e4d2434db9973637c99f5de82aa0c82bbf71a08e5debcfbcdd54ebc62fa928445e0abca6f48a89728658fe8f80cbc7d0ed18f00bb6d5cc315ccda403516c27bed2458220119ae1941d8acbd688dcc622579219e5ccaf754cf2754ca29cb224949796e6bd06ace7a801adcf5245cf33d9449529b9223e5496e481161b10ad25ee92e8e757af8c5f4e1978f0f8ee21998d6bf017ba6ee3910eaed2d085e3f4cbb0458366a3ae6380cb6b2dbfcf7cc067805cfec51afdd8785262e0a2c00f1eb6cfced191487ee1b397fd4b07761dd6a999e5e706af2b241efc57089306b8c7c6ffa47fd42dfa1edd10606847ba5743b6f64d70d9621594c3ace71af24f9a70c362ee40dd6f1fa3fc027c34aa1403712bbec3e922ac29d83cf0c49e32c9903514a6d09129eeb5a79861a2ab4dbcfc7730ded4d916ef5f877a7f347a0ca4518abef04896ea680685916add4b611f5d76d03d4c5cd5258c4ed30b407cb134c12fb9a768ca7a7ba3b60d7c3873512b80fe4df6652141791f4ee8f93866de8a50d164255c1c7aedd463a96e456641751d729ad951c924ffc53a5f5e41071b65405e6820cd2e342ec207ea3f238dc580f0f926134cbda76ac19c8c23efbd3576f6382c8df372d6c3024ca32022736ac471da7dcda08a81fc910cfc00d25da90eb5d151b40c22fb200747d8d31599391c79e702a08283ab5b74d9c0b8672bb40e5728c442d2f4825a3f93fb895e4e11b49fa180cd44e4617f299a7b47a1d4f20975812e8df60bc8603c5088b6e23b9000e89ebfe9b0696936d9d5b68b9efb7b496a3499d7e6739e346789bdc82c0c085a3c22b25959b631a17e7d0f4d070a1cf16f6bceb51f8faa8eccc286acaaae64ebe5994b79191948d8677372eac1244970c4a932ac0121d83603a8c17f4236f66f5618a2414e5c2821c3a0a5063bf97992d135217d1ed3e9468ab6de7ce90ced94321680bfb2d713f0de3754ecb470305243158dcdaa237abe07b9448dd1af0f8b463a0161231d2c08f156e397a1389e7b7197c910a697d23188f04b0579d35687305f6ecda413dd6a03984677b5f62f1d1145974823f93749cef5a53bd616fb30decea92131a80f7022b7e65e7a010e20d346714faed63ce060dd327882b94b1fd02f1b04650caae3844b4cdfcf754258d8af9e645984876345b6e626f3d6a5c28d212ae758bfe5b3c93b2694d32e4b92daff95909a271541556a8f7b71a12e20729b1a829e322bc466f9b34b3add77f5110a301c0a42f80e7fffd515960ed145f805881775180127bd8e17f5e95edb47ea0518fad828b43ea7650b82519d08c719b1726dd9f3f975856dc21ef9aa41bec3ebbdf98a3d52b7b6eba38d60059bb150911bf2eefbac89fce0a28cf4a039506caa6f5d8d9e0b006caac5390df2bdabee1c711ad9db87976bd85e8c1c853896e598702bfbd842af71fdd77a058b7710063758e405db5408e64b1984e91b9de1690b4c9c94187b01ccd5d818d1d4d58ffb511411ca20d2dded5cee04d62bc800f121d32727602cb23b5d2e6268f891bc3fdb4020f804effc3d166f5d52a7d4fceb51640ddbdb0a1547b4c484e2f4d2db445bccea850ba64edbc0a2315073aaa3a19119008e66a26814efb0a586daee5093d0e3f0757379d1e4368b640101584b7a81ed6e8b134c78b17b464401f1a9177aac5e62a119ca22bba6a2129c6e8e6822d86681fd8472b6380c0a6ccd5e8627580f54d702d305ba2b29d674a1a976505a933d1d14b731b022be5ff4b3eb0f8f790eebada9b5bfdea111b0f12277959ed11f999feec312125e3a4537990a296abd664833030fd920e6c6da8bea35ddba359405030780896bb23ad8fb23e8a6d41b6a6c6fb9c0117c68a06d894160404717c461bab9ac625bce386257e82cb2f8505fff874b04ca205a71d4e4589815a2f1d723642a2f5eaef1e24245744dd8b3bb9472a5b5eb4b2cdd3e133e85e125b621b59b6bc0b1fc072c0e3934eaab938ac2cca57e0d394a26b361bf701ac933b6f022354d750cd6cf88da6d7f3ab6c3d56c9579362e70d715a3e80029624d947407003cf889c66b1f8d3b2223b3ba9ef1033d6b04c42948d9bffb57454a3553a721981b6f1a0ad185ba004f6c8382ef6e65d2bab23525eeff3e4ab439439f22f9848209c3c66de45733ac94028e3b4eaf40538d6383e838a77010593ed1dac8ed566b5fc26065b7801c8a543a8175e73e5b4186e40eb40a864c64b7dd9b5d49037e7ac7f9fdb4c08e172de96b8c0f0c3e6398df4b963133de341cc48eed20b39880c08beb6f8db44c2e21fbda6fdfa82bea4abb294f7e2834fa1b672b61023f31bef83116be20ed17f2b546e5036b61210735c7659c938fe9640a131f60a2ac84bca5e3dcee39fb8583d1d42878ac75638240533d42550913d5f827b0271fa3bf26d0a3551138862eda686cf32e4528d8dfd3eab1f4300536e03f7c72a76e6e30921c4df96b66816db96090de102885e778158890e293dcc5cc4564506ddbce59f0434145d5819ea06a848eb63afca6ad95e2e4badd9080a00dd5bf20711c937187a6e57ae7f6ae70b38a7d268d57f220ecbb425295762fe2b9e30f05e407d641c1886eabab30743d449c597bb8aaecb2126a1871afad83619fd82f1be3119ded4dfd28ce1eb853920879445d89068b70fed9038efb38be9b0308add6004d99edbfef5dc2a9d8d9da6fc3069b1417e64aac1b67ead6df9d55c8603e985553a288e568f07101feff4e11c6520b3c13aafcd4ac3d2ed1b86a45f768c62cb08e5f774aa5b47d5c9103faf6184d9c0dffc35f43a97659306c65635cfda6f2e443fb5a8e7b3fbb63e03721452974571e3ae9310d379a5b22b59d34cf78e0aba743df8619bd530d9db953659029c4af0731a13aff69896fb6aca742887abde103cf60bdadd2db7e7138b01deb200972eb001d96aee2bba9a430d05e6c0acfb75bd0ff23b9081a6c5d770bd9f2f95f8288c3664c247c3aa3c19a3fb277f8d59d0aeba471441c2deedf9404c71e33eabd4721c0de30db60aca6575fd3a261b8263851f3e1dc4eab63e4b2c8cb2567333f5bf77be53f46d35c76b45f263f2790a1f85d1b54c5741555af975db473a1dbba9751921621b4b496b245cd236ae6553f2bffac3bcd60979cbc85f48877e333360c68ba39c205def3fb84d5fe065d43be9e3d31825774b0347a2d746818a3e2ba5e5564f28055e0cc4ef3c9ab2b6838d509cabfa5e6e10478852e3b211693a159582cb761c66ceaa56296dd295db7e9ebceaae0d80b92ce9a983ccb71bae56ddc363c9840819884dfae867fa05d57a2a0e15940afb2fcec1710259e99cf0ce8efefe1c877394198fcf03a4cc82f5749bd5e572d669f65b21025603a9a36f6bf0089a1894a5438c6fb7f6034029ccd546bc9da935885165658a354c8135e2f88458e2a72e09d2ea140ea149572be246d273732393d7dade28e9ceae193b29893594cd51f2dceede5b50332f8fd8ca2bdbedc353ee0134a82c34f15d7d5acbf33de45a760ab04c0ff92c57b11078125c94373a6566a291fc888ccd56f45c11cf857c68487ddadbf6f870407733cc8474c380e00de4a6b80d6e2cb4e41eb618d6374e8a4b79442141fe630ff643289dcc061e7b79402077ada47466691d341ab53e7eb920a348181ebff06fda0287f51e84210218716bbb143f8bfe5a7b4c9c1aec0ebda8a4de74d581edcad6a6e12afb88033bf77d2349c5f36b6539fdcf1e40650ff0f822cd018d568bccca2c314e4e7b2cffa5f371d3fa748343f7e1f32a6404f7be771424b30bffa9983b3241e2de6e4268d5e2be8b78b0ec7e5ee987c0da6e5faad7e6db9b841a418cc9d698c98359e44f1466349ecccc55917fa1721775ff4e09d037fbb73f7291aaee98a4764d57c2049994ce9b034e4459e36366ec455153aef9b85a0fc7c4f3d1bfbae6d61bee0b4d1d95d51b3150f2e61bbf6ee9401e39990170fff101799388871acc1b6cc8f6494e084f4e9a0cc6c2577ec25bd02dcdaa1e15607e67ed5cc1c64a8308559f2251d1461a931b6661c7b65b8cc521c36a77524076c9c8d92ec8980d32d0296b88b9b70613eebc5ed3d17de7101b40900acfb114e4f1f31b1dd937cfd94dbcfc50bdfe79dcf9eb37da5784e6da872c11def684ad0cf920f55cea3dfcb66d5572198bc87344f2757d020381d7221071dc6c5eef4977d81b48b3904be1defc5cb054d18040dc36bc877045366d4603ba8cf4fce3b9a9c10e84c258d2a96d485d329df73f5988601dcaa8dd2b237a9cfaa6396a32a266b9af11ef8eb00f46acbeb9c57742d0923938b092a2ebfbe3700bb0bb5d40fa83b37682832276f4899ac52ee18c8802a4a81e356af106e1e5c05951236d53fe545e47c76378d3d0901ef008683211c1a75c06f4bab2b6225b528ed2076acfab22108c8ca7d8fb82e00189a2a4785bf8f88438f48d13e64f26080778f6d433fc2854ec206dca14a585dd225f0b840fd28b9296678286f66ce98e8b3bb671604691fbb9dba7b45a0bdcf90c4d14f667ef692139abf4b7668999d15a632fc230a6e819736248d8a963021d98751763dc12923ccc86aded8e1aff1f616ba04cf44e426a8c47533b7167bc947fe78b9af0548ca33591c8ba3ac5d3d24d54f0150c630c9460c662e3106d06580a3c0e0f4cf12dde699c904e7737cf211b1d639c5d1d6b1653793d5c7883c466caf0ffcfc37498507fcc1402c3e80bff9a1338b2c383bae41aafdf5889aa5733171c55bc01229a58ac8b2047dc3abcd57043b761eb6bd16e20f9c5796c9df977409a1f25ffa4c654617e73c2986a6c201fc23ca6e85beafafdcc7d142db36b92d1fec144dc834bc261b3e3c448d601560bef092a997050f37ff22949d079743f2dae8c87b77bdaad611aa35d0fe7d1fdbd76c46637deb932fb68748cc5985ac23ce31de7c94395a5774734c5c0ba7f42aea344c978c1048658e960e5bd6768bc1cb1299fc6d0482ea1679fd8214cefe8a65ddd1048fd4ead99927b05b7f033284466dfb9885055821163c9e4bb337d7734779bfe58c4ca49271d2ddc2f56332cd170efe4dd3a54289ec4bf73cabf877ff2bfede2896c35a6d54224e6ab30316831380b770b4ce4d7aec38d0b7c034752d95186875f67db4a6a9b1ad15723e67b8f35bbf9327da5091fb39cb174500d0527fbf7601f83583dd7e4a0e9b72104314f004ec4a98c03092f67bd84f61374c5e4f46b1542"})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:53 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x5460, &(0x7f0000000040)=0x4000)

03:23:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:23:53 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))

03:23:53 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:23:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:23:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1786.897496] loop4: detected capacity change from 0 to 40
[ 1786.901754] loop1: detected capacity change from 0 to 40
[ 1786.905076] FAT-fs (loop4): invalid media value (0x00)
[ 1786.905580] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1786.918408] loop0: detected capacity change from 0 to 40
[ 1786.924836] loop5: detected capacity change from 0 to 40
[ 1786.960044] loop2: detected capacity change from 0 to 40
03:23:53 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40049409, &(0x7f0000000040)=0x4000)

[ 1787.019967] syz-executor.5: attempt to access beyond end of device
[ 1787.019967] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1787.020951] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1787.025051] syz-executor.1: attempt to access beyond end of device
[ 1787.025051] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1787.026905] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1787.043831] syz-executor.2: attempt to access beyond end of device
[ 1787.043831] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1787.044714] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1787.045636] syz-executor.0: attempt to access beyond end of device
[ 1787.045636] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1787.047454] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1802.748281] loop2: detected capacity change from 0 to 40
03:24:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:24:09 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r4, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000400)={0x7ff, 0x9, 0x4, 0x8, 0x7})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:09 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, &(0x7f0000000040)=0x4000)

03:24:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:09 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:09 executing program 6:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))

[ 1802.761180] loop5: detected capacity change from 0 to 40
[ 1802.787988] EXT4-fs warning (device sda): __ext4_ioctl:1241: Setting inode version is not supported with metadata_csum enabled.
[ 1802.794366] loop4: detected capacity change from 0 to 40
[ 1802.798817] FAT-fs (loop4): invalid media value (0x00)
[ 1802.799244] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1802.799245] EXT4-fs warning (device sda): __ext4_ioctl:1241: Setting inode version is not supported with metadata_csum enabled.
[ 1802.803693] FAULT_INJECTION: forcing a failure.
[ 1802.803693] name failslab, interval 1, probability 0, space 0, times 0
[ 1802.804584] CPU: 1 PID: 9194 Comm: syz-executor.2 Not tainted 6.1.0-next-20221213 #1
[ 1802.805125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1802.805684] Call Trace:
[ 1802.805867]  <TASK>
[ 1802.806027]  dump_stack_lvl+0x8f/0xb7
[ 1802.806319]  should_fail_ex.cold+0x5/0xa
[ 1802.806618]  should_failslab+0x9/0x20
[ 1802.806901]  __kmem_cache_alloc_node+0x5b/0x400
[ 1802.807245]  ? iter_file_splice_write+0x169/0xcb0
[ 1802.807613]  ? iter_file_splice_write+0x169/0xcb0
[ 1802.807968]  __kmalloc+0x46/0xc0
[ 1802.808225]  iter_file_splice_write+0x169/0xcb0
[ 1802.808567]  ? generic_file_read_iter+0x330/0x550
[ 1802.808924]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1802.809297]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1802.809671]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1802.810058]  ? inode_security+0x105/0x140
[ 1802.810382]  ? security_file_permission+0xb5/0xe0
[ 1802.810745]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1802.811125]  direct_splice_actor+0x113/0x180
[ 1802.811468]  splice_direct_to_actor+0x33a/0x8c0
[ 1802.811816]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1802.812186]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1802.812564]  ? security_file_permission+0xb5/0xe0
[ 1802.812935]  do_splice_direct+0x1bc/0x290
[ 1802.813246]  ? __pfx_do_splice_direct+0x10/0x10
[ 1802.813602]  ? lock_is_held_type+0xdb/0x130
[ 1802.813930]  do_sendfile+0xb1d/0x1280
[ 1802.814230]  ? __pfx_do_sendfile+0x10/0x10
[ 1802.814560]  __x64_sys_sendfile64+0x248/0x2a0
[ 1802.814905]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1802.815270]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1802.815669]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1802.816059]  do_syscall_64+0x3f/0x90
[ 1802.816337]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1802.816723] RIP: 0033:0x7fa357d41b19
[ 1802.817001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1802.817085] loop0: detected capacity change from 0 to 40
[ 1802.818257] RSP: 002b:00007fa3552b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1802.818277] RAX: ffffffffffffffda RBX: 00007fa357e54f60 RCX: 00007fa357d41b19
[ 1802.818289] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1802.818300] RBP: 00007fa3552b71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1802.818311] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1802.821561] R13: 00007ffedac6f33f R14: 00007fa3552b7300 R15: 0000000000022000
[ 1802.822081]  </TASK>
[ 1802.824443] loop1: detected capacity change from 0 to 40
[ 1802.913666] syz-executor.0: attempt to access beyond end of device
[ 1802.913666] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1802.914582] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:24:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1802.972281] loop0: detected capacity change from 0 to 40
03:24:09 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4008660f, &(0x7f0000000040)=0x4000)

[ 1802.996894] syz-executor.0: attempt to access beyond end of device
[ 1802.996894] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1802.997862] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:24:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034", 0x15}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1803.056835] loop0: detected capacity change from 0 to 40
03:24:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:09 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x204082, 0xa0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = dup(0xffffffffffffffff)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000200))
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fork()
clone3(&(0x7f0000001380)={0x42000400, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x1f}, &(0x7f0000000240)=""/62, 0x3e, &(0x7f0000000280)=""/4096, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], 0x7}, 0x58)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat(r1, &(0x7f00000001c0)='./file1\x00', 0x440, 0x103)
r5 = dup(r4)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0xfc, 0xfd, 0xe3, 0x0, 0x6, 0x101, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc1e5, 0x4, @perf_config_ext={0x2, 0x3}, 0x8800, 0x3f, 0x4, 0x8, 0x200000000002, 0x2, 0x3, 0x0, 0xfffffff7, 0x0, 0x5}, r3, 0xd, r5, 0xa)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup(r6)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r7, 0x6)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1803.106359] syz-executor.5: attempt to access beyond end of device
[ 1803.106359] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.108076] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1803.113745] syz-executor.0: attempt to access beyond end of device
[ 1803.113745] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.114629] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1803.131272] loop2: detected capacity change from 0 to 40
03:24:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 35)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1803.164720] syz-executor.2: attempt to access beyond end of device
[ 1803.164720] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.165682] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1803.167519] syz-executor.1: attempt to access beyond end of device
[ 1803.167519] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.169372] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1803.202443] loop0: detected capacity change from 0 to 40
03:24:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1803.244082] syz-executor.0: attempt to access beyond end of device
[ 1803.244082] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.245001] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1803.251490] loop2: detected capacity change from 0 to 40
[ 1803.258994] loop4: detected capacity change from 0 to 40
[ 1803.280950] FAT-fs (loop4): invalid media value (0x00)
[ 1803.281933] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1803.294410] syz-executor.2: attempt to access beyond end of device
[ 1803.294410] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.295304] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:24:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 36)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1803.423597] loop0: detected capacity change from 0 to 40
[ 1803.507660] loop5: detected capacity change from 0 to 40
[ 1803.562380] syz-executor.0: attempt to access beyond end of device
[ 1803.562380] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.563342] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1803.602950] syz-executor.5: attempt to access beyond end of device
[ 1803.602950] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1803.604551] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1817.852341] loop5: detected capacity change from 0 to 40
03:24:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 37)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x6609, &(0x7f0000000040)=0x4000)

03:24:24 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x1a442, 0x9b91d19e8a786da2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:24 executing program 6:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r4, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000400)={0x7ff, 0x9, 0x4, 0x8, 0x7})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1817.927947] loop0: detected capacity change from 0 to 40
[ 1817.936836] loop4: detected capacity change from 0 to 40
[ 1817.941268] loop2: detected capacity change from 0 to 40
[ 1817.944471] loop1: detected capacity change from 0 to 40
[ 1817.951391] FAT-fs (loop4): bogus number of FAT sectors
[ 1817.952239] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1817.976647] syz-executor.5: attempt to access beyond end of device
[ 1817.976647] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1817.978244] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:24:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40087602, &(0x7f0000000040)=0x4000)

[ 1818.049783] syz-executor.2: attempt to access beyond end of device
[ 1818.049783] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1818.051478] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1818.059374] syz-executor.0: attempt to access beyond end of device
[ 1818.059374] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1818.061253] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1818.105868] EXT4-fs warning (device sda): __ext4_ioctl:1241: Setting inode version is not supported with metadata_csum enabled.
[ 1818.112221] EXT4-fs warning (device sda): __ext4_ioctl:1241: Setting inode version is not supported with metadata_csum enabled.
03:24:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, &(0x7f0000000040)=0x4000)

03:24:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 13)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1818.203804] syz-executor.1: attempt to access beyond end of device
[ 1818.203804] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1818.205830] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:24:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1818.250713] loop5: detected capacity change from 0 to 40
[ 1818.273054] FAULT_INJECTION: forcing a failure.
[ 1818.273054] name failslab, interval 1, probability 0, space 0, times 0
[ 1818.274150] CPU: 1 PID: 9273 Comm: syz-executor.5 Not tainted 6.1.0-next-20221213 #1
[ 1818.274845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1818.275571] Call Trace:
[ 1818.275823]  <TASK>
[ 1818.276042]  dump_stack_lvl+0x8f/0xb7
[ 1818.276477]  should_fail_ex.cold+0x5/0xa
[ 1818.276933]  should_failslab+0x9/0x20
[ 1818.277296]  __kmem_cache_alloc_node+0x5b/0x400
[ 1818.277740]  ? iter_file_splice_write+0x169/0xcb0
03:24:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1818.278295]  ? iter_file_splice_write+0x169/0xcb0
[ 1818.278770]  __kmalloc+0x46/0xc0
[ 1818.279101]  iter_file_splice_write+0x169/0xcb0
03:24:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 38)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1818.279533]  ? generic_file_read_iter+0x330/0x550
[ 1818.280144]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1818.280611]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1818.281096]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1818.281586]  ? inode_security+0x105/0x140
[ 1818.281995]  ? security_file_permission+0xb5/0xe0
[ 1818.282453]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1818.282939]  direct_splice_actor+0x113/0x180
[ 1818.283359]  splice_direct_to_actor+0x33a/0x8c0
[ 1818.283820]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1818.284291]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1818.284776]  ? security_file_permission+0xb5/0xe0
[ 1818.285241]  do_splice_direct+0x1bc/0x290
[ 1818.285634]  ? __pfx_do_splice_direct+0x10/0x10
[ 1818.286088]  ? lock_is_held_type+0xdb/0x130
[ 1818.286506]  do_sendfile+0xb1d/0x1280
[ 1818.286890]  ? __pfx_do_sendfile+0x10/0x10
[ 1818.287315]  __x64_sys_sendfile64+0x248/0x2a0
[ 1818.287743]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1818.288210]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1818.288701]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1818.289193]  do_syscall_64+0x3f/0x90
[ 1818.289550]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1818.290045] RIP: 0033:0x7faf07d6fb19
[ 1818.290403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1818.292037] RSP: 002b:00007faf052e5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1818.292728] RAX: ffffffffffffffda RBX: 00007faf07e82f60 RCX: 00007faf07d6fb19
[ 1818.293392] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1818.294038] RBP: 00007faf052e51d0 R08: 0000000000000000 R09: 0000000000000000
[ 1818.294689] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1818.295340] R13: 00007fff9087069f R14: 00007faf052e5300 R15: 0000000000022000
[ 1818.296029]  </TASK>
03:24:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x4020940d, &(0x7f0000000040)=0x4000)

[ 1818.385270] loop4: detected capacity change from 0 to 40
03:24:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 14)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1818.410648] FAT-fs (loop4): bogus number of FAT sectors
[ 1818.411604] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1818.452045] loop0: detected capacity change from 0 to 40
[ 1818.463281] loop2: detected capacity change from 0 to 40
[ 1818.463900] loop5: detected capacity change from 0 to 40
03:24:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1818.557046] syz-executor.0: attempt to access beyond end of device
[ 1818.557046] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1818.558791] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1818.579996] syz-executor.5: attempt to access beyond end of device
[ 1818.579996] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1818.581617] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1818.602381] loop1: detected capacity change from 0 to 40
[ 1818.605914] syz-executor.2: attempt to access beyond end of device
[ 1818.605914] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1818.607202] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1818.680450] syz-executor.1: attempt to access beyond end of device
[ 1818.680450] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1818.681963] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:24:39 executing program 6:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r4, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000400)={0x7ff, 0x9, 0x4, 0x8, 0x7})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f8", 0x16}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:24:39 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000140)={{0x80, 0x40}, 'port1\x00', 0x20, 0x100000, 0x9, 0x7, 0x1, 0x1, 0x5, 0x0, 0x0, 0x40})
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7f, 0x4, &(0x7f0000001400)=[{&(0x7f0000000300)="295a4ed52a27ca123b4aa93bcc12e480b4d5fb06b0126a046b5b1ff64696e0f231d6397948488c87f8184e8dc44a5bb1c9451504b41d6a6c0513cc084f533de6afa6502ec4d26b5dda4719819de402cddbe27571419c57eb49be202347d0897a5a83f4fa10419542a36c8afc5413d1e9c84b29f74f8ec81b07b4fd45da611c067f888b8c3c31ba2a28a2cb9c1add7cd543bd519f30592ebb05d4a94624711d740cfcd30d0b3228e169463a5c71cf4283f1b5e11c7e51569c42e1565fd058581ae486737ff264023f2c4ce3260e6524789535acef4b62bccda75d60fad7", 0xdd, 0x9fdf}, {&(0x7f0000000200)="f02172bb6690304efec6592ff6790db98270615ecf1496d13437cf12f4b06d7ed68f3cdcd6809b07052e86c9d0267a2d59836b12", 0x34, 0x8}, {&(0x7f0000000240), 0x0, 0x79}, {&(0x7f0000000400)="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", 0x1000, 0x3}], 0x40004, &(0x7f0000001480)={[{@nodots}, {@fat=@tz_utc}, {@dots}, {@nodots}], [{@uid_lt={'uid<', 0xee00}}, {@dont_hash}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
move_mount(r2, &(0x7f0000001500)='./file1\x00', r4, &(0x7f0000001540)='./file1\x00', 0xc4)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000017c0), 0x400, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x42000, 0x0)
sendfile(r1, r5, &(0x7f0000001800)=0xfff, 0x7)

03:24:39 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 15)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:39 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, &(0x7f0000000040)=0x4000)

03:24:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 39)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:39 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1833.364265] loop1: detected capacity change from 0 to 40
[ 1833.367931] loop0: detected capacity change from 0 to 40
[ 1833.374405] loop5: detected capacity change from 0 to 40
[ 1833.426311] loop2: detected capacity change from 0 to 40
[ 1833.428849] loop4: detected capacity change from 0 to 40
[ 1833.441379] FAT-fs (loop4): bogus number of FAT sectors
[ 1833.442234] FAT-fs (loop4): Can't find a valid FAT filesystem
03:24:39 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x80087601, &(0x7f0000000040)=0x4000)

[ 1833.508453] FAULT_INJECTION: forcing a failure.
[ 1833.508453] name failslab, interval 1, probability 0, space 0, times 0
[ 1833.510263] CPU: 0 PID: 9307 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1833.511334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1833.512371] Call Trace:
[ 1833.512723]  <TASK>
[ 1833.513025]  dump_stack_lvl+0x8f/0xb7
[ 1833.513564]  should_fail_ex.cold+0x5/0xa
[ 1833.514132]  should_failslab+0x9/0x20
[ 1833.514655]  __kmem_cache_alloc_node+0x5b/0x400
[ 1833.515273]  ? iter_file_splice_write+0x169/0xcb0
[ 1833.515939]  ? iter_file_splice_write+0x169/0xcb0
[ 1833.516568]  __kmalloc+0x46/0xc0
[ 1833.517055]  iter_file_splice_write+0x169/0xcb0
[ 1833.517675]  ? generic_file_read_iter+0x330/0x550
[ 1833.518337]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1833.518999]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1833.519684]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1833.520465]  ? inode_security+0x105/0x140
[ 1833.521042]  ? security_file_permission+0xb5/0xe0
[ 1833.521705]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1833.522399]  direct_splice_actor+0x113/0x180
[ 1833.523002]  splice_direct_to_actor+0x33a/0x8c0
[ 1833.523633]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1833.524310]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1833.524991]  ? security_file_permission+0xb5/0xe0
[ 1833.525653]  do_splice_direct+0x1bc/0x290
[ 1833.526216]  ? __pfx_do_splice_direct+0x10/0x10
[ 1833.526851]  ? lock_is_held_type+0xdb/0x130
[ 1833.527444]  do_sendfile+0xb1d/0x1280
[ 1833.528028]  ? __pfx_do_sendfile+0x10/0x10
[ 1833.528638]  __x64_sys_sendfile64+0x248/0x2a0
[ 1833.529256]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1833.529914]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1833.530605]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1833.531314]  do_syscall_64+0x3f/0x90
[ 1833.531825]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1833.532525] RIP: 0033:0x7fdc7e53db19
[ 1833.533018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1833.535308] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1833.536304] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1833.537230] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1833.538142] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1833.539061] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1833.539996] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1833.540910]  </TASK>
[ 1833.544969] loop3: detected capacity change from 0 to 159
[ 1833.576974] syz-executor.1: attempt to access beyond end of device
[ 1833.576974] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1833.578960] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1833.589380] syz-executor.5: attempt to access beyond end of device
[ 1833.589380] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1833.591151] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1833.653385] syz-executor.2: attempt to access beyond end of device
[ 1833.653385] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
03:24:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1833.655353] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:24:40 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 16)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:40 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x801c581f, &(0x7f0000000040)=0x4000)

[ 1833.875973] loop4: detected capacity change from 0 to 40
[ 1833.910839] loop1: detected capacity change from 0 to 40
03:24:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 40)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1833.963713] loop5: detected capacity change from 0 to 40
[ 1833.966281] loop2: detected capacity change from 0 to 40
[ 1834.048566] syz-executor.2: attempt to access beyond end of device
[ 1834.048566] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1834.050151] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:24:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1834.125687] syz-executor.5: attempt to access beyond end of device
[ 1834.125687] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1834.127377] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1834.177744] syz-executor.1: attempt to access beyond end of device
[ 1834.177744] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1834.179666] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1834.186431] loop0: detected capacity change from 0 to 40
[ 1834.232074] FAULT_INJECTION: forcing a failure.
[ 1834.232074] name failslab, interval 1, probability 0, space 0, times 0
[ 1834.233896] CPU: 0 PID: 9339 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1834.234821] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1834.235773] Call Trace:
[ 1834.236129]  <TASK>
[ 1834.236419]  dump_stack_lvl+0x8f/0xb7
[ 1834.236910]  should_fail_ex.cold+0x5/0xa
[ 1834.237424]  should_failslab+0x9/0x20
[ 1834.237899]  __kmem_cache_alloc_node+0x5b/0x400
[ 1834.238478]  ? iter_file_splice_write+0x169/0xcb0
[ 1834.239084]  ? iter_file_splice_write+0x169/0xcb0
[ 1834.239677]  __kmalloc+0x46/0xc0
[ 1834.240120]  iter_file_splice_write+0x169/0xcb0
[ 1834.240696]  ? generic_file_read_iter+0x330/0x550
[ 1834.241312]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1834.241939]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1834.242572]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1834.243223]  ? inode_security+0x105/0x140
[ 1834.243751]  ? security_file_permission+0xb5/0xe0
[ 1834.244436]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1834.245054]  direct_splice_actor+0x113/0x180
[ 1834.245597]  splice_direct_to_actor+0x33a/0x8c0
[ 1834.246165]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1834.246770]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1834.247386]  ? security_file_permission+0xb5/0xe0
[ 1834.248008]  do_splice_direct+0x1bc/0x290
[ 1834.248510]  ? __pfx_do_splice_direct+0x10/0x10
[ 1834.249103]  ? lock_is_held_type+0xdb/0x130
[ 1834.249641]  do_sendfile+0xb1d/0x1280
[ 1834.250168]  ? __pfx_do_sendfile+0x10/0x10
[ 1834.250708]  __x64_sys_sendfile64+0x248/0x2a0
[ 1834.251270]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1834.251877]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1834.252506]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1834.253141]  do_syscall_64+0x3f/0x90
[ 1834.253596]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1834.254224] RIP: 0033:0x7fdc7e53db19
[ 1834.254670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1834.256736] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1834.257617] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1834.258435] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1834.259259] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1834.260098] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1834.260910] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1834.261766]  </TASK>
[ 1834.326963] loop4: detected capacity change from 0 to 40
[ 1834.346983] loop3: detected capacity change from 0 to 159
03:24:52 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 41)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:52 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:24:52 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:52 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 17)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:52 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0045878, &(0x7f0000000040)=0x4000)

03:24:52 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x3c1802, 0x3)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68)
r2 = fork()
r3 = fork()
clone3(&(0x7f0000001380)={0x42000400, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x1f}, &(0x7f0000000240)=""/62, 0x3e, &(0x7f0000000280)=""/4096, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0], 0x7}, 0x58)
clone3(&(0x7f0000001380)={0x42000400, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), {0x2000001f}, &(0x7f0000000240)=""/62, 0x3e, &(0x7f0000000280)=""/4096, &(0x7f0000001300)=[0x0, r3, 0x0, 0x0, 0x0, r2, 0x0], 0x7}, 0x58)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x7, 0x54, 0x0, 0xfff, 0x10204, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x4, 0x9}, 0x8, 0x8000, 0x7, 0x2, 0x2, 0x5, 0x5, 0x0, 0x10001, 0x0, 0xff}, r2, 0x7, 0xffffffffffffffff, 0x2)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:24:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:24:52 executing program 6:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r4, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000400)={0x7ff, 0x9, 0x4, 0x8, 0x7})
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1846.474940] loop2: detected capacity change from 0 to 40
[ 1846.479427] loop0: detected capacity change from 0 to 40
[ 1846.485943] loop4: detected capacity change from 0 to 40
[ 1846.492064] loop1: detected capacity change from 0 to 40
[ 1846.504241] loop5: detected capacity change from 0 to 40
03:24:52 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0045878, &(0x7f0000000040)=0x4000)

[ 1846.634743] syz-executor.2: attempt to access beyond end of device
[ 1846.634743] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1846.636387] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:24:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1846.700382] syz-executor.5: attempt to access beyond end of device
[ 1846.700382] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1846.701958] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1846.738857] syz-executor.1: attempt to access beyond end of device
[ 1846.738857] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1846.740778] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1846.763539] syz-executor.0: attempt to access beyond end of device
[ 1846.763539] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1846.765565] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1846.830086] loop4: detected capacity change from 0 to 40
03:24:53 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000040)=0x4000)

03:24:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 18)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:24:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 42)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1847.016302] loop2: detected capacity change from 0 to 40
03:24:53 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1847.063782] FAULT_INJECTION: forcing a failure.
[ 1847.063782] name failslab, interval 1, probability 0, space 0, times 0
[ 1847.065283] CPU: 0 PID: 9387 Comm: syz-executor.2 Not tainted 6.1.0-next-20221213 #1
[ 1847.066290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1847.067328] Call Trace:
[ 1847.067679]  <TASK>
[ 1847.067995]  dump_stack_lvl+0x8f/0xb7
[ 1847.068533]  should_fail_ex.cold+0x5/0xa
[ 1847.069092]  should_failslab+0x9/0x20
[ 1847.069611]  __kmem_cache_alloc_node+0x5b/0x400
[ 1847.070236]  ? iter_file_splice_write+0x169/0xcb0
[ 1847.070876]  ? iter_file_splice_write+0x169/0xcb0
[ 1847.071514]  __kmalloc+0x46/0xc0
[ 1847.072016]  iter_file_splice_write+0x169/0xcb0
[ 1847.072636]  ? generic_file_read_iter+0x330/0x550
[ 1847.073303]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1847.073970]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1847.074658]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1847.075345]  ? preempt_schedule_common+0x59/0xc0
[ 1847.075987]  ? inode_security+0x105/0x140
[ 1847.076574]  ? security_file_permission+0xb5/0xe0
[ 1847.077234]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1847.077912]  direct_splice_actor+0x113/0x180
[ 1847.078504]  splice_direct_to_actor+0x33a/0x8c0
[ 1847.079129]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1847.079777]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1847.080470]  ? security_file_permission+0xb5/0xe0
[ 1847.081115]  do_splice_direct+0x1bc/0x290
[ 1847.081664]  ? __pfx_do_splice_direct+0x10/0x10
[ 1847.082299]  ? lock_is_held_type+0xdb/0x130
[ 1847.082884]  do_sendfile+0xb1d/0x1280
[ 1847.083431]  ? __pfx_do_sendfile+0x10/0x10
[ 1847.084037]  __x64_sys_sendfile64+0x248/0x2a0
[ 1847.084639]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1847.085285]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1847.085969]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1847.086661]  do_syscall_64+0x3f/0x90
[ 1847.087157]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1847.087843] RIP: 0033:0x7fa357d41b19
[ 1847.088351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1847.090565] RSP: 002b:00007fa3552b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1847.091536] RAX: ffffffffffffffda RBX: 00007fa357e54f60 RCX: 00007fa357d41b19
[ 1847.092445] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1847.093339] RBP: 00007fa3552b71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1847.094223] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1847.095115] R13: 00007ffedac6f33f R14: 00007fa3552b7300 R15: 0000000000022000
[ 1847.096047]  </TASK>
03:24:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1847.134953] loop5: detected capacity change from 0 to 40
[ 1847.254959] loop4: detected capacity change from 0 to 40
[ 1847.284758] loop0: detected capacity change from 0 to 40
[ 1847.324030] loop1: detected capacity change from 0 to 40
[ 1847.371677] syz-executor.5: attempt to access beyond end of device
[ 1847.371677] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1847.373470] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1847.455456] syz-executor.0: attempt to access beyond end of device
[ 1847.455456] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1847.457440] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1847.461993] syz-executor.1: attempt to access beyond end of device
[ 1847.461993] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1847.463798] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:25:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:25:08 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc020660b, &(0x7f0000000040)=0x4000)

03:25:08 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:25:08 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:25:08 executing program 6:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r4, r1, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000400)={0x7ff, 0x9, 0x4, 0x8, 0x7})

03:25:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 43)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 19)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1862.263868] loop2: detected capacity change from 0 to 40
[ 1862.265158] loop0: detected capacity change from 0 to 40
[ 1862.269539] loop5: detected capacity change from 0 to 40
[ 1862.292904] loop1: detected capacity change from 0 to 40
[ 1862.317797] loop4: detected capacity change from 0 to 40
[ 1862.366571] syz-executor.2: attempt to access beyond end of device
[ 1862.366571] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.367517] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:25:08 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x3f00)

[ 1862.392242] syz-executor.5: attempt to access beyond end of device
[ 1862.392242] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.393195] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1862.411358] syz-executor.1: attempt to access beyond end of device
[ 1862.411358] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.412249] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:25:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:08 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r3, r0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

03:25:08 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:25:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:25:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 20)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1862.530413] loop2: detected capacity change from 0 to 40
[ 1862.536544] syz-executor.0: attempt to access beyond end of device
[ 1862.536544] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.537523] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:25:08 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4002)

[ 1862.580801] FAULT_INJECTION: forcing a failure.
[ 1862.580801] name failslab, interval 1, probability 0, space 0, times 0
[ 1862.582630] CPU: 0 PID: 9436 Comm: syz-executor.2 Not tainted 6.1.0-next-20221213 #1
[ 1862.583699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1862.584729] Call Trace:
[ 1862.585063]  <TASK>
[ 1862.585364]  dump_stack_lvl+0x8f/0xb7
[ 1862.585899]  should_fail_ex.cold+0x5/0xa
[ 1862.586440]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 1862.587053]  should_failslab+0x9/0x20
[ 1862.587561]  kmem_cache_alloc+0x5a/0x410
[ 1862.588109]  fat_cache_add.part.0+0x5b4/0xb50
[ 1862.588726]  fat_get_cluster+0x922/0xd40
[ 1862.589280]  ? __pfx_fat_get_cluster+0x10/0x10
[ 1862.589881]  ? __brelse+0x88/0xa0
[ 1862.590360]  fat_get_mapped_cluster+0x216/0x450
[ 1862.590663] loop4: detected capacity change from 0 to 40
[ 1862.590982]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 1862.591997]  ? mark_lock.part.0+0xef/0x2f70
[ 1862.592601]  fat_bmap+0x1fc/0x460
[ 1862.593077]  fat_get_block+0x33e/0x930
[ 1862.593605]  ? __pfx_fat_get_block+0x10/0x10
[ 1862.594177]  ? lock_is_held_type+0xdb/0x130
[ 1862.594760]  __block_write_begin_int+0x380/0x13d0
[ 1862.595418]  ? __pfx_fat_get_block+0x10/0x10
[ 1862.596004]  ? __pfx___block_write_begin_int+0x10/0x10
[ 1862.596682]  ? __pfx___lock_acquire+0x10/0x10
[ 1862.597278]  ? PageHeadHuge+0x169/0x1b0
[ 1862.597821]  ? __pfx_fat_get_block+0x10/0x10
[ 1862.598397]  block_write_begin+0xb9/0x450
[ 1862.598959]  cont_write_begin+0x4fe/0x700
[ 1862.599517]  ? current_time+0x79/0x2c0
[ 1862.600057]  ? __pfx_fat_get_block+0x10/0x10
[ 1862.600658]  ? mark_held_locks+0x9e/0xe0
[ 1862.601203]  ? __pfx_cont_write_begin+0x10/0x10
[ 1862.601819]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1862.602493]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1862.603166]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1862.603767]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1862.604454]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 1862.605134]  fat_write_begin+0x89/0x180
[ 1862.605661]  ? __pfx_fat_get_block+0x10/0x10
[ 1862.606257]  generic_perform_write+0x25a/0x580
[ 1862.606878]  ? __pfx_generic_perform_write+0x10/0x10
[ 1862.607532]  ? __pfx_fat_update_time+0x10/0x10
[ 1862.608142]  ? __pfx_file_update_time+0x10/0x10
[ 1862.608795]  ? generic_write_checks+0x2c0/0x400
[ 1862.609432]  __generic_file_write_iter+0x308/0x4b0
[ 1862.610078]  ? do_sendfile+0xb1d/0x1280
[ 1862.610612]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 1862.611138] loop1: detected capacity change from 0 to 40
[ 1862.611223]  generic_file_write_iter+0xe7/0x350
[ 1862.612233]  do_iter_readv_writev+0x211/0x3c0
[ 1862.612840]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1862.613499]  ? avc_policy_seqno+0xd/0x70
[ 1862.614058]  ? security_file_permission+0xb5/0xe0
[ 1862.614720]  do_iter_write+0x18b/0x700
[ 1862.615260]  ? lock_is_held_type+0xdb/0x130
[ 1862.615839]  vfs_iter_write+0x74/0xb0
[ 1862.616377]  iter_file_splice_write+0x73e/0xcb0
[ 1862.617018]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1862.617693]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1862.618394]  ? inode_security+0x105/0x140
[ 1862.618968]  ? security_file_permission+0xb5/0xe0
[ 1862.619614]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1862.620305]  direct_splice_actor+0x113/0x180
[ 1862.620901]  splice_direct_to_actor+0x33a/0x8c0
03:25:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 44)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1862.621527]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1862.622244]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1862.622559] loop5: detected capacity change from 0 to 40
[ 1862.622898]  ? security_file_permission+0xb5/0xe0
[ 1862.623890]  do_splice_direct+0x1bc/0x290
[ 1862.624455]  ? __pfx_do_splice_direct+0x10/0x10
[ 1862.625076]  ? lock_is_held_type+0xdb/0x130
[ 1862.625649]  do_sendfile+0xb1d/0x1280
[ 1862.626177]  ? __pfx_do_sendfile+0x10/0x10
[ 1862.626758]  __x64_sys_sendfile64+0x248/0x2a0
[ 1862.627350]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1862.627991]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1862.628680]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1862.629363]  do_syscall_64+0x3f/0x90
[ 1862.629862]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1862.630549] RIP: 0033:0x7fa357d41b19
[ 1862.631042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1862.633283] RSP: 002b:00007fa3552b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1862.634248] RAX: ffffffffffffffda RBX: 00007fa357e54f60 RCX: 00007fa357d41b19
[ 1862.635151] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1862.636045] RBP: 00007fa3552b71d0 R08: 0000000000000000 R09: 0000000000000000
[ 1862.636968] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1862.637862] R13: 00007ffedac6f33f R14: 00007fa3552b7300 R15: 0000000000022000
[ 1862.638802]  </TASK>
[ 1862.726058] syz-executor.2: attempt to access beyond end of device
[ 1862.726058] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.728160] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1862.751541] syz-executor.5: attempt to access beyond end of device
[ 1862.751541] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.752517] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1862.753946] syz-executor.1: attempt to access beyond end of device
[ 1862.753946] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.756592] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1862.820431] loop0: detected capacity change from 0 to 40
[ 1862.917574] syz-executor.0: attempt to access beyond end of device
[ 1862.917574] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1862.918462] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:25:22 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:25:22 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r3, r0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

03:25:22 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x138, 0x0, 0x8d8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x6}}}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x40, 0x5}, {0x20, 0x1}, {0x80, 0xe1}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x3}, {0xc5, 0x5}, {0x1, 0x4}, {0xf1, 0x4}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x4}, {0x40, 0x2}, {0x9, 0x2}, {0x7f, 0x2}, {0xff, 0x4}, {0x3f, 0x1}], "a3667fc62eef3530"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xd9, 0x3}, {0x20, 0x3}, {0x4, 0x5}, {0x7, 0x2}, {0x6, 0x1}, {0x5, 0x5}, {0x9, 0x3}], "df72087c4c7dc0de"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x4, 0x7}, {0x0, 0x6}, {0x20, 0x2}, {0xc1, 0x6}, {0x3}, {0xe2, 0x7}, {0x4f, 0x1}, {0x4, 0x1}, {0x0, 0x5}, {0x3, 0x1}, {0x8, 0x2}, {0x8, 0x1}, {0x7f}, {0x40, 0x1}, {0x6, 0x6}], "3b96169561e31390"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x11, 0x5}, {0x2, 0x6}, {0x4, 0x4}], "ffeb83897a307d02"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3}, {0x40, 0x5}, {0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x5}, {0x8, 0x3}, {0xff, 0x2}, {0x54, 0x4}, {0xbf, 0x3}, {0x1f, 0x6}, {0x3f, 0x2}, {0x11, 0x6}, {0x40, 0x2}, {0x45, 0x7}, {0x0, 0x4}], "5bc8ababc7069eff"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x0, 0x2}, {0x3f, 0x6}, {0xd4, 0x4}, {0x6, 0x5}, {0x1, 0x1}, {0x0, 0x5}, {0x3f, 0x6}, {0x6, 0x7}, {0x3, 0x5}, {0x2, 0x2}, {0x9, 0x2}, {0xfd, 0x2}, {0x6, 0x5}, {0x16, 0x2}], "9aa89ed49cbe0132"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7f, 0x40}, {0x5, 0x5}, {0x7f, 0x1}, {0x2, 0x2}, {0x1}, {0x7f, 0x7}, {0x5}, {0x7, 0x2}, {0x40, 0x5}, {0xb, 0x3}, {0x0, 0x6}, {0x2}, {0x40}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0x6}, {0x8, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x3f, 0x2}], "bd79d25e5e15bcb6"}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 1875.853916] loop2: detected capacity change from 0 to 40
[ 1875.865360] syz-executor.2: attempt to access beyond end of device
[ 1875.865360] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1875.866232] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1875.880998] loop0: detected capacity change from 0 to 40
[ 1875.881322] loop1: detected capacity change from 0 to 40
03:25:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 45)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 21)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:22 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4003)

03:25:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1875.927544] loop5: detected capacity change from 0 to 40
[ 1875.941825] loop4: detected capacity change from 0 to 40
03:25:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1875.975340] syz-executor.1: attempt to access beyond end of device
[ 1875.975340] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1875.976428] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1876.036707] loop2: detected capacity change from 0 to 40
[ 1876.052364] FAULT_INJECTION: forcing a failure.
[ 1876.052364] name failslab, interval 1, probability 0, space 0, times 0
[ 1876.053351] CPU: 1 PID: 9472 Comm: syz-executor.5 Not tainted 6.1.0-next-20221213 #1
[ 1876.054015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1876.054748] Call Trace:
[ 1876.054984]  <TASK>
[ 1876.055207]  dump_stack_lvl+0x8f/0xb7
[ 1876.055580]  should_fail_ex.cold+0x5/0xa
[ 1876.055959]  should_failslab+0x9/0x20
[ 1876.056254]  __kmem_cache_alloc_node+0x5b/0x400
[ 1876.056620]  ? iter_file_splice_write+0x169/0xcb0
[ 1876.056978]  ? iter_file_splice_write+0x169/0xcb0
[ 1876.057332]  __kmalloc+0x46/0xc0
[ 1876.057597]  iter_file_splice_write+0x169/0xcb0
[ 1876.057937]  ? generic_file_read_iter+0x330/0x550
[ 1876.058305]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1876.058669]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1876.059041]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1876.059424]  ? inode_security+0x105/0x140
[ 1876.059746]  ? security_file_permission+0xb5/0xe0
[ 1876.060103]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1876.060477]  direct_splice_actor+0x113/0x180
[ 1876.060814]  splice_direct_to_actor+0x33a/0x8c0
[ 1876.061160]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1876.061521]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1876.061895]  ? security_file_permission+0xb5/0xe0
[ 1876.062259]  do_splice_direct+0x1bc/0x290
[ 1876.062560]  ? __pfx_do_splice_direct+0x10/0x10
[ 1876.062910]  ? lock_is_held_type+0xdb/0x130
[ 1876.063232]  do_sendfile+0xb1d/0x1280
[ 1876.063537]  ? __pfx_do_sendfile+0x10/0x10
[ 1876.063868]  __x64_sys_sendfile64+0x248/0x2a0
[ 1876.064200]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1876.064575]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1876.064948]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1876.065334]  do_syscall_64+0x3f/0x90
[ 1876.065606]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1876.065987] RIP: 0033:0x7faf07d6fb19
[ 1876.066257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1876.067525] RSP: 002b:00007faf052e5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1876.068050] RAX: ffffffffffffffda RBX: 00007faf07e82f60 RCX: 00007faf07d6fb19
[ 1876.068568] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1876.069071] RBP: 00007faf052e51d0 R08: 0000000000000000 R09: 0000000000000000
[ 1876.069571] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1876.070088] R13: 00007fff9087069f R14: 00007faf052e5300 R15: 0000000000022000
[ 1876.070647]  </TASK>
[ 1876.085320] FAULT_INJECTION: forcing a failure.
[ 1876.085320] name failslab, interval 1, probability 0, space 0, times 0
[ 1876.086269] CPU: 1 PID: 9477 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1876.086810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1876.087379] Call Trace:
[ 1876.087566]  <TASK>
[ 1876.087734]  dump_stack_lvl+0x8f/0xb7
[ 1876.088027]  should_fail_ex.cold+0x5/0xa
[ 1876.088329]  should_failslab+0x9/0x20
[ 1876.088623]  __kmem_cache_alloc_node+0x5b/0x400
[ 1876.088958]  ? iter_file_splice_write+0x169/0xcb0
[ 1876.089315]  ? iter_file_splice_write+0x169/0xcb0
[ 1876.089661]  __kmalloc+0x46/0xc0
[ 1876.089920]  iter_file_splice_write+0x169/0xcb0
[ 1876.090267]  ? generic_file_read_iter+0x330/0x550
[ 1876.090628]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1876.091000]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1876.091367]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1876.091751]  ? inode_security+0x105/0x140
[ 1876.092068]  ? security_file_permission+0xb5/0xe0
[ 1876.092431]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1876.092805]  direct_splice_actor+0x113/0x180
[ 1876.093136]  splice_direct_to_actor+0x33a/0x8c0
[ 1876.093481]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1876.093845]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1876.094219]  ? security_file_permission+0xb5/0xe0
[ 1876.094586]  do_splice_direct+0x1bc/0x290
[ 1876.094892]  ? __pfx_do_splice_direct+0x10/0x10
[ 1876.095241]  ? lock_is_held_type+0xdb/0x130
[ 1876.095562]  do_sendfile+0xb1d/0x1280
[ 1876.095860]  ? __pfx_do_sendfile+0x10/0x10
[ 1876.096198]  __x64_sys_sendfile64+0x248/0x2a0
[ 1876.096547]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1876.096910]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1876.097285]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1876.097665]  do_syscall_64+0x3f/0x90
[ 1876.097936]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1876.098311] RIP: 0033:0x7fdc7e53db19
[ 1876.098581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1876.099826] RSP: 002b:00007fdc7ba92188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1876.100366] RAX: ffffffffffffffda RBX: 00007fdc7e651020 RCX: 00007fdc7e53db19
[ 1876.100871] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1876.101372] RBP: 00007fdc7ba921d0 R08: 0000000000000000 R09: 0000000000000000
[ 1876.101875] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1876.102374] R13: 00007ffdd4b8811f R14: 00007fdc7ba92300 R15: 0000000000022000
[ 1876.102887]  </TASK>
03:25:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:25:22 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:25:22 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r3, r0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x0, 0xc5bfb6c0e4008b35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x5b, 0x8}, 0x48, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0xe, 0xffffffffffffffff, 0x0)

03:25:22 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4004)

[ 1876.176022] syz-executor.2: attempt to access beyond end of device
[ 1876.176022] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1876.177021] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1876.184713] loop4: detected capacity change from 0 to 40
[ 1876.201001] loop1: detected capacity change from 0 to 40
03:25:22 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400b)

03:25:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:25:22 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pidfd_getfd(r3, r0, 0x0)

03:25:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:22 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 46)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1876.361166] syz-executor.1: attempt to access beyond end of device
[ 1876.361166] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1876.362273] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 1876.402068] loop4: detected capacity change from 0 to 40
[ 1876.420568] loop2: detected capacity change from 0 to 40
[ 1876.452733] loop0: detected capacity change from 0 to 40
[ 1876.508713] syz-executor.2: attempt to access beyond end of device
[ 1876.508713] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1876.509933] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1876.550930] syz-executor.0: attempt to access beyond end of device
[ 1876.550930] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1876.551820] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:25:38 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r2}, './file1/file0\x00'})
perf_event_open(&(0x7f0000000280)={0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4030, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x8001, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r4, 0x2, r0, 0x8, 0x80000})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:25:38 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:25:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 47)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1891.725904] loop1: detected capacity change from 0 to 40
[ 1891.736658] loop5: detected capacity change from 0 to 40
[ 1891.739617] loop4: detected capacity change from 0 to 40
03:25:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 22)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

03:25:38 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4010)

03:25:38 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:25:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1891.812313] loop0: detected capacity change from 0 to 40
[ 1891.824763] loop2: detected capacity change from 0 to 40
[ 1891.898978] syz-executor.2: attempt to access beyond end of device
[ 1891.898978] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1891.900054] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1891.910797] syz-executor.0: attempt to access beyond end of device
[ 1891.910797] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1891.911792] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:25:38 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1891.929343] syz-executor.1: attempt to access beyond end of device
[ 1891.929343] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1891.930384] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:25:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 1891.965621] syz-executor.5: attempt to access beyond end of device
[ 1891.965621] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1891.966640] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:25:38 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4064)

03:25:38 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:38 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 48)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:38 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

[ 1892.049488] loop4: detected capacity change from 0 to 40
03:25:38 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 23)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1892.142798] loop2: detected capacity change from 0 to 40
[ 1892.143446] loop1: detected capacity change from 0 to 40
[ 1892.169072] loop0: detected capacity change from 0 to 40
[ 1892.211701] loop5: detected capacity change from 0 to 40
[ 1892.215574] syz-executor.2: attempt to access beyond end of device
[ 1892.215574] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1892.216446] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1892.243685] FAULT_INJECTION: forcing a failure.
[ 1892.243685] name failslab, interval 1, probability 0, space 0, times 0
[ 1892.244568] CPU: 1 PID: 9549 Comm: syz-executor.5 Not tainted 6.1.0-next-20221213 #1
[ 1892.245109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1892.245673] Call Trace:
[ 1892.245859]  <TASK>
[ 1892.246026]  dump_stack_lvl+0x8f/0xb7
[ 1892.246318]  should_fail_ex.cold+0x5/0xa
[ 1892.246624]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 1892.246959]  should_failslab+0x9/0x20
[ 1892.247244]  kmem_cache_alloc+0x5a/0x410
[ 1892.247557]  fat_cache_add.part.0+0x5b4/0xb50
[ 1892.247885]  fat_get_cluster+0x922/0xd40
[ 1892.248189]  ? __pfx_fat_get_cluster+0x10/0x10
[ 1892.248525]  ? __brelse+0x88/0xa0
[ 1892.248803]  fat_get_mapped_cluster+0x216/0x450
[ 1892.249148]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 1892.249527]  ? mark_lock.part.0+0xef/0x2f70
[ 1892.249854]  fat_bmap+0x1fc/0x460
[ 1892.250126]  fat_get_block+0x33e/0x930
[ 1892.250422]  ? __pfx_fat_get_block+0x10/0x10
[ 1892.250737]  ? lock_is_held_type+0xdb/0x130
[ 1892.251061]  __block_write_begin_int+0x380/0x13d0
[ 1892.251402]  ? __pfx_fat_get_block+0x10/0x10
[ 1892.251722]  ? __pfx___block_write_begin_int+0x10/0x10
[ 1892.252091]  ? __pfx___lock_acquire+0x10/0x10
[ 1892.252414]  ? PageHeadHuge+0x169/0x1b0
[ 1892.252717]  ? __pfx_fat_get_block+0x10/0x10
[ 1892.253025]  block_write_begin+0xb9/0x450
[ 1892.253329]  cont_write_begin+0x4fe/0x700
[ 1892.253645]  ? current_time+0x79/0x2c0
[ 1892.253964]  ? __pfx_fat_get_block+0x10/0x10
[ 1892.254299]  ? mark_held_locks+0x9e/0xe0
[ 1892.254612]  ? __pfx_cont_write_begin+0x10/0x10
[ 1892.254958]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1892.255356]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1892.255736]  ? lockdep_hardirqs_on+0x7d/0x100
[ 1892.256078]  ? ktime_get_coarse_real_ts64+0x15d/0x190
[ 1892.256472]  ? ktime_get_coarse_real_ts64+0x100/0x190
[ 1892.256895]  fat_write_begin+0x89/0x180
[ 1892.257196]  ? __pfx_fat_get_block+0x10/0x10
[ 1892.257541]  generic_perform_write+0x25a/0x580
[ 1892.257892]  ? __pfx_generic_perform_write+0x10/0x10
[ 1892.258277]  ? __pfx_fat_update_time+0x10/0x10
[ 1892.258620]  ? __pfx_file_update_time+0x10/0x10
[ 1892.258970]  ? generic_write_checks+0x2c0/0x400
[ 1892.259331]  __generic_file_write_iter+0x308/0x4b0
[ 1892.259707]  ? do_sendfile+0xb1d/0x1280
[ 1892.260017]  ? __x64_sys_sendfile64+0x248/0x2a0
[ 1892.260368]  generic_file_write_iter+0xe7/0x350
[ 1892.260745]  do_iter_readv_writev+0x211/0x3c0
[ 1892.261080]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1892.261466]  ? avc_policy_seqno+0xd/0x70
[ 1892.261792]  ? security_file_permission+0xb5/0xe0
[ 1892.262165]  do_iter_write+0x18b/0x700
[ 1892.262466]  ? lock_is_held_type+0xdb/0x130
[ 1892.262806]  vfs_iter_write+0x74/0xb0
[ 1892.263102]  iter_file_splice_write+0x73e/0xcb0
[ 1892.263468]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1892.263855]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1892.264253]  ? inode_security+0x105/0x140
[ 1892.264581]  ? security_file_permission+0xb5/0xe0
[ 1892.264941]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1892.265332]  direct_splice_actor+0x113/0x180
[ 1892.265678]  splice_direct_to_actor+0x33a/0x8c0
[ 1892.266029]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1892.266406]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1892.266795]  ? security_file_permission+0xb5/0xe0
[ 1892.267171]  do_splice_direct+0x1bc/0x290
[ 1892.267476]  ? __pfx_do_splice_direct+0x10/0x10
[ 1892.267847]  ? lock_is_held_type+0xdb/0x130
[ 1892.268177]  do_sendfile+0xb1d/0x1280
[ 1892.268475]  ? __pfx_do_sendfile+0x10/0x10
[ 1892.268832]  __x64_sys_sendfile64+0x248/0x2a0
[ 1892.269182]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1892.269558]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1892.269948]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1892.270347]  do_syscall_64+0x3f/0x90
[ 1892.270622]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1892.271014] RIP: 0033:0x7faf07d6fb19
[ 1892.271304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1892.272606] RSP: 002b:00007faf052e5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1892.273159] RAX: ffffffffffffffda RBX: 00007faf07e82f60 RCX: 00007faf07d6fb19
[ 1892.273685] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1892.274192] RBP: 00007faf052e51d0 R08: 0000000000000000 R09: 0000000000000000
[ 1892.274718] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1892.275246] R13: 00007fff9087069f R14: 00007faf052e5300 R15: 0000000000022000
[ 1892.275792]  </TASK>
[ 1892.288832] syz-executor.0: attempt to access beyond end of device
[ 1892.288832] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1892.290698] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1892.342545] syz-executor.5: attempt to access beyond end of device
[ 1892.342545] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1892.344374] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:25:55 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r3, &(0x7f0000000000)='./file1\x00', 0x40000, 0x84)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:25:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000300))

03:25:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 24)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:55 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

03:25:55 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:25:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x400000)

03:25:55 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:55 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 49)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1909.660485] loop2: detected capacity change from 0 to 40
[ 1909.666771] loop1: detected capacity change from 0 to 40
[ 1909.675193] loop0: detected capacity change from 0 to 40
[ 1909.719312] loop4: detected capacity change from 0 to 40
[ 1909.720868] loop5: detected capacity change from 0 to 40
[ 1909.751686] syz-executor.2: attempt to access beyond end of device
[ 1909.751686] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1909.753539] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1909.763795] syz-executor.0: attempt to access beyond end of device
[ 1909.763795] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1909.765502] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:25:56 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffdef)

03:25:56 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0xffff8000)

03:25:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000300))

[ 1909.917528] syz-executor.5: attempt to access beyond end of device
[ 1909.917528] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1909.919550] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:25:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 50)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:25:56 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:25:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1910.020440] loop1: detected capacity change from 0 to 40
[ 1910.048409] loop2: detected capacity change from 0 to 40
[ 1910.055017] loop4: detected capacity change from 0 to 40
03:25:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 25)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1910.173497] loop5: detected capacity change from 0 to 40
[ 1910.188221] loop0: detected capacity change from 0 to 40
[ 1910.260343] syz-executor.2: attempt to access beyond end of device
[ 1910.260343] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1910.261964] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1910.275952] syz-executor.5: attempt to access beyond end of device
[ 1910.275952] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1910.277585] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:25:56 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 1910.360141] syz-executor.0: attempt to access beyond end of device
[ 1910.360141] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1910.361887] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1910.398865] loop1: detected capacity change from 0 to 40
03:26:11 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
recvmsg$unix(r1, &(0x7f0000000580)={&(0x7f0000000140), 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000080)=""/10, 0xa}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000400)=""/204, 0xcc}], 0x4, &(0x7f0000000500)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x40000061)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r3)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x10000000)
sendfile(r2, r1, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))

03:26:11 executing program 7:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
rmdir(&(0x7f0000001900)='./file0\x00')
dup(0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = fsmount(r0, 0x1, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001440)=""/109, 0xfffffffffffffe2f}, {&(0x7f00000019c0)=""/102400, 0x19000}, {&(0x7f00000012c0)=""/115, 0x73}, {&(0x7f0000001340)=""/206, 0xce}, {&(0x7f00000015c0)=""/89, 0x59}, {&(0x7f00000014c0)=""/123, 0x7b}], 0x6, &(0x7f00000015c0)}, 0x0)
r4 = dup(r2)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000001840)='wg0\x00', 0xffad)
pwritev(r2, &(0x7f0000001180)=[{&(0x7f0000000140)="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", 0xff5}, {&(0x7f0000001140)}], 0x3f, 0x70, 0x10000)
copy_file_range(r0, &(0x7f00000000c0)=0x7fff, r1, &(0x7f0000000100)=0xb6, 0x4, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = dup(r5)
readv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000001640)=""/175, 0xaf}, {&(0x7f0000001240)=""/75, 0x4b}, {&(0x7f0000001780)=""/110, 0x6e}], 0x3)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r7)
fstat(r6, &(0x7f0000001940))
ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000000080))

03:26:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(0x0, &(0x7f0000000300))

03:26:11 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = dup(0xffffffffffffffff)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:26:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 26)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:11 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:26:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 51)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1925.034879] loop2: detected capacity change from 0 to 40
[ 1925.037404] loop0: detected capacity change from 0 to 40
[ 1925.045879] loop4: detected capacity change from 0 to 40
[ 1925.115969] loop1: detected capacity change from 0 to 40
[ 1925.132169] FAULT_INJECTION: forcing a failure.
[ 1925.132169] name failslab, interval 1, probability 0, space 0, times 0
[ 1925.132953] CPU: 0 PID: 9620 Comm: syz-executor.0 Not tainted 6.1.0-next-20221213 #1
[ 1925.133502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1925.134064] Call Trace:
[ 1925.134250]  <TASK>
[ 1925.134416]  dump_stack_lvl+0x8f/0xb7
[ 1925.134711]  should_fail_ex.cold+0x5/0xa
[ 1925.135013]  should_failslab+0x9/0x20
[ 1925.135299]  __kmem_cache_alloc_node+0x5b/0x400
[ 1925.135637]  ? iter_file_splice_write+0x169/0xcb0
[ 1925.135992]  ? iter_file_splice_write+0x169/0xcb0
[ 1925.136333]  __kmalloc+0x46/0xc0
[ 1925.136696]  iter_file_splice_write+0x169/0xcb0
[ 1925.137056]  ? generic_file_read_iter+0x330/0x550
[ 1925.137427]  ? generic_file_splice_read+0x1bc/0x4d0
[ 1925.137786]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1925.138154]  ? __pfx_generic_file_splice_read+0x10/0x10
[ 1925.138540]  ? inode_security+0x105/0x140
[ 1925.138582] loop5: detected capacity change from 0 to 40
[ 1925.138845]  ? security_file_permission+0xb5/0xe0
[ 1925.139858]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 1925.140225]  direct_splice_actor+0x113/0x180
[ 1925.140554]  splice_direct_to_actor+0x33a/0x8c0
[ 1925.140894]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1925.141259]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1925.141633]  ? security_file_permission+0xb5/0xe0
[ 1925.141999]  do_splice_direct+0x1bc/0x290
[ 1925.142311]  ? __pfx_do_splice_direct+0x10/0x10
[ 1925.142669]  ? lock_is_held_type+0xdb/0x130
[ 1925.142996]  do_sendfile+0xb1d/0x1280
[ 1925.143298]  ? __pfx_do_sendfile+0x10/0x10
[ 1925.143618]  ? syscall_enter_from_user_mode+0x1c/0x50
[ 1925.144003]  ? perf_trace_preemptirq_template+0xa6/0x410
[ 1925.144418]  __x64_sys_sendfile64+0x248/0x2a0
[ 1925.144756]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1925.145132]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1925.145522]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1925.145913]  do_syscall_64+0x3f/0x90
[ 1925.146196]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1925.146585] RIP: 0033:0x7fdc7e53db19
[ 1925.146856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1925.148137] RSP: 002b:00007fdc7bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1925.148685] RAX: ffffffffffffffda RBX: 00007fdc7e650f60 RCX: 00007fdc7e53db19
[ 1925.149212] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1925.149730] RBP: 00007fdc7bab31d0 R08: 0000000000000000 R09: 0000000000000000
[ 1925.150242] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000002
[ 1925.150750] R13: 00007ffdd4b8811f R14: 00007fdc7bab3300 R15: 0000000000022000
[ 1925.151277]  </TASK>
03:26:11 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = dup(0xffffffffffffffff)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1925.214498] syz-executor.2: attempt to access beyond end of device
[ 1925.214498] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1925.216277] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:26:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 52)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1925.270557] loop0: detected capacity change from 0 to 40
[ 1925.305446] syz-executor.5: attempt to access beyond end of device
[ 1925.305446] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1925.306375] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1925.349872] syz-executor.0: attempt to access beyond end of device
[ 1925.349872] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1925.350736] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1937.917197] loop5: detected capacity change from 0 to 40
03:26:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x8cd2}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:26:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 32)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:26:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 27)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x7)
accept4(r0, &(0x7f00000001c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000240)=0x80, 0x80000)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x82a, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x73}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r1, {0xfffff800, 0x1}}, './file0\x00'})
linkat(r2, &(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000300)='./file0\x00', 0x400)

03:26:24 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
r1 = dup(0xffffffffffffffff)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:26:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 53)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1937.998841] loop2: detected capacity change from 0 to 40
[ 1938.004553] loop1: detected capacity change from 0 to 40
[ 1938.009649] loop4: detected capacity change from 0 to 40
[ 1938.014880] loop0: detected capacity change from 0 to 40
[ 1938.079910] syz-executor.5: attempt to access beyond end of device
[ 1938.079910] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1938.081652] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1938.124285] syz-executor.2: attempt to access beyond end of device
[ 1938.124285] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1938.125907] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:26:24 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x480402, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
clone3(&(0x7f0000000300)={0x380002000, &(0x7f00000003c0)=<r1=>0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140), {0x3b}, &(0x7f0000000400)=""/144, 0x90, &(0x7f0000000240)=""/119, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
chdir(&(0x7f00000000c0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x9a9}}, './file0\x00'})

[ 1938.178268] syz-executor.0: attempt to access beyond end of device
[ 1938.178268] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1938.179917] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:26:24 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x900, 0x8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:26:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 33)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 54)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 28)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0x0)

03:26:24 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffd02, 0x9, &(0x7f0000001680)=[{&(0x7f0000000140)="8ad065442a73b1cb577c3da3982599298be62ed6b28f948108be74e5d84018ae26b04ba232fd17c00b48711ca8d5783504fd1f48606365ee7fefbae5f81f50dab84cae7a8bb2c416582df22e3b3892ed4efd32ea664c38dcc3ec0475b3033c62df9b8fc707a3025d391f5807be13f19bff784cc6b58086a968a08b0ddd6b552ed3cc621c48a802e9aa40c762602587e5658a382d226c4afaba723a02a0db5aa02878ccb9e01446681d2c82ec686967de8a84229016c01207f1496c294e12f4ddb4cc25f98b0a0748bba2ad2483fcaf2092fa", 0xd2, 0x10000}, {&(0x7f0000000240)="f903fefe618281493d8e69a418c5949f8b814d4328581b7b44e7f7c46c53713512020caa05003f4353b811400f91aca054ffdf4ab814c11956720cce2f24f3a58b703ebb6c80bcf4d7c21260d4b30934d52a8f2413435caa94f9cf67a9c2608181354908336c70be25828e4f13aa09137bd2e541f69b001489bba66fa3c39e12ad73", 0x82, 0x3}, {&(0x7f0000000300)="cfd6332c49e28820d50411f771f0a27a59d591d03b2bbb55d459ef12e122e407028775", 0x23, 0x7}, {&(0x7f0000000340)="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", 0x1000, 0x80}, {&(0x7f0000001340)="1d84242c4ae3a0ec110b940fe33bfceefaa76285acbafad61d53a67c5fac0a26a015eebc9ae3dff7e0fc29e30543e942858d77d449ad6bdb8b73d43619b4d7c79b81ce0a2551f8cfb3b74edc8f5029c241ea0c7388017625a6", 0x59, 0x100000001}, {&(0x7f00000013c0)="1923df05765b1ed1969eeb0db846672a33d9e7b7a171f3ad65e41010196ec29455d23ce210bcc96d508f62572a6c76a396e247ff50eb82e7357cc15d18db86bae95f4d6b7705a39d18cb62239c182de705a6c2077a15b04aab4729037b64e9b0a7e8080dfdbc2623158d8423e8cb7d723488da37e220929091f4a9c9b1db57e2", 0x80, 0x400}, {&(0x7f0000001440)="690cc12512582b4227cf5ddcd00867e62b2af5699277e82e74e8f106c1c4a108f1cd4a6ad17b2e637ce8f92697c840b9306277dbfb2fca14ae810900ecfe3854d91f5c907a3eaec86ebb8a9ff526b3ab7ee0efd31158cdf7500fcea9eedecc8fb6d42c61a9627f7e5859249a8678e50cbf2cc84229a04d4693a168a7a2a68ef8f6d7e372549c2e0076b90367bd00", 0x8e, 0x8}, {&(0x7f0000001500)="4f9438c584b425ec362affa795926609b6c79aaf6b8b5c28bd555f6053353c301d645572d73404343a94036c89367fa386639d7760b9eeb4e4fb74b794497acc98c69f0225a2513213fdb978742f592724895a6c1e4be2cf59a0136a4365ce7e98707f0556dfee59007d60f5eeda8928c009da857ae49ce893f93df5a0da3ca52614384a762b46a95e1963b1175a4f3eb8b46ae9e2177b3951171cec8ffea47d1e1a1be2b02a71106cc16d23bf88a2c6ecdf2996f78c339e6ea66087901925367935fb304a4900053ac23cda88a9", 0xce, 0x200}, {&(0x7f0000001600)="7d2764f717543bac7d268e47edf52714619d7cab4c9c53431f5ec2cf1564769d4a9d5f7de93c93751d0c5bc70b7be0c7aba11433d8b5e813e1a51630ba948fda77e406ddb6f67121b732790884bcde135d9fe3fb0d6954d644f73d6cd58bfa1309aa96b3d50228218d5ccdcbc8ab3a", 0x6f, 0x6}], 0x200000, &(0x7f0000001780)={[{@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x4e, 0x6b, 0x32, 0x6d, 0x36, 0x0]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x38, 0x37, 0x2d, 0x6d]}}, {@huge_always}, {@gid={'gid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, 0xee01}}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@hash}]})
r1 = openat$incfs(r0, &(0x7f0000001840)='.pending_reads\x00', 0x200040, 0x100)
openat(r1, &(0x7f0000001880)='./file0\x00', 0x82041, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r2)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000018c0)=0x8)

[ 1938.472525] loop4: detected capacity change from 0 to 40
[ 1938.472741] loop1: detected capacity change from 0 to 40
[ 1938.493389] loop2: detected capacity change from 0 to 40
[ 1938.532992] loop0: detected capacity change from 0 to 40
[ 1938.549696] syz-executor.2: attempt to access beyond end of device
[ 1938.549696] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1938.550814] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1938.559817] loop5: detected capacity change from 0 to 40
03:26:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 34)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1938.644377] syz-executor.0: attempt to access beyond end of device
[ 1938.644377] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1938.645474] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 1938.722585] loop2: detected capacity change from 0 to 40
[ 1938.756329] loop7: detected capacity change from 0 to 264192
[ 1938.762532] tmpfs: Bad value for 'nr_blocks'
[ 1938.763677] loop4: detected capacity change from 0 to 40
[ 1938.805713] syz-executor.5: attempt to access beyond end of device
[ 1938.805713] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1938.807321] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1939.043493] loop7: detected capacity change from 0 to 264192
03:26:46 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x20001, 0xd9)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x4803, 0x11)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000)

03:26:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:46 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:26:46 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0x0)

03:26:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 29)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:46 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000480)=0x3)

03:26:46 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 55)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:46 executing program 3:
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000240)=0xffff, 0x6, 0x3)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fcntl$dupfd(r0, 0x406, r0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x202001, 0x0)
syz_io_uring_setup(0x67a8, &(0x7f0000000340)={0x0, 0xcd52, 0x1, 0x0, 0x154, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400))
write(r0, &(0x7f0000000140)="5cbd0efcbea9bae99c68bed3c406843f61d142232563bfe0b241f969cfcf07bed31824c45fdf5b8c795d09ace0792d5104ede6392e0f2cf4de65b2e4f4a01cdcd10ddb031d5a6e10b6ce126f2f613ab79182b8b5ab39f734d0a077ce88aa188ac6fc3c5dfae1cab390a901a9806bf94bd55d5a5c37a3af7adbfee0409eba835b3b61570df8513dda798c580d2e20e5c1f905fbcb693ae7e7cf2f30e4e6de17623e32d21f00d4c60be7667c84705bafe85b042c03a36f08822e66a8227bb56bbe", 0xc0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x30)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r3)
fcntl$notify(r3, 0x402, 0x0)
openat(r2, &(0x7f0000000000)='./file0\x00', 0x8000, 0x9e)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffdef)
write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)

[ 1960.137883] loop5: detected capacity change from 0 to 40
[ 1960.141806] loop1: detected capacity change from 0 to 40
[ 1960.143080] loop0: detected capacity change from 0 to 40
[ 1960.194261] loop2: detected capacity change from 0 to 40
03:26:46 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x260a02, 0x40)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x8, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0)
sendfile(0xffffffffffffffff, r3, &(0x7f00000002c0)=0xffff, 0xfff)
openat(r2, &(0x7f0000000180)='./file0\x00', 0x81000, 0x126)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
socketpair(0x1a, 0xa, 0x100, &(0x7f00000001c0)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

[ 1960.293213] syz-executor.2: attempt to access beyond end of device
[ 1960.293213] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1960.295004] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:26:46 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:26:46 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0x0)

[ 1960.346736] syz-executor.5: attempt to access beyond end of device
[ 1960.346736] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1960.348579] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 1960.431494] loop1: detected capacity change from 0 to 40
03:26:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 30)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:46 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000480)=0x3)

03:26:46 executing program 3:
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0xb}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x32c8}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
fallocate(r3, 0x18, 0x749, 0x7fff)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x212000, 0x0)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000140)={0x16, 0x3, 0x10, 0x1b, 0x5, 0x0, 0x4, 0xd1, 0x1})

03:26:46 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f0000000040)='./file2\x00', 0x100)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000180)='./file2\x00', 0x400, 0x1cf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x600c00, 0x9e)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
write$P9_RREADDIR(r3, &(0x7f00000001c0)={0x2a, 0x29, 0x2, {0x20, [{{0x10, 0x4, 0x8}, 0x700000000, 0xfb, 0x7, './file2'}]}}, 0x2a)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:26:46 executing program 6:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1960.739942] loop5: detected capacity change from 0 to 40
[ 1960.746649] loop2: detected capacity change from 0 to 40
[ 1960.937950] syz-executor.2: attempt to access beyond end of device
[ 1960.937950] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1960.939792] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1960.997397] syz-executor.5: attempt to access beyond end of device
[ 1960.997397] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1960.998852] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:27:00 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:27:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x900, 0x22)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
unlinkat(r4, &(0x7f0000000180)='./file0\x00', 0x200)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r2, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1974.572843] loop5: detected capacity change from 0 to 40
[ 1974.593124] loop0: detected capacity change from 0 to 40
03:27:00 executing program 1:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:27:00 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x60000, 0x10c)

03:27:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 31)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:00 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000480)=0x3)

03:27:00 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file1\x00'})

03:27:00 executing program 6:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1974.679883] loop2: detected capacity change from 0 to 40
03:27:01 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r1 = openat$cgroup_int(r0, &(0x7f00000006c0)='cpu.weight\x00', 0x2, 0x0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r4)
close_range(r1, r4, 0x0)
r5 = dup(r3)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)="b37c42b387b955cdad11fe24b7e3166e01f6518b49200b1a558ca79b9f34207d8faa425c95e4c62b040782c6523b3a9d65c352b59323a8af8bdc1834a07e1eb30971fdd89569049dcc0f551e2aa54c3dfea2e08d5449d053d5e84b0e9c2deb8999bd96fdad943dd169d2c485556109480910b5101b00fd87caac726010909b0a2261e425599d66ae9f17153915d5b7aecd8a9e4730254b2a0c2fc50a61377019fe527d3dc05b2a6a", 0xa8}, {&(0x7f0000000200)="f6600b3aaa7733453aae0adf141e88123a47bb9929e4690bf44fef79dab7cc0b1829f962d99edcb0f09ac41a7782c510834364e256fd141e8a1792f79ee03393c3076bcfb965", 0x46}, {&(0x7f0000000280)="aa905f781068148d8ca935662ea65bc6e474742453ae7867719978794f53450db9b87bfa1bc03d739c1d7f2d6a3051af4bf7ccdb00a21c5e0256b0550828e4d354b3e05228655c8b3e86de79c8c5b1da25b70efaa2c770236be2ed4284ca49b843497c0dd6eea7e5173d75d5647e8244a65c4b53186e4251", 0x78}, {&(0x7f0000000300)="b3828a1ab80793", 0x7}], 0x4, 0x1000, 0xfb)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x602, 0x100)
ioctl$sock_bt_hci(r4, 0x0, &(0x7f0000000380)="bf5b310f1c4f90164348c1cb73bc72a75e288221b6a6208d5b8dbf763db98cde6d3c9e1b807457cb24553c13aaa18d9a0c11d75894532a0e7d")
r6 = inotify_init()
dup2(r1, r6)

[ 1974.780243] syz-executor.0: attempt to access beyond end of device
[ 1974.780243] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1974.781219] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:27:01 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)
socket$inet6_tcp(0xa, 0x1, 0x0)

03:27:01 executing program 6:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1974.849919] syz-executor.2: attempt to access beyond end of device
[ 1974.849919] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1974.851056] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:27:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
truncate(&(0x7f0000000040)='./file2\x00', 0x100)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000180)='./file2\x00', 0x400, 0x1cf)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x600c00, 0x9e)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
write$P9_RREADDIR(r3, &(0x7f00000001c0)={0x2a, 0x29, 0x2, {0x20, [{{0x10, 0x4, 0x8}, 0x700000000, 0xfb, 0x7, './file2'}]}}, 0x2a)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a5043, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1974.939147] loop1: detected capacity change from 0 to 40
[ 1974.953287] loop0: detected capacity change from 0 to 40
03:27:01 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x10400, 0x34)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:27:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r3, &(0x7f0000000040)='./file0\x00', 0x100, 0x9)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 1975.092119] syz-executor.1: attempt to access beyond end of device
[ 1975.092119] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1975.093072] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:27:01 executing program 6:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = dup(0xffffffffffffffff)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1975.151414] loop2: detected capacity change from 0 to 40
03:27:15 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 1)

03:27:15 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000300))
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x11, 0x7f, 0x4, 0x7, 0x0, 0x2e8d, 0x0, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x684, 0x4}, 0x40000, 0x38406cd7, 0x3, 0x9, 0xd86, 0x100, 0x7, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x6, r0, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x41)

03:27:15 executing program 0:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r1, 0x0, 0xff)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:15 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
preadv2(r3, &(0x7f0000000300)=[{&(0x7f0000000140)=""/154, 0x9a}, {&(0x7f0000000200)=""/227, 0xe3}], 0x2, 0x8, 0x6660, 0x1e)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000080))
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = dup(r4)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000340)=0x2)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x4000)

03:27:15 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:27:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
r2 = clone3(&(0x7f0000000440)={0x200800000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000280), {0x3d}, &(0x7f00000002c0)=""/78, 0x4e, &(0x7f0000000340)=""/146, &(0x7f0000000400)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x6, 0x1, 0x7, 0x7f, 0x0, 0xff, 0x410, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x921c, 0x4}, 0x508, 0x8f5, 0x0, 0x6, 0x7, 0x1f, 0x1, 0x0, 0xfffffffa, 0x0, 0x4}, r2, 0xe, r1, 0x2)

03:27:15 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r5, r4, 0x0, 0xfffffdef)

[ 1988.850207] loop1: detected capacity change from 0 to 40
[ 1988.905408] loop2: detected capacity change from 0 to 40
[ 1988.908770] FAULT_INJECTION: forcing a failure.
[ 1988.908770] name failslab, interval 1, probability 0, space 0, times 0
[ 1988.910477] CPU: 0 PID: 9831 Comm: syz-executor.1 Not tainted 6.1.0-next-20221213 #1
[ 1988.910501] loop5: detected capacity change from 0 to 40
[ 1988.912100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1988.913054] Call Trace:
[ 1988.913375]  <TASK>
[ 1988.913661]  dump_stack_lvl+0x8f/0xb7
[ 1988.914177]  should_fail_ex.cold+0x5/0xa
[ 1988.914692]  should_failslab+0x9/0x20
[ 1988.915181]  __kmem_cache_alloc_node+0x5b/0x400
[ 1988.915795]  ? alloc_pipe_info+0x109/0x590
[ 1988.916323]  kmalloc_trace+0x26/0x60
[ 1988.916820]  alloc_pipe_info+0x109/0x590
[ 1988.917329]  splice_direct_to_actor+0x6e6/0x8c0
[ 1988.917965]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1988.918564]  ? inode_security+0x105/0x140
[ 1988.919121]  ? avc_policy_seqno+0xd/0x70
[ 1988.919627]  ? selinux_file_permission+0x3a/0x510
[ 1988.920315]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1988.920939]  ? security_file_permission+0xb5/0xe0
[ 1988.921582]  do_splice_direct+0x1bc/0x290
[ 1988.922102]  ? __pfx_do_splice_direct+0x10/0x10
[ 1988.922690]  ? lock_is_held_type+0xdb/0x130
[ 1988.923358]  do_sendfile+0xb1d/0x1280
[ 1988.923968]  ? __pfx_do_sendfile+0x10/0x10
[ 1988.924646]  __x64_sys_sendfile64+0x248/0x2a0
[ 1988.925335]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 1988.926111]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1988.926894]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1988.927688]  do_syscall_64+0x3f/0x90
[ 1988.928253]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1988.929037] RIP: 0033:0x7f85c68c1b19
[ 1988.929592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1988.932193] RSP: 002b:00007f85c3e37188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1988.933298] RAX: ffffffffffffffda RBX: 00007f85c69d4f60 RCX: 00007f85c68c1b19
[ 1988.934352] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 1988.935460] RBP: 00007f85c3e371d0 R08: 0000000000000000 R09: 0000000000000000
[ 1988.936546] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 1988.937583] R13: 00007ffec5e65e0f R14: 00007f85c3e37300 R15: 0000000000022000
[ 1988.938663]  </TASK>
03:27:15 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 1989.039829] syz-executor.2: attempt to access beyond end of device
[ 1989.039829] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1989.041803] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 1989.103208] syz-executor.2: attempt to access beyond end of device
[ 1989.103208] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1989.104344] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:27:15 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef) (fail_nth: 2)

03:27:15 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4000)

03:27:15 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:27:15 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

03:27:15 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x2ca70fc7}}, './file0\x00'})
lseek(r1, 0x1, 0x1)

03:27:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x0, 0xb, 0x301, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, 'vfat\x00'}, @NFTA_COMPAT_NAME={0x9, 0x1, 'vfat\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x6f7a}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x20004050)

03:27:15 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, 0x0, 0x0)

[ 1989.531447] loop2: detected capacity change from 0 to 40
03:27:15 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xf8, 0x80, 0x80, 0x9, 0x0, 0xffff, 0x20000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x55, 0x548a325}, 0x8294, 0x82c58cd, 0x0, 0x9, 0x9, 0xfffffff9, 0x80, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r1, 0x2)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000)
fchdir(r0)

03:27:29 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:27:29 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r6 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)

03:27:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x7, 0xf7, 0x4, 0x0, 0x6, 0x30, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfe0000, 0x8, @perf_config_ext={0x9, 0x6}, 0x12c1, 0x0, 0x2, 0x3, 0x5, 0x7fff, 0x5, 0x0, 0x101, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r2, 0x1)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2002.746142] loop5: detected capacity change from 0 to 40
[ 2002.763232] loop0: detected capacity change from 0 to 40
[ 2002.772155] loop1: detected capacity change from 0 to 40
[ 2002.824981] loop2: detected capacity change from 0 to 40
03:27:29 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, 0x0, 0x0)

03:27:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r5)
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000000c0)=0xa5)
sendfile(r0, r4, 0x0, 0xffbffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:29 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000140)=""/220, 0xdc}], 0x2)
r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x140)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x50, r2, 0xb2a1e000)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:27:29 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1a, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x140, 0x5c)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = dup(r4)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
accept(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000200)=0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000000c0)={<r7=>r1, 0x8000, 0x4, 0x1101})
openat(r7, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)

03:27:29 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, 0x0, 0x0)

[ 2002.890904] syz-executor.5: attempt to access beyond end of device
[ 2002.890904] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2002.892832] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2002.962428] syz-executor.0: attempt to access beyond end of device
[ 2002.962428] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2002.964589] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2002.981354] syz-executor.0: attempt to access beyond end of device
[ 2002.981354] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2002.983245] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:27:29 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6)

03:27:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x20000, 0x100)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2003.120857] loop0: detected capacity change from 0 to 40
03:27:29 executing program 7:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7fffffff, 0x3})

03:27:29 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
r5 = syz_open_pts(r1, 0x200)
fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x1)

03:27:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:29 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000d40)={<r4=>0x0, "5c4768cdbb851347a04784462f6226ea"})
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001d40)={0x3, 0x8, @start={r4, 0x0, "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", "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"}, [0x1, 0x3, 0x8, 0x7, 0x6, 0x2, 0xfffffffffffff001, 0x3, 0x7fffffff, 0x3, 0x7, 0x401, 0x8, 0x4, 0x9, 0x9, 0x4, 0x7fff, 0x5, 0x91f, 0x8, 0x800, 0x5, 0x800, 0x3, 0x8, 0x9, 0x4, 0x100000001, 0x580000000, 0x1, 0x0, 0x8, 0x101, 0x1, 0x7b, 0x5, 0x20, 0x1, 0x7, 0x5, 0x2, 0x7ff, 0x7, 0x0, 0xffffffffffff498b, 0xffffffff, 0x5, 0x8, 0x7fff, 0x400, 0x5, 0xffffffff80000000, 0x10000, 0x7bc, 0x2d, 0xffffffffffffffff, 0xfffffffffffff106, 0x3ff, 0x68a, 0x5, 0x4, 0x9, 0x7]})

[ 2003.375926] loop0: detected capacity change from 0 to 40
[ 2003.438982] loop5: detected capacity change from 0 to 40
[ 2003.498729] loop2: detected capacity change from 0 to 40
[ 2003.579571] syz-executor.0: attempt to access beyond end of device
[ 2003.579571] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2003.581353] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2003.608979] syz-executor.2: attempt to access beyond end of device
[ 2003.608979] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2003.610878] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2003.641795] syz-executor.2: attempt to access beyond end of device
[ 2003.641795] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2003.643556] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2003.648634] syz-executor.0: attempt to access beyond end of device
[ 2003.648634] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2003.650276] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2003.655994] syz-executor.5: attempt to access beyond end of device
[ 2003.655994] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2003.657676] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:27:42 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xcdc9e3a21217f937, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x94}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:27:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:42 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6)

03:27:42 executing program 1:
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:27:42 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000004280)={<r3=>0x0, 0x0, "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", "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"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={<r8=>0x0, ""/256, <r9=>0x0})
r10 = perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f0000070280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x5, "af2f1a9317bc6f"})
[ 2015.954952] loop2: detected capacity change from 0 to 40
[ 2015.956569] loop5: detected capacity change from 0 to 40
[ 2015.977908] loop1: detected capacity change from 0 to 40
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000500)={r7, r8, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000300)={r7, 0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={r7, 0x0, "874b2b0febfa5b561af1e5e343ec8b8ab9ee203a4c5e855b7e9a78f624aa785e97c7694f84e0069045f315bbc0fba47b01bbd7b7a0499def0ada82ccb1dc41277bd0a55b66d5bc0425678bd371841a3878979ecf389a8cfde667059eb2ff1aec61263bb35e146080ad826e8d053e902003b5d3021b764ce6600901522fb78c9674caf315c0b232352972f97cfce70a4f2190dd2b4e97080b7ddd08b351c49accada96f7fa5c4c5d3db8cb01172bdee721c4080f62e8336556fb5996835ad08c6ac23389a9e97ecbc96cf637cdae6b1a39cb32f824c9bd205ad762fcbb564203ebd349cd2c84cff18c64c34e358a239f39465b7ffc41cc3411dfcf04a645f2831", "5f4dae8aa8e7e2e02c7eacad5ebe93a2944ed963b053ece4dae700847fa0c90c3241476f534a385dcf9563982a2618247e9a570512e32859d32187950f68af92297e27d15b197b678cc91672810968578d8ec7291b350921022416803c35c8f7136b0fc7141ae3c9c91602702747c6af7829277eb2890880396320f64c4394e42cf79016fadd2685498eca4b8edb980ff95889271fc2b81ae1633f417abe21f67b9fd821d311791d849d59cd6e626e700f9145ba9b4b11de8c5cd85e43295468206c963d785ca1f3d49c4fc82e7bc8a5cda5cdb9f0ecbe8d1f24c443308f7703373b1beadbea72761987de4ebc5b0e810cb58b75e10a2c1f4bdc64f9d331b652c2e08a0486206b9a5fb27c676aa7c6dec97468ad068248b76b86ad64150d1e2d70744105eab3428000bca334e0ec1f1d998d9545615033f00dd3477bf12aca284864419fc6b10c78b7dda1effe13ae9a36198d9ded0f6d2504fe699dfacd35784387ea1e430c1aed65eeafa13a2b55034472f16b46ae93d9ed738f6007efb015335830b7c4a59ec34134079cf8081a4c8575957f21d460f33725d0f2c75f81f375ce148d4d874d8c8c657d78ba125cf02f162bd5073b1718d083b8462e949e22ce23f1c5671eb99fe4caedf862f8fc568496b87d9d825ef4238c28e53df86edd657fd703e362e53b8a062f1364c16da251cf432667b8f325c8de22aafb66ca8e26d17b5e516dbb3e9108cad71613b1ac804516e0733cb9d3cf0cba42138edf607d61602443d6e5c59251385000c93da1790c4647b360e30e3665dce2f21589f2e5e68cad0bae841749b00c3a0f56e2caec642782bcc3a156dd1706d3161c7b0de8e4a43685cff09aa3b1acc85c8e70cac61ceb9a722ff0f4d465732f42033887458be245b57e0b626e510cb9861f132fb08a5d429aedff71e5c9c91704a79b44caac46f0999c3bedbc4d9852fc2fb70e823df72fc356a850b1a2e6baad8309705c3ede40f0ea04e02fd2f3df8ef544174cf5a2a44e6f9ff30204c13a3cf6dc284d15acb25bc407a783edd8b7c1d5086836efa6f7c59b7dc79eca48a9d285b8e94229f01738e1d677c222ab900d6ad6d91f6c8b16aa624c479a69670e006a7cd21917838e3c15308d6f1fd5e9bddb33ad064a1a5010026405ea569569e078cc75dc94f6223125d7fd9514b3993d019695a7715b6db838cdd0f3adaadf6cc5a9a5aa7768aea2285d0008597e717adcfb44825092aab9cd875b215116c1d67abbe13e0822d54eb4b0f1b0789a531b6121d115dad14495e96f1935b5cdfde351485b94f22924f4a765b74f86b9c72ab341d25d5849340006c240eb26eb932031a8fa966c5b3b3bdd430d3f614420e503864ee34daa25ef83c4f254be33fbce3e0a776f7cad6649ed33e1270aa1b9435742619ee394cd87bbb73ecd53e09f1743c97e364a7df37e1327092c1c4202bb2e76e7006efff8534ff9a6fa7b68da25ab8da4fd1031f235640130128862c906fdc10068d29521119a0a531a980512e12cb9992cdd4efdb3f63dee0b196af92a4d1a1e4420bb5edb244ba0dbb7beafff088fbd6622cfaddb74775fd9be85c0f31e7229eac157dbea5cfb2d0dc39b91ff593c78a6e274d5809f9319ad59a1168b131c34ed854fd53632c3e6568d5a8c69a55306b7a188ddf21a00b8ca41f0dc54c61c35c0bb74e6e795fd42ce5559cfe4a6c129b7028ece04f1a165f297ef472190fb6f178107cd6a2cd11873b29086241e8bcbdac5935fa3fbe633446177ba1be26eba02cdbf4854485e18aaf121a560de9b0c0ee4d42d6ac3a8748c65a5dccfce514bbb2e79404a2763d8ac13d7f085c59ed326deaeefe357302879ee5af6cf69c2d99aa0b48062d4570435d3c39fc0e3260e151485f0e518418d41f24fc6e7ea94ef88d3d5149930bedcb854c23c7fe2365d483437f340b19c0ec28748cc1ad5e1ae2af139790f28bc11c940cc862b6ff08c416e5094f11aea6b4ce3ac596d320642c3c13385d8e4a47d7042c2818e5788f8c9e4a781fb0d2f59fa0a26988e003afb78130f4016c0ebf46674215ca2fd6bc6ac2869170e4596069c4cc6d3abe0eb437a49ac489c8b4cc2b70859c5c2dc723a77395656821b1d82900d06abe845efa0a6ab09284912151be9115e5b0b633e02ac2bf1b3efb900ad9e63b94c58a2b1f9645718d5342c03949a77f9c50d77c9e7b81769b51d8e35a339f034bdf30c148121d0039e73a84a85e6acea2935dae132554807fe6d95b57f0ed68c06f70344c4f2aae10cac9d570ee021926609b168cb3906c75427c13aebf9fa567e6bf6ca37cb482d8a43395897892a626e77a77adfbf5be46ede1159ce9a2b0ad383ec6f585ed68f612efb6e040351f58e8626cb332011bfe77b16d2b096db3cedcfa976cd18844382a647ae0b11b9ba25a01dbea11e47c0ebb58d1fc4b2eb35147b15275587040454730a72a4c938dec52de8589125ee1f2ce72fa5f91c581fe4d9de1160bfc70f8c884601740feb9a6f503b4ca6422e88fb4349cadf5dd9eeb3212799febe2112d949ecfcce03f8339ef219cc68fcf3261cc6d692f62c89bf1a5609e6e068c0e5d4e1efa6a855c97658db7ed8ee47b42fa79959db8fe65e66060ba495e30014905b47ccad5f712f7cede5930f53a8c6d84ccf5411e37486fe62355bfc24fab346127b8b99e6fed0eadc440ac9f0157a3810e27462d185e42132d73a80158074dc464235158ea25dcbcab6aafb856ce3c775797088aff75318dd781b155407f52658173af28b045917bbcf0606bf014f788434425570935985d4fb82cbe89358c1d014719fe8057f7260846ba169c4d899f56e5e75be8776914bf8342a1c525973f8118cad163cdedaae3c62d6da4566480b9ab89ffc7e358328708b37c4b9526f9fbb2e3d31537e3690b08cee46262839211ee0f3991bc9cbde7edd5c46b2a83cc3a8129849fe854f81f7c9435e19bf1668efff7136b55b755e9dca1e7e9951dd79baae75c5a045b9726a49a6420ef2c87f15477a4cc32a7bd490978d74aac19b0d78d3e9ac5a6e4b0cdafe43b53b636864a0b12ed3d7328edee8588cebc01918abb92dfa497e700d570cb86dd55d877249dcf8b423652f64c2cdfb6eee304ef07312d17f69d18aba218ee1e74f5acf494e195225ec855bd883b29a3dd2072fdabcbd8cd9de9af5c7fd7c76628b4477c69fe16d4039141052f54df3c3003f5439c7f1dd6279107c041871c3684b2e1140ef0ee43d44f178cba957b22fef5f89e9ef5248c3b0b5385b24452e2c560c793d242cdbf3f01c8993b1a5d8e2764b2b7cad2b9184bdd1f98ff8c6d76f8234d2d523f24e0cb5a21d6a296009290225294c9eaef17381214fcbc69ae97061ad224d20c2858dd29f8ef8db9a0347646321cb116c11167d44f6c96eee5c008968d1de62e30bc915361988a215c1dfac7521384a544659849c4e8a695cc146d39ff0c1b20594bce0a8e57618fba19c6deaede3ba1589582553e11c4955dd4e17b4089ac0c824b4f4efd0ecef7d8a05e102a1e1c5d9b33923bd70371c8d7c8a534c3f3fbc31205e5fc3bc279f38fd8be2ff20be09d5f7fbe297dfda08a0497930e407c9b338798c5acc285a7c3387176f41546a5829016f429d09339bb05e71313fd80d1d31a7b8560a3b0d57a61116bfaecd4a5196cbc3f96f8fea171d4741a64ee420eb0ba1500c336345872df1f3c1dba8cbe6b0a06448947ccca68b37e46f696e34e6564dedf2b7a5773b51d2ae2ab31cc1094f00b6e151d61fa96789496e8c9d43eaf160aa314710d5484c4ba2b231a49487747b54c89a859b806b591ff96b8b892849c57d0fdf12ad28337b40e0247c697b607a5a5c266158e062a2e3ab5fb26df8028fd61b50cfb6ade0e252f9d950151394b1d00e623bdcc6eec04040456a058276088610564b4f207519674a6d65eaf9e92b69dcd0d0133458a6d3e96a726a9a02891a6012fba2a8030e37a97ed47adc84b7e35ee4864ae85d1bd6723f8aa284aa4eedf59d758ce635ed3179601995cbaa0b86534cd23989cd089c5a37756d2bbfd605d709c185370be04781fa88ac12c86e1a6089377bb74b953c22d31c98d9cbede455c05f262459bb2644f8535d872f1afea32a13c9bd697d28baa4f141eee443f1d36ae587c48149ff9499094a6e7b761d7c2bd6099c1fbbced78506c887d58131f6e605affb89955c4522b72a3719bd479f5faad84812a4dced02719d2c00ee4cfaeb1e3df2e4a90747cc2bc4da0a180d1b121a3da409e06bbbcab7b2f81e5dc60628eaddf288cd6db5617db459c8d08c235fe1b5abe1bbec073b2e17f08da60c11c246e90fd6f413bdd64d2c80245aaf6d412f44f8865226ebb21995420038abd22ed176c87363fcd81321507c37e372ab66d5921962c0417eb8a0d6c6eb096a49107471718759eb9c7bf67f4223bab99cb7e4ca258085112c89c43ce48c54c8e789e3b4af3e62057e763e74c2da3a30825ef4fbd682cbed661c05708f2ee87108df386a70ce803dd688ee43d7b9a73c616254fca40cc3f04e78baf45610cb8350df705d368d137da98050ed792739cac573b2ab3a326d04c5b4579e818506affe44d6e6291ac0cf8f0ac47bed2db7d09ed00ac7a47c2d1894e40f15b63ab549542ce86289efac939d5f5e3e27747326618cc36b494ba7c6d840eba5fe1f46df6c350c09e826219b1184a4aa786ae80232731a274bb1ba9f737044452e10fb75003df8dc25dbd94bff3cc82d29f4d0470d0e0b986588b3a3414319a3c785bef4c8f7b5f50732ca0baee3a399c0f255e63a1a23a8ca175a42550ee59081cc3d1bcb97598dce34b72f900103a0c09b6fb3ac6ed3cc11ca14d5440819c21e11c82fcdf7eadb31c4b4444e7fb2d01b9ab53bbdda18c238796bdb754cf51a02adbf7f4522e78c08855445ebd725ccbcc42b2c0c875b27a8ccca3551c5192ab8670b8e8a2599d605f659b1fc1811decd9b83aad9120e9450a7437a73804cb25f301e8a3a8358cf49ee7bc2b29d2f7e912c5731742b35848144bd8319a428e614a9a5690c663bbff4dea7ede9906b22bfbb67e53e170e551b8d020f9e8321d1aa67b7e2ee50b00d0bf5b8016c9e341e50471d16881a7a9ce505479416b7efc14b87bad66ff8ebfd2033f66905bff8736c9711e153a9ac60d7c31fd146ddfb932766fe67a88103327fbf2b1719a23b65b5db7cab5dfadc5213205aa3e1a99646a0f94742e17ee59b3f74c7ede9655995fa02847395a28a043df10532fdee5679bc2405ff4b314c8a49916408566bcb383dbd675b362aed0d0c8d9680ceaf130959118c12b6ef3b0a650bd148ac8f3adc05f3978eed7f207059d1e3bfce0289a10db50c8c89127c7f63d0e51a02"})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r2)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000240)={0xa0, 0x19, 0x1, {0xa52, {0x2, 0x1}, 0xe2, 0xee00, r5, 0x3, 0x5, 0xfff, 0x2, 0xb13, 0x7f, 0x6, 0x6, 0x8, 0xd, 0x4, 0x9, 0x401, 0x8000, 0xd3c}}, 0xa0)
lchown(&(0x7f0000000400)='./file1\x00', 0x0, r5)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x310000, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r7=>0x0, <r8=>0x0})
mq_timedreceive(r6, &(0x7f0000000300)=""/177, 0xb1, 0x8, &(0x7f00000003c0)={r7, r8+60000000})
r9 = dup(r4)
write$binfmt_aout(r9, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES16=r4], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:42 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = openat(r3, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000340))
syz_open_pts(r1, 0x200)

03:27:42 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r2, &(0x7f0000000080)='./file0\x00', 0x42241, 0x10)

[ 2016.049969] loop0: detected capacity change from 0 to 40
03:27:42 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6)

03:27:42 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x9)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)

[ 2016.227840] syz-executor.2: attempt to access beyond end of device
[ 2016.227840] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.229806] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:27:42 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = openat(r2, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000340))

[ 2016.250064] syz-executor.1: attempt to access beyond end of device
[ 2016.250064] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.252544] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2016.265168] syz-executor.5: attempt to access beyond end of device
[ 2016.265168] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.267775] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:27:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141c40, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2016.312291] syz-executor.5: attempt to access beyond end of device
[ 2016.312291] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.312698] syz-executor.2: attempt to access beyond end of device
[ 2016.312698] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.314191] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2016.316000] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:27:42 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6)

[ 2016.333486] loop0: detected capacity change from 0 to 40
03:27:42 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x480800, 0x50)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x20180, 0x0)
openat(r3, &(0x7f0000000180)='./file0\x00', 0x308800, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2016.364224] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value
[ 2016.416766] loop2: detected capacity change from 0 to 40
[ 2016.448778] syz-executor.2: attempt to access beyond end of device
[ 2016.448778] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.449948] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2016.461031] syz-executor.2: attempt to access beyond end of device
[ 2016.461031] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.462303] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:27:42 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x1f, 0x8, 0x3f, 0x0, 0x3, 0x29b7d538554e1171, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdd7, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1002, 0x0, 0x1f, 0x3, 0xfffffffffffffffb, 0x0, 0xff, 0x0, 0xff, 0x0, 0xb1}, 0xffffffffffffffff, 0x6, r1, 0x3)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
openat(r0, &(0x7f0000000300)='./file1\x00', 0x400241, 0x89)

03:27:42 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r2, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2016.562943] loop5: detected capacity change from 0 to 40
[ 2016.631922] syz-executor.5: attempt to access beyond end of device
[ 2016.631922] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.632922] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2016.659626] syz-executor.5: attempt to access beyond end of device
[ 2016.659626] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2016.660523] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:27:55 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r2, &(0x7f0000000300)='./file1/file0\x00', 0x1092c1, 0x0)

03:27:55 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:27:55 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x2175, &(0x7f0000000680)={0x0, 0x1df2, 0x4, 0x102, 0x285}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380)=<r2=>0x0, &(0x7f00000003c0))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)=0x80, &(0x7f0000000300)=@isdn, 0x0, 0x80800, 0x0, {0x0, r3}}, 0x3)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r4)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r4}, 0xfff)
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = dup(r7)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$SG_SET_DEBUG(r8, 0x227e, &(0x7f00000000c0)=0x1)
write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1200a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x130}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r6, r5, 0x0, 0xfffffdef)

03:27:55 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000)

03:27:55 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x220c00, 0x163)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0xc2e}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = socket$inet(0x2, 0x5, 0xadc)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
pwrite64(r4, &(0x7f0000000300)="10ec6b947cd11040b520dfed3f8fa06d84b48a1d54ef21f91a283dfed1904ac66dab3252cc3eb16d0ae4558d514f6a00cad89e48ce5160e4b827aca8f47088f9310b523b83c62c957c763540d86bdce5e22e3f99e02b7b33f79f84b1f60f67ff3494ec238a1818e5c801db267e88d08346485b850ec5a5d5bf75d792cf0c8954f8e1a1ca979e5eee026444f881dc9631d47bd4f4077eb4a390d22b9848ad19f9abc188cf2a", 0xa5, 0x444)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
signalfd(r0, &(0x7f00000000c0)={[0x4]}, 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xfffffffffffffff9)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x1f)
r5 = open_tree(r1, &(0x7f00000003c0)='./file1\x00', 0x8101)
copy_file_range(r3, &(0x7f00000001c0)=0x8000, r5, &(0x7f0000000400)=0xfff, 0x401, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r6)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

03:27:55 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6)

03:27:55 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
fallocate(r1, 0x0, 0x5, 0x8000)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
fallocate(r0, 0x4, 0x6, 0x9)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2029.490813] loop1: detected capacity change from 0 to 40
03:27:55 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6)

[ 2029.553404] loop0: detected capacity change from 0 to 40
[ 2029.555987] loop2: detected capacity change from 0 to 40
[ 2029.557437] loop5: detected capacity change from 0 to 40
03:27:55 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000080)={0x100, 0x800})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0xa43, 0x200, 0x200, 0x6, 0x10001, 0xffffffff})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x80000)
sendfile(r2, r0, 0x0, 0x1)

[ 2029.596315] syz-executor.1: attempt to access beyond end of device
[ 2029.596315] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2029.597370] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:27:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000002180)=ANY=[@ANYBLOB="40474e7ad4000000360000007f501262d07db66b3f7f0562", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000180)={0x80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x82, "f0468a136dc3a2"})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={r3, 0x9})

[ 2029.675546] syz-executor.2: attempt to access beyond end of device
[ 2029.675546] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2029.677276] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:27:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:27:56 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000300)=@v2={0x3, 0x3, 0x6, 0x54d, 0xde, "24662e3da449178c7f20c323892a98b8958496bb2e0ec909a14b77fe09dd3c02f2fe700c1dcd9e376754fa33698ad9638b67fe984b9b8883285b001e929f65243943aeb4779cdf4abf2f7184058b95fb7651ed1102c6e9ea0e021c8c8d508099c4d6bfc092dc8bf89d2654bc3f93fddb6236aca92f81797e6f1a00a458147639aad34893291de2ddc79a46106eaae0e45a1d56cf843b39245e92e10c50e5343070281bb8efcf9164e8add4391b99060075894f38c5c72054ee12e5c9278889affca7cb696a4a7021b16b88e6deb2c5e30e9d32a6d38b7c07815a26cdd647"}, 0xe7, 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2029.707382] loop6: detected capacity change from 0 to 40
03:27:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x8, 0x7, 0x5, 0x7b, 0x0, 0x7, 0x3080, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0xe40d, 0x7, 0x200, 0x5, 0x8, 0x7ff, 0x7f, 0x0, 0x2, 0x0, 0x6}, r2, 0xd, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2029.770365] loop1: detected capacity change from 0 to 40
03:27:56 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
fallocate(r1, 0x10, 0x1, 0x8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r2)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x62, 0x2)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:27:56 executing program 7:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r1)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000080))

[ 2029.909664] syz-executor.1: attempt to access beyond end of device
[ 2029.909664] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2029.910978] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:27:56 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

[ 2029.942730] loop0: detected capacity change from 0 to 40
[ 2029.956267] syz-executor.6: attempt to access beyond end of device
[ 2029.956267] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2029.957438] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:27:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xc0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r4 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000280)="4ecf1c7a0ac480acb44c83eaef38a50c96381c166519c94ffc18d91a4149ee38906ca211e4be3d1119dba8d1d97a861f6cf1a9bf3a2139c51508e3676453fb1967aad6675b4f05df623b7b13383da0d6fb0977c798af6498c629502380ad89f6e43f6e0baadedbc5a01ef7c7da983d176150c83b708b2126b65a10e72f763274260380121278e1826adfd403ab1c84a979798ab2735bbd1f3188031b6c78d62bc88b11ae7e104605d507325542dcc32d2607586ab02e32597e0074c63b8b6375e0ad014e9a5146191622b0909927c0c808e6a3bea27c0b2f6ca7941669980a714a4cf7b5f979", 0xe6, 0x200}, {&(0x7f0000000380)="a122a0ec5c52f3d88e9c4d8a5aa15cee687a72081155c598b84fb86a8f5d8118ea08c48f339e26d018f61b8c4308a5d96654a5bb3bd5e41ee4775fc5983890ceb28997676fc0f42140316e7dda589a1bfb08463b1d5efc782169a9a7ce4e406e848d4485581ebebebeace12f414c42ec92e0b9b711b5115338442607f702c14545197b3c189232e8a22d870a8568b29cd52516908c8c4bc4d6cef08b6012fd98f25c", 0xa2, 0x200}, {&(0x7f00000001c0)="fcb9ce0341d146724ca15577", 0xc, 0x10001}, {&(0x7f0000000440)="73122207a0c1e2038b18a0d99d252d187cdedf6e33d063a94c84812f6671322317d12a1c67def114c5636d90282e0e1dcac239455798d9f3ca255e1788a860a4ad74764ab820c8", 0x47, 0x55}], 0x101008, &(0x7f0000000540)={[{@nonumtail}], [{@smackfstransmute={'smackfstransmute', 0x3d, ':}}@{]}'}}, {@seclabel}, {@uid_lt={'uid<', 0xee01}}]})
openat(r4, &(0x7f00000005c0)='./file1\x00', 0x0, 0x44)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r5)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x4, &(0x7f00000017c0)={@empty, @loopback}, 0xc)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x3, r5, {0x4}}, './file1\x00'})
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000640), 0x1400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0x2, 0x7}}, './file0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2029.989955] loop2: detected capacity change from 0 to 40
[ 2030.060568] syz-executor.2: attempt to access beyond end of device
[ 2030.060568] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2030.061779] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2030.113645] syz-executor.0: attempt to access beyond end of device
[ 2030.113645] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2030.115631] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2030.128734] syz-executor.2: attempt to access beyond end of device
[ 2030.128734] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2030.130375] Buffer I/O error on dev loop2, logical block 10, lost async page write
03:27:56 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @broadcast}}}], 0x20}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x29, 0x3f, 0x13, 0x8, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x8010, 0x8, 0x0, 0x8}})

03:27:56 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f00000001c0)='./file0\x00', 0x422100, 0x10)
getsockname(r2, &(0x7f00000003c0)=@tipc=@id, &(0x7f0000000440)=0x80)
r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x10040, 0x0)
ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000380))
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, r3, 0xb)
sendfile(r3, r2, 0x0, 0xfffffdef)
r5 = creat(&(0x7f00000000c0)='./file1\x00', 0x104)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e23, @private=0xa010101}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000180)='vlan1\x00', 0x1, 0x7fffffff, 0xc9})

[ 2030.213885] syz-executor.0: attempt to access beyond end of device
[ 2030.213885] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2030.215705] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2030.225884] loop1: detected capacity change from 0 to 40
03:27:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101a40, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2030.336344] syz-executor.1: attempt to access beyond end of device
[ 2030.336344] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2030.343777] syz-executor.1: attempt to access beyond end of device
[ 2030.343777] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2030.373965] loop2: detected capacity change from 0 to 40
03:28:10 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88e, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x204081, 0x111)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:28:10 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:28:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = dup(r5)
perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x20, 0x7f, 0x6a, 0x1, 0x0, 0x204000000000000, 0x85000, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x808, 0x92f0, 0x1, 0x8, 0x6, 0x1, 0x2, 0x0, 0x2, 0x0, 0x100000000}, 0x0, 0x8, r2, 0x3)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000180))
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
signalfd4(r4, &(0x7f00000001c0), 0x8, 0x40000)

03:28:10 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000200)="57bcf1f30188aaf4cb49bafeb8177a1961b1de6799843c983f155d9ac7033eef2754b19b83283f269136afcc57effeb0479ca6cacc69e018e97443d119cecc0bef9fac94173fe8d02af9a6776e0b9e7e88e479ca48d9b110d90ba32e5e1e31de69cc234b3bfa8fcf9e2017b88afce8a0bd49c3cf5f6b25f029dd17a7097708908e0b10ba9b1c3f25c77de6097f34ef05ed6366331e3b54e02d32f885940ecfd42edf", 0xa2, 0x2}, {&(0x7f00000002c0)="c1d71de063e4e05591fd95da6952582e341d8d3db24cdce4203b08b8f25d4ab7d3c465af0a04f076f1cba47cbbb2523294b6c9d479baeca6423e61d8e1ca4a1a8b5d2c147a533cd0b24bb7a3e3d0d840deea8aa3e9896cd07a5bc2905a01150cf4124a5336a7f44a52b063d84664a02353fc4b2f0510c00e0f0ecf7ed7653741f48aba1c50ebbdd549ccb777cd5c8f25e0a5998e49ade7f57f3b9d6a173f60ac786e31186fe0436bc1", 0xa9, 0xffffffffffff8cf7}, {&(0x7f0000000380)="58d990d065ab796c3b9a97440313", 0xe, 0x9}, {&(0x7f00000003c0)="1b4efb4a061f9b88915c97f4a8c3e90137e14b041572e0a79f7fc0a480519eb9071a26130eca21d698c73a5332e653208241d6390ef84164dd2330877723c1ce48bd136d0743b3c40045d010eb0c1c1f0b7a8f3af0c585038a5b8f6ee45496b727f84ed7d8091de769e7f7a151f28d43e700ffb80e3c20384f0a17e166f87bda42f6113a772ddbaa16accefb2d5ef5f4aed1aecabbdfdefa57612dee52b733e8f20357d9fd3dd3dad316138516e60d", 0xaf, 0x9}, {&(0x7f0000000480)="653ace2190733df39161978a94ef5bb11b1c6a0efda15517967b88ac100aa6676d9f3b86d15e00131adbde313f45c451b2164603591138ff5db57260cb81160c2f4f553f8e28ba8a6f38fe30b5057aaff5decb164a2d4291c1be33448e22db3dcf67df805b483c456ab3cea1c164ed89b5b2c06d4bcc9420fe33d04702f73d08709945a4", 0x84, 0x6}, {&(0x7f0000000540)="5bf3e6121a9b70c2fc550ef144460d09424ce20b285a6c4efc2d71cd35cfec7e77a08064cedc2d0c01631ffdef6551524337749e55f027679dd6fd8fb459c1622255dfe54134a5cc5edaec0f452165dc4d2761e33904f88b7990af51be5c8acf182406f9f0fc6b38", 0x68, 0xd1c}, {&(0x7f00000005c0)="a190d0023989de1b03fb08b2b1f497b85a248e3b2f0e48dc7d1a8032f33a7854de09e60e4730e5613a7108624e1e6c7ce84a8551f842250f3e2e7b6edd6b39325552b864fc697cab4d5c8ab0c18eb9c56ba56a087b7e5a4f4e37c9993eb6d695ec", 0x61, 0x1}, {&(0x7f0000000640)="0703", 0x2, 0x8}, {&(0x7f0000000680)="47bbe268f6292e423dbb81071de5e0221065f8e7ca2f4d8f385590d654", 0x1d, 0x7}], 0xa0000, &(0x7f00000007c0)={[{}, {}, {','}, {'!'}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x37, 0x36, 0x62, 0x7a, 0x34, 0x33, 0x38], 0x2d, [0x64, 0x30, 0x30, 0x7], 0x2d, [0x39, 0x65, 0x65, 0x31], 0x2d, [0x63, 0x30, 0x37, 0x39], 0x2d, [0x35, 0x63, 0x35, 0x65, 0x31, 0x38, 0x64, 0x37]}}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@dont_appraise}, {@fowner_lt={'fowner<', 0xee01}}]})
utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000880)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x6, 0x0, 0x800, 0x4, 0x1}, 0x200)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x4180, 0x0)
openat(r1, &(0x7f0000000900)='./file0\x00', 0x2, 0x172)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
acct(&(0x7f0000000080)='./file0\x00')
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000)

03:28:10 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:28:10 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r2)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:28:10 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
readv(r2, &(0x7f00000026c0), 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
sendfile(r1, r2, &(0x7f00000000c0)=0x1cc7, 0x4)
mount$9p_virtio(&(0x7f00000026c0), &(0x7f0000002700)='./file0\x00', &(0x7f0000002740), 0x2, &(0x7f00000028c0)=ANY=[@ANYBLOB="00080000000000009d", @ANYRESHEX=0x0, @ANYBLOB="3c736d61636b667364656174002c4950e1cb8591e75ded646f6e745f61707072616973652c66736e616d653d766661742bc7a34f0db7d37173655f747970653d696d617369672c638b6e746578743d73797305696d5f752c736d61636b667364"])
sendmmsg$sock(r2, &(0x7f0000002040)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="d1d7715ccdf22325b7b5f91d1d07e994f3ecbb044a2fdb566313e5693bbb3b3dd5fb325256b22b8a790445f9a0d8194380cc01c4765040c8", 0x38}, {&(0x7f0000000380)="f0c7cb518fcdce42b272097fa1df4bac8c4a180879272c8798eb100c3907541663e9293fc2242ce0c0f0f0de88fd3f4af051dba38753f98d350f", 0x3a}, {&(0x7f00000003c0)="83c67b8707e3fce84852a85eed8c33428c6664b895d1b51bf7e3d1a072029c31c2175393febc059237feb9890300faa1c3d37b909143340fbb44ef1e483a", 0x3e}, {&(0x7f0000000400)="5891cd56368b27465eef37f5870dbbe773c4b2be2e3ce5f0269466721b690d5b7a8ec3427c68468e95bb0fc4b5db451f05032d7869fd988fd35e1c16f07961f777614995b77024df95a4c736427fb730ad5ce04708c9882bacb8ed2fead6faa9230c2ee645bedd40e09b98588bc8eb4423efd0b0a2fdd870f0d57f1d2b508f8d78e3af417e73b16277a63cd03b431bb2eae17a71bddadb1377549d5905e3789d9091d30a9ed0d3a5dc2eb35fb5c44b6dd94f77e249ed8951e9b93060a452e9b994a43d4efe173bb32e92f7f1a5da9bf953", 0xd1}, {&(0x7f0000000500)="6c191295762ef6af80a1754dce397eb731bddfaf915fd58fdf6bb9dfd1054a693607cee78ff0101cf075b6c4582438a179310963ada53169eade751c29eef1c4b4e9e359535e6968722a88119dec09da", 0x50}], 0x5, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0xe2}}, @txtime={{0x18, 0x1, 0x3d, 0x5da}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}], 0x90}}, {{&(0x7f00000006c0)=@nl=@kern={0x10, 0x0, 0x0, 0x200002}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="8a7ecc46c4bfac68031b676cb4eca1be914f7c93cd5223c75618afd58a78015fb690a7bfa8203be43b5c8d34b3a63f6b85b340b39825468c7a42e9fceeeaf6390c1b6cb2f5acf2069b7a540fff0195a4", 0x50}, {&(0x7f00000007c0)="f759d51ed5b88417739a2d8628148d4cde7c3fdf031444a965e94c8992aee7bd1b00dbb2046f5b9d5285d601334392efa1fbe7e0d729a1ff2e2180c1f95a8497c0aae40b362a4ae69c18730ef634ee73a8f82bfbc850e100fb7872f50f48761345008402f0e2b5272c29623b98b1f5d4c19d313602b14cf59bb4b7ef755582db8fa39b69c35c4dd80cf7159e165b224b8ed3ed8b566bef12d386c303cd2627e53e82694cccf81a40e5b8b04cbdf8ddbef2396347a9302ae35c70d940e20348ad082cb5e641ce", 0xc6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="81d4cce5da5ce7dfd61ace8b1aaa7d048d2ef9a55837f39a00514d0696ab1da1b41a6ab0d777bbeb53b08569b31f97", 0x2f}, {&(0x7f0000000940)="23353b2059abf4ca642b09a824a1d3616c85d59ab6b96e1010df5fdf5176f9c53049b6ec30b482326ffaf576c46c41ef6631cc625258413f96e16d38c0e3adb54fca7d0f5f357582a6e3a7be1153cd65226794", 0x53}, {&(0x7f00000009c0)="ea8900aae7864d5e6d173861314915b4f8b08553e43206994c96742a80b4b395e8d45b02c822b506bc0161eed333a765f861cc9710028528f30d", 0x3a}], 0x3}}, {{&(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x1, 0x2, 0x2, 0x3}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000ac0)="92b6a613989c0ee581772decded0528e1e70c1173f3c89593cd88abe0a168371773ed3f1b0ffcdbb6b4013a797a1a8ad3411c6a0edaa2cfbc1d6a4291b2d879a9170f047a3667636d17022d2e69ae8f5e7895dc75c361817ab67b6f14ff539d8f9610cd21ee69b58603e0707a085d86af1d06b11106723a034e24a2082a3fe5713eecd9b2a3b85cb6472cdfe1a6745766f16faafc991a5e43c638c7a945d7c3cb2257abf01fd9bd76eae62ebbaf6b4a0104c29f8a2156e9f6ec5b4810ab1750533b822f08526e0d8ca56f999aca25dd5b30bd106f88f", 0xd6}, {&(0x7f0000000bc0)="fce0ad8acd5e7e7a8a57137f8845b8d4cd1c93d46d507e5883cd5d678458fa7f5a639e190da19b4bd7faa7248f2e81966d8b30837e30d90c9467f2093451c5d4f7ccafc76d74eef8e1cd0ef04b349ff85334ac0999e971fdcdaac203848691bf39663b8cd62412fa0009e0e1d262dd477fcf82e80e66eae23aa11a2a00d75077b3736a7fefc69ddc2957d3fe2db0287edae88bbd34cf96c0d83726a0a90045d565cc350046dd0f5e8cd1bd5f17fdcebdd697658b337b7512fe427e2193efa463b78c20224fa365d01a0ac413f59b4e09de36", 0xd2}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="403fa6e0ca", 0x5}, {&(0x7f0000001d00)="8ea367c0ebb2209751d1289b4084a65023d2e91a191295d01b5a34731095a551edd12586a9d708e4fda21290a3e0b057357b0f78ee457a892bf657212a3da4e5947083b5d5bdd453a8683774f23670eb9b2bdedfba684cb522bcc06b0a61761a70e1e07b793e85bc4fa8835090bf685ce6c1b7f752f02880b985a607620fc80e99f210b029244c7daae39fd6d88bac7aa931baac47170f52a5198e86114941079deeaf333755edfc6aef3df7c85bd5e646551fd5d751ed6e7a6017da767841a9f7bd79eff706f194e8618acc4d106962b0dab289bbab09805416d20e0d", 0xdd}, {&(0x7f0000001e00)="3e0ab998133511c54fec5f34d9d193c96531606744784797bdfd606c336759c92a2452ecba5b4aa17fc2094c68b6f7fa4bdc01230dbc135aa6c8f262724d54a30712ca6faeb2bfb7fc7b1ec2d47beb406ace6ea339778b682e86cbb214ecc0d5aeaaf970c9d36a70134c378154fcef589c823da1520d119085be26886e6bf813944e14b6e4e2959f9fba04cf4da3e92c441e4cbf5f8b9a0ec8b3dacfe62fe76e07cc17adf4e78fc75158424857d6a06f8e8798ca1e855caeceaf27cf0e101c51c9c435087e3cd6947821fd400fe0e37c3e5433ab00d92bd790d35e92d51ef069acc562d23dc81bd7", 0xe8}], 0x6, &(0x7f0000001f80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xe18}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x3f}}, @mark={{0x14}}], 0xa8}}], 0x4, 0x801)
r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x194, 0x400)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = dup(r4)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(0xffffffffffffffff, &(0x7f0000002780)='./file1\x00', 0x101000, 0xc1)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4)
write$binfmt_aout(r3, &(0x7f0000002140)=ANY=[@ANYBLOB="070181f796020000c4010000080000001b010000f9ffffff0000000000000000fa4e0112701779ba80a3e15e19344600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000"/1327], 0x52f)

03:28:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x3, 0x1, 0x5, 0x3f, 0x0, 0x0, 0x8, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x18020, 0x1, 0xffff, 0x8, 0xfffffffffffff1ad, 0x5, 0x4, 0x0, 0x6, 0x0, 0x6}, 0xffffffffffffffff, 0xb, r2, 0x8)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2044.318699] loop1: detected capacity change from 0 to 40
[ 2044.335461] loop5: detected capacity change from 0 to 40
[ 2044.346308] loop2: detected capacity change from 0 to 40
[ 2044.355421] loop0: detected capacity change from 0 to 40
[ 2044.375405] loop7: detected capacity change from 0 to 16268
[ 2044.399391] loop6: detected capacity change from 0 to 40
[ 2044.436582] loop7: detected capacity change from 0 to 16268
[ 2044.469596] syz-executor.0: attempt to access beyond end of device
[ 2044.469596] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.470617] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2044.474971] syz-executor.2: attempt to access beyond end of device
[ 2044.474971] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.476038] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2044.491559] syz-executor.5: attempt to access beyond end of device
[ 2044.491559] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.492791] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2044.509073] syz-executor.1: attempt to access beyond end of device
[ 2044.509073] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.510176] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2044.564532] syz-executor.6: attempt to access beyond end of device
[ 2044.564532] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.565420] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2044.573927] syz-executor.1: attempt to access beyond end of device
[ 2044.573927] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.574979] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2044.584030] syz-executor.5: attempt to access beyond end of device
[ 2044.584030] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.585210] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:28:10 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:28:10 executing program 7:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
clock_gettime(0x0, &(0x7f0000001a40)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f00000001c0)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000002c0)=""/222, 0xde}], 0x2, &(0x7f0000000400)=""/172, 0xac}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/213, 0xd5}, {&(0x7f0000001640)=""/247, 0xf7}, {&(0x7f0000001740)=""/33, 0x21}, {&(0x7f0000001780)=""/175, 0xaf}, {&(0x7f0000001840)=""/212, 0xd4}], 0x7}}], 0x2, 0x2, &(0x7f0000001a80)={r1, r2+10000000})
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x4000)

03:28:10 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000040)='./file0\x00', 0x62002, 0x25)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0)
openat(r3, &(0x7f0000000140)='.\x00', 0x80000, 0x43)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:28:10 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0, {0xee01, 0xee01}}, './file1\x00'})
mount_setattr(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x800, &(0x7f00000001c0)={0x7c, 0x1, 0x100000, {r1}}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chdir(&(0x7f0000000040)='./file1\x00')
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r3, r2, 0x0, 0xfffffdef)
pipe2(&(0x7f0000000300), 0x84000)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:28:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2044.750239] loop2: detected capacity change from 0 to 40
[ 2044.759010] loop0: detected capacity change from 0 to 40
[ 2044.773553] loop6: detected capacity change from 0 to 40
[ 2044.903386] syz-executor.0: attempt to access beyond end of device
[ 2044.903386] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.905155] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2044.946220] syz-executor.6: attempt to access beyond end of device
[ 2044.946220] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2044.947397] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:28:25 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

03:28:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x8a)
statfs(&(0x7f0000000180)='./file1\x00', 0x0)

03:28:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

03:28:25 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:28:25 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
r5 = dup3(r0, 0xffffffffffffffff, 0x0)
write$bt_hci(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1be021042dd4ff9160579dce5a0187578d37cae82dacbfe19b0563be69bbd6f61bcaf025a90522f748ed5bf42d75fc89e0d9bcdd5f8a3babca166e5877d83d1f2ce3cd985b2043f25baaa5ea7429363c9d6ae6ffb7de0770c4cfdb0c734fbf06cfdc065100d5321b3cd23f3ddc65db9058c9e233181b456c21b231de517f1465f9a326d3011b878f22d3ca58610651951205c7cdc5600196881cdfce48859ecca6"], 0x6)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f00000001c0)={@id={0x2, 0x0, @auto="fafee178711f1babc12c3438390a9c9d"}})
chdir(&(0x7f0000000040)='./file1\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220)
creat(&(0x7f00000000c0)='./file1\x00', 0x10a)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000180)={0x1, 0x4, 0x1ff})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(0xffffffffffffffff, r6, 0x0, 0x7fff)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x40002, 0x14)

03:28:25 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x7})

03:28:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0xaaaaaaaaaaaabcb, &(0x7f0000000200)=[{&(0x7f0000010000)="601ca66b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x228400, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x5, 0x0, 0x6, 0xe0, 0x0, 0x9, 0x10000, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb6, 0x4, @perf_config_ext={0x562a, 0x7}, 0x80, 0x5, 0x1, 0x4, 0x1f, 0x7225, 0x9, 0x0, 0xe13, 0x0, 0x5}, 0xffffffffffffffff, 0x10, r0, 0x8)
getresuid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=<r1=>0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
setxattr$security_capability(&(0x7f0000000440)='./file0\x00', &(0x7f0000000580), &(0x7f00000005c0)=@v3={0x3000000, [{0x81, 0x8}, {0xa6000000, 0x2}], r2}, 0x18, 0x1)
syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000380)='./file1\x00', 0x8000, 0x5, &(0x7f0000000800)=[{&(0x7f00000003c0)="1b6f3d94ee8d916538583d16c49e7822779260dfa5a5abfba3a4fbc15ef9acb74e7dea6fb829d0d4f60a55feaba3c9c4041e1bc1276be2e512b19193ce7fadfdfc09e89982758f8ca0e26d2fe0f062385d3df687bd04bd8aa8d8fc9da75999576ad5f42f141c186e", 0x68, 0xd5}, {&(0x7f0000000440)="23828a95d1e269f692944e1a53a176da80434bdef51dd361e2c986685a111d7b793995ec2614d863ebdcb03f15614a2f32de043c5f903f4e8add7b05fae56ff419120f20485fc655ca05ebc5fa448918e81585fe60b2bc590c1de5ca78fd132191ed4048d65d0513765cebd02fa9aaae3a36e3e864ba9e9f09398dec6487093be3ffb55e5fe4c7fee8505f31950ca72c3506d7ff4eafe92624365b49c7b6a6c49ce475cdb830fefe9ff4d8b7f8acc274937351ee75cc3cf15a6864c95cd48afa207a75", 0xc3, 0x6}, {&(0x7f0000000540)="2b81e7c9bd4100164840dfc2f9863d6babdad0429550927ec696b4a231894c27092f51c1766aca9073f9ee93c893249c3910020d3171420546ace61ee3c8e28b12e6e60b3c6eee4d2bb4816fd78db3f6c27bc02a94c26a71300de12cf94885a53e02bc1e2efc25bbd4674612ede370fae006c38d66d7cff2e1eb2fa97211ac123da0e15785f365d57ce6fff129650ce855a4cdd516bf48f4a929c1b219c750752ec7a1ef16ede6065d586ef9892260c9c8cdc67ed5921e33ccc87ef4caf7a3b8396a63dc9fc6c88786dc4f304d459638d0", 0xd1, 0x3}, {&(0x7f0000000640)="80559a5f76a9e612dd994624235adc3f34d069a39f9ffb5dde81f9ee2c90f91be5bf9d40b52c1c2155a490b975b67ac4fa8b759a56c3487c97349d34da2bd82fef169d45a0b8fea31cb761385e048d276d532819db89c762eba8a8733908cba93519a4e9376c8fe5fb32bdb95baf5cb2bd707dbb15ee1de137b5afab105a89b07597976682891e46c44128bd269eab04f3a59d6dcddbb6b5852e65f57c6bf2ad78d924d1bac6e00da23aa01bf73bcbff06fd04", 0xb3, 0x67}, {&(0x7f0000000700)="1ba976ef6b4dc869e7bcfa5b02a84544b0960393d39e479414fb91d6dd88d9be6a90277cf2846c475c74fe1108dd2e11ae087122702b58bd4255d41ebe344fd3d0b9d8d8a7ce3c1586174b81fdcb6fb5c41fbfddb2e10757b983c6cbdd55965a45b4481c870a2d6fb716fbe62d0d2ba49d66c7dd044a793cdfbe65a90db92b9af558b630235a6f3d993e14a8ae2d4045610f32b02f3dc5876bc4ef5aece36d08fdfae802f5258427187a7e9f1ae4556be8cd7c1c98abe5e1db91d5f3af570747b47c29d152e00cbb76", 0xc9, 0x3dc4}], 0x4080, &(0x7f0000000940)={[{'com.apple.system.Security\x00'}, {'com.apple.system.Security\x00'}, {'('}, {'com.apple.system.Security\x00'}, {'{.'}, {'com.apple.system.Security\x00'}, {'com.apple.system.Security\x00'}], [{@dont_appraise}, {@euid_lt={'euid<', r1}}, {@uid_gt={'uid>', r2}}]})
removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='com.apple.system.Security\x00')
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:28:25 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x17, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffff801, 0x24}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7bf}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x14004)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_io_uring_setup(0x23e0, &(0x7f0000000180)={0x0, 0x1133, 0x4, 0x1, 0x4, 0x0, r5}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000240))
sendfile(r5, r4, 0x0, 0xfffffdef)

[ 2059.285665] loop2: detected capacity change from 0 to 40
[ 2059.285826] loop0: detected capacity change from 0 to 40
[ 2059.289513] loop6: detected capacity change from 0 to 40
[ 2059.305630] loop1: detected capacity change from 0 to 40
[ 2059.406388] syz-executor.2: attempt to access beyond end of device
[ 2059.406388] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2059.407881] syz-executor.1: attempt to access beyond end of device
[ 2059.407881] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2059.408232] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2059.410160] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2059.423231] syz-executor.6: attempt to access beyond end of device
[ 2059.423231] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2059.424244] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2059.453002] loop5: detected capacity change from 0 to 64
[ 2059.455407] nfs4: Unknown parameter 'com.apple.system.Security'
[ 2059.456528] syz-executor.1: attempt to access beyond end of device
[ 2059.456528] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2059.457571] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:28:25 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000300))
chdir(&(0x7f0000000140)='./file0\x00')
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
quotactl(0x100, &(0x7f00000000c0)='./file0\x00', 0xee00, &(0x7f0000000180)="3f5538294b6b98081b0e9bed8eafa22d2b51bbf220e0345c934ce41f37d7571c0a4f7ce331e4b54a537aeecc04403143fbd90d952324600f156f53a8c16293a61ec2cfb8bdd9594c3fe19ee1df6d54757d3d207a1303acb19ca523cf1b615539")
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=<r6=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x6}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r5, r4, 0x0, 0xfffffdef)

03:28:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x200000, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mount$cgroup2(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f00000003c0), 0x100016, &(0x7f0000000400)={[{@subsystem='memory'}, {}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'batadv\x00'}}, {@subj_user}]})
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup(r3)
r5 = dup(0xffffffffffffffff)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000700", @ANYRES16=r6, @ANYBLOB="000429bd7000fbdbdf251200000008002b000100000008003a000500000008003400010000000800310000000100"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x400c1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0x4, 0x4}, 0x6)
r7 = dup(r2)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r7, &(0x7f00000000c0)='./file1\x00', 0x11d081, 0x81)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'})

03:28:25 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = dup(0xffffffffffffffff)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:28:25 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2059.650036] loop1: detected capacity change from 0 to 40
[ 2059.662134] loop2: detected capacity change from 0 to 40
[ 2059.672413] loop0: detected capacity change from 0 to 40
[ 2059.673706] FAT-fs (loop2): Unrecognized mount option "`mkdosfؠ+" or missing value
[ 2059.785638] syz-executor.1: attempt to access beyond end of device
[ 2059.785638] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2059.791559] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2059.804591] loop2: detected capacity change from 0 to 40
[ 2059.810037] FAT-fs (loop2): Unrecognized mount option "`mkdosfؠ+" or missing value
[ 2059.863087] syz-executor.0: attempt to access beyond end of device
[ 2059.863087] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2059.865215] Buffer I/O error on dev loop0, logical block 10, lost async page write
[ 2059.955148] syz-executor.0: attempt to access beyond end of device
[ 2059.955148] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2059.956775] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:28:26 executing program 7:
r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRESHEX=r0])
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3bb}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x40800)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000)

03:28:26 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = dup(0xffffffffffffffff)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:28:26 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000))
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000480)={0x0, 0x0, r2})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = dup(r5)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ppoll(&(0x7f00000001c0)=[{r4, 0x108}, {r2, 0x2082}, {r6, 0x42}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000440)={[0x7]}, 0x8)
r7 = openat(r3, &(0x7f0000000180)='./file1\x00', 0x109040, 0x108)
ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000300)={{0x2, 0xfffffffb}, 0x100, './file1\x00'})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)

[ 2060.263249] loop1: detected capacity change from 0 to 40
[ 2060.319767] loop5: detected capacity change from 0 to 64
[ 2060.324563] nfs4: Unknown parameter 'com.apple.system.Security'
03:28:39 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0)
r1 = dup(0xffffffffffffffff)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:28:39 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/146, 0x92)
sendfile(r2, r1, &(0x7f00000000c0)=0x20, 0x6)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0, {0xed88}}, './file1\x00'})
sendfile(r1, r4, &(0x7f0000000240)=0x1, 0x3f)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r3, r2, 0x0, 0xfffffdef)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0)
fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000400)=0x3)

03:28:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000980), 0x460, 0x40000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000009c0), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000ac0)={{0x1, 0x1, 0xfffffffffffffe3e, <r3=>r2}, './file1\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r5=>r3}, './file0\x00'})
r6 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x100000001, 0x2000)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r6, {0x1ff}}, './file0\x00'})
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$sock(r4, &(0x7f0000000880)=[{{&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)="adb9c3b8085a33a12ac4e27a392643ecc0647bf460290b0f6548a2512016eb64b7e0a869ef13a4e036e0e5cf8919c666e5ea4c89b437fbc6d3c06e9cbe5cf5fc754b2b4e06b1a2707aa004f1bd99c84a8bc392c5d161fbc2f84bbd8ffaa9c43d3b301765f21cd838a3d1abc9", 0x6c}, {&(0x7f0000000400)="de1e6b3538e3276cc7cc94417fae85856230edb709fa83a73db31b27688bffb7361ba90da1bb76d6df385b075ff9bf56fb2520c4dc59fc041c9ff79320d7414b738e525b175102e39c66693a01f665f52280016763d941d91bffba6da5abccf79cecc3dcc4127b2e24b0d691c33c6db4b3fe6e288cd0b2c96c3b5efd36d78c0178436a6977a2101c73578f6381c48c749c79fab908fe1e4833c6ecbfca7de72bf800570ce9af232424c7d3ca047182139fe0eed9777d4003c7edc4d3ddfdeb", 0xbf}, {&(0x7f00000004c0)="2fb8e5891cf67278910129c2e4c36b505a1483c552a2e1c58a9f760c832bd008e99bea54d58ea9c27b76360df96c088768296e55292bdef5116702fb1b5cf51b8daf2ccaebc0ceef6bf77eca93c94f01f2358d99e97902dad15b0e450f871ceb4ccc85517f2274e377a5df66496133d60d155cdbec06beaea43171b712d8072eb3dab37b5eb310addd4816fbfe4b4beabb80483f375ddf83d1e582ed677cb8d30e2f2aab5ecffeb1f7454cb8cd06f67e93261d6ec2812a2e8ca981eb", 0xbc}], 0x3, &(0x7f00000000c0)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0x30}}, {{&(0x7f0000000580)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="590c7da8b5e0ea3728db9447babc8671449fca1d8be6aafc32a992c1efa25de0a860b484921456cdb536ae6c73c5579c436192c97edb34ce9f854498fef0ce045c35cdcb2168346f690bf5d1f9c9a6def0d989cca2a3448877b86ea4f5b05d51e52c6c025c89986139902698638818e78014d5c3f79f3f6fcbf6afd53b809791f9ae3a4e7ceac495af4cc2486d196a3a0bfc68179ad236f4f09c15e86962792f93edf769d3e6bed6affe0a6c342c1b7b4f13374518ccd0549657e158a6c058bbdd6ab620", 0xc4}, {&(0x7f0000000700)="acff2a73c451940773caada58a1729ae539c821ad960d04c6f0422a08b34e19444a1b98536eba34142626b48f4b98690c59fd50384c5918a3e9562c6ad621548d89ba21f48b3f763e4e6da0ee50c8f21c352289502ec66897e0e3063a7e19e62d921e37f23842c0f1193a6cfdd1063c6", 0x70}], 0x2, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0xc0}}], 0x2, 0x40)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x5}}, 0x0, 0x1, 0xffffffffffffffff, 0xb)
sendfile(r4, r0, 0x0, 0xfffffdef)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000900)='oom_score_adj\x00')
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
chdir(&(0x7f0000000940)='./file0\x00')
getdents(r4, &(0x7f0000000180)=""/92, 0x5c)

03:28:39 executing program 3:
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:28:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2073.364780] loop6: detected capacity change from 0 to 40
03:28:39 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="940bd3a83899"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)

03:28:39 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000600)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="38ffffff000000002e2f666903653000"])
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
r5 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x3, 0x100)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000500)={"bcabce1a43e1b87ebf3a7071e658853e", r6, 0x0, {0x603a, 0x3}, {0x414}, 0xfff, [0x100000000, 0xfffffffffffffff7, 0x6, 0x5, 0x401, 0x3ff, 0x40, 0x9, 0x2, 0x3, 0x81, 0x7f, 0x9, 0x7, 0x10001, 0x9ec4]})
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
sendfile(r4, r1, 0x0, 0xfffffdef)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = dup(r8)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000180)=r7)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002440)={0x3, 0x2, {0x8, @usage, 0x0, 0x96, 0x4, 0x101, 0x7, 0x4c4c3ccd, 0x6, @usage=0xea6d, 0x3, 0x4, [0x8, 0x2, 0x0, 0x626, 0x1, 0x800]}, {0x5, @struct={0xc8f, 0x8000}, 0x0, 0x40, 0x400, 0x5, 0x7f, 0x7f4c, 0x42, @struct={0x2, 0xffffffde}, 0x4, 0x4, [0x0, 0x0, 0xfffffffffffffff8, 0x9, 0x31, 0x3f]}, {0x80, @struct={0x1, 0x5}, 0x0, 0xd84, 0x6, 0x0, 0xfa0, 0xff, 0x14, @usage=0x3f, 0x846b, 0x1000, [0x6, 0x800, 0xffff, 0x7fff, 0x6, 0xab9]}, {0x4, 0x0, 0x81}})
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2073.368708] loop0: detected capacity change from 0 to 40
[ 2073.380890] loop5: detected capacity change from 0 to 40
03:28:39 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lgetxattr(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0)=@known='system.advise\x00', &(0x7f0000000180)=""/51, 0x33)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101042, 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2073.420299] loop1: detected capacity change from 0 to 40
[ 2073.426384] loop2: detected capacity change from 0 to 40
[ 2073.471315] syz-executor.5: attempt to access beyond end of device
[ 2073.471315] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2073.472864] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2073.522059] syz-executor.6: attempt to access beyond end of device
[ 2073.522059] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2073.523831] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2073.560731] syz-executor.0: attempt to access beyond end of device
[ 2073.560731] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2073.562627] Buffer I/O error on dev loop0, logical block 10, lost async page write
03:28:39 executing program 4:
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="13111711407e7c5623c9090d228e29395a02aa84afcf6188f3717ab09f22949aed5864f25833d95f67877208000000000000009dc13e9ca1a473e2ade13e2d5de16458698bd839eea5b3c0db5c01016b74ef7c8ee908da96c2e4beb7b0d803f16c9087e0d8b29fedc2baa83d0bb55b9a4067e5009c06c6c508", @ANYRES16=r0, @ANYBLOB="00032cbd7000fcdbdf25010000000000000008410000004c001800000009696200"/98], 0xae}}, 0x200400c0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

03:28:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000bff000/0x400000)=nil, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x401a012, r1, 0x0)
r2 = dup(r0)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = openat(r2, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r4, r3, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2073.717448] syz-executor.1: attempt to access beyond end of device
[ 2073.717448] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2073.719306] Buffer I/O error on dev loop1, logical block 10, lost async page write
03:28:40 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = dup(r2)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
openat(r3, &(0x7f00000000c0)='./file1\x00', 0x101400, 0x118)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

03:28:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1, 0x6e, 0x80)

[ 2073.789977] syz-executor.1: attempt to access beyond end of device
[ 2073.789977] loop1: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2073.791924] Buffer I/O error on dev loop1, logical block 10, lost async page write
[ 2073.805009] loop5: detected capacity change from 0 to 40
03:28:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
r3 = geteuid()
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x2000004, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}], [{@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r4, r0, 0x0, 0xfffffdef)

[ 2073.861182] loop6: detected capacity change from 0 to 40
[ 2073.915306] loop0: detected capacity change from 0 to 40
[ 2073.979265] loop2: detected capacity change from 0 to 40
03:28:40 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
dup(r1)
accept$packet(r0, &(0x7f0000001500)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001540)=0x14)
sendmmsg$sock(r1, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)="5cdcedc764dfb4e384688d520750a8412792b95c0e2c26728671f912c3ede7dfef1cac038e818394452c6d4fb45869bec5344507e9bd640fdadaef01d09d92363ad35fc96e744697c6e02986d7f95812f6a6b47383ddee2ad511356f91e93d00b9dbbfe2594b534d483139ff401be51912938ed723ac5c452ab3c584717bdfdd3f56eab4fcf50e192dd38db10ba342d308d2e59e0a6406ac2b21ca62df3114425ced9f83c90ac1a2551565a78c29bd13e747000ac9033581b36a2322bc2907c030109a0b15b3467302d7b33155a2aaf186220a92a95e01539b56721857dc116a774227005231d241d9e669f9", 0xec}, {&(0x7f0000000240)="30a71002f493b218c052e0c51119e0f410a829bcee1d84757f174e1e3b6f68c17377f7387bc725b1e121beb1f14572bfd340b3059fe2dc140bf1ae470eaee7e9fa11bfc206c2c7e28c43744000096629799832ceda50cfb64018350af8927eea725fece914f8dd072f22c33b18bb0b03a4bca8b396db1e5b3be2a350ee896151a8247c89fd318f336268c54fae37f42346741c4d32e5ee0c95419346d4703cd26c6d89444a070f1814b4c205309e9d7b1a05085996b7f2fb9d87543296", 0xbd}, {&(0x7f0000000300)="cdf134fa5b9ce6e69d6447138d6db66ac30896dbdb0ecb0ed8fc240bb1efd736defc5fb54309a67b38f49fbe8201d0da0d50f176cffdde7f7da54274457b8206a519eb6b24dcc2e9399d2d6ff14b0a4999c0ece974071c9baa5b652acabcfab5b66c8d83260c45164ff53726837ed71092ba68ce2e2a65cbd6f488fcfb5c3fc6ffbe08f6135fc7990cf6fb3bbc6411b48865aac2c3162926a125cbf6a462", 0x9e}, {&(0x7f0000000080)="e8545f87f81eeae9659d6377a9f06a474f4cb34ef3", 0x15}, {&(0x7f00000003c0)="98af154268644d2b367605c1c20190e1acdbb513dc704140c4d07f187fb423788ed5140407a1b2e97ab92436f049fde7703195177103730c40cd52b2bf4ea7dff4dd48dd29f7b072c0ba7bdc73a51dd0afbdc3c37fc25b58a9b11654a6f0332fcf9e4654a853d07c56976efe886a11398cc2a97d2dcfb57634e613b23818bfa90c8150ca2543a3e2df359080", 0x8c}, {&(0x7f0000000480)="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", 0x1000}], 0x6, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x24, 0xa14}}], 0x18}}, {{&(0x7f0000001580)=@can={0x1d, r2}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001600)="4e31450d826771a9c9b1ccb47d901075ffc0b1c725f8c92ba33d7439fd5e43c75500bb6e471cc0f5fccac7bb8272d90f66b0aedf75eb5128b0de8e08cc08c8de3df62b878d07f6e3fa09f3882d62e3633131270a2e8583a8bfdc0fed1a0bc45b4e445837d23eaf93f3ff2e5b2d874e3e61ea96f68935ba9ff75a1ded13cf50ff608165c1fb520d3ad221db48a0243dd2a03a57589fafc9", 0x97}], 0x1, &(0x7f0000001700)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x42}}, @txtime={{0x18, 0x1, 0x3d, 0x9b}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000017c0)="b5efd30ac0bf1946929d8a6f6c8dd2354e33adc8cba7f75a616bebb1", 0x1c}, {&(0x7f0000001800)="cc116cf76bbd531524d28a1edfafbcaf27aeeb3d577d93baabbc70a3046a4dc9c6787817e798a2b628323a7109928d1ca5008a4a3f577c9f8c9687d6a8ea6bd43e223c090a40ffd9b5e8c58a9a495920f7e88e780c2a5f54e78bc2d61604ff99d0afe7c4db073457a74609df78e5fb314606f24daa19d30d135e98b15f27330384cf41daaffb774f93d1b041f0db0076fc065f7241ad3f04a2f9fd47d13b275821285634744abe531bbf85577c39841ce6c737418ecb335dcadffc27df71809c050e116e36f08e3828b713bb51abbb634df839beb809", 0xd6}], 0x2, &(0x7f0000001940)=[@mark={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000001980)="670624f9ea435eb29d2d31a03dac95b64f3b163b8f582fc8a5bf86d751810a29ed0b3698bdaa2cb428a0b076fedc8d64413d049cfb65daef42ed084e34d690e1dc41d50467b925607ffda8717aaaff88e8168e96763bf3d3adad6e9973d2e9c54e05f91da2baa57e7f11494691411bf0be50e6c737b8bb9b3722be17d1be447be68b5149b0f7d489f930ad7e8168fd1809e8899cc95010baac2d638b42bc06b3ff713fccd73f02d526982592464b2441961e42931088ce7a09ab5e734f0c6d102020232a56cba9dbd5d9072f2100664d60fbd7c64affba8f4b0467e6004af8696898fab8e1739fd837cd8b8c60605d56c76ec3cd", 0xf4}, {&(0x7f0000001a80)="13eaacd843b28c592455ae93ff6c2de526ea1115a93a7aa1fb59290277072416808de5ce55dd0f4cd00ea7dac50412bd9232d0fb788ec06b9f94bd54300a2a4df04d8fad319f0eb47fb77413e774d005d477bdf39d70bf787308dc81a44db7da3ffef7f7c427697e0948a830d52914c663403a7fa3e7a77fb291f6fc547f0ea556a44fe71658fd3987ae12660a9ac2d79b4af3d2e6c6bcfb9cf97a46fd05219bd9f447fa74f7fa7fe5b0ac9fb1ce03c1194c3949098bcd06450b7b11cb635e15aac0916c64b582552f8295f7f77cd61368c462cc555bde84793a7f740ab519a1c0dfd572d8df08c4415495537e0c53df32744635adedf398a2823ca60e177925fe006bd0105ba13b0c513ebe579e98fd9beeea23d54a12ff9bd194b335f86974b662116a37d291ae1545187c1d368d7c92ba1102b41d1450db9c4105a5a5013a9d04b26c0087a02fa28f23f57de81de59f9b09f3fb2ad9cd6c888125a1d4409c2ad651a76ddeeab4df792cd56ce8ab69786c2f973471bd20cd455fe3bf2e58dc6b22c612d125f2d06dbdc88fbafeabc3cef754c5e6f3e5617ac5b3af616f74b11988524106bd569dd8ddcf7eadb72b811ad69cb8741ef68268fb3f4216edc2d76fc6bad2bddb7592554a0498b48608dc95bc09d8fea6d173147f685c2eb038714a8b82799e13a05a6b058bc925028aa39bf08d53f440dd20cd2add311cce1c0d8b60d8d1786af3a79714c1087d4d194f4b9625fe175c7fe3d12a94d2cfe06d1206464d5e72e2b72220bcf4be0a00a244498f69418b3738de0f111cdec61df01cc79721f802ff157db97397fae61944da716a8f3ecc61e4f6f61053f0dd389331cf4c744da58884fe221a1b8091ceba66863bebfbe1e77fe50d097ba4dd91fe2bf75d3b857443be8d2e742025e8d1ebeb0f3c1e3ea1929191652a12f899e44c9c105da58665f4a76519efd99a2331744928d77bf0b2c635c9a6b55f73cc64916a7f12ce61dfdd9d00cb102b146b2bb32517a9465eb9655a27244b475917c22c5f81e5a41f30fcdf582226e673f6f087d4bc3d5d693f5a0f3c53e54c88cf469d6497e2eb014aeebfc2d17ac98f002090355ac4aae15d457039b212268d6bdc63c40fdc0389b399b2af6566218c4fa5f3d6d66913a3b95066315ca030ff7423a262231e02412094fb7932a4649beb1afc23910ecdcfe5f697b800f619a511603e42dadd3ba09a6e9cf04835cfaa8e75362e1fba6f4a97b88720cfb7ce5178fa4270c898a622cd7396952b268599da6a0e91e50860efa28994992a7079c5caea0b88efc2a81fc541c13320882090e0b7c9eb381a50a0b13ec213ed9a157a6f63ce9e1f7a7fe9ce9c7a1543d38bcc5b77ce0ad7afaa02d39cfe6a452af4ea42c4081f47ddbc1783ab36c8e5ecdb0157c386fa56d6aa8a12155e591ed5d548e26ba2a15c0f7f642696f8e81a2264f93ffac8b83b349b6020417127bd11bde07dc2f7fffc149667bcd2d7c684b7abda1374b9f98018b4022f840dc62fcdc3503d88173d6159e2b1b75aaad136e8695601ffc73e52b072f682feb5c9a410d5816a0827878369e04539d99d2eccc1ff96f22baf8ad9ffdb52fc1a516d1adc089e8afc883c746d18e12c4edaa7dcc476d8521a3f8c0032d9325a0551a5a648044cb6cb86d628070062efb8074e0cc16b60df0fc47df37f017580a938b7447478fec873e89937ad67f628353de52e091ba74829ca55da0b7560d14e82881ebf77685d5aa3c56812351e46912a2cdf6550dcbc2daf175b661c5eaa143d9bf3f7e474e5a3609658fc5d107fb97b7749f770f97a57b4cb78d7ff312a5c609e9d7a96305ed16547ca09957a3dbd413d38e925290b31e80ea9427350cd17f9fc12cc10c29d3fd33bde2437e5fe0edd2fed1541ba41c55cd47bbfc2220cc696feb78371389c9e635e203eb2bde541c086446da0d6a1fa3e814b2d4a3e8aaa134f41f34f6b7355f0be66dd898fecaec9b7d43c6857447ed25ea58810d232937f37470dc4eafcf57d62aa0274fac7557f84490be3f066b2ee18e4f6d6e6598770074426667dc01d529f5b2f209be41d9a80ed131e0773fea10853a6f8ffaeb0550c9cfc5b94a18b9a93ed812d42d367e3aeaea45852d26cec89cec802d7a8da2a549d582b1bc6c7b69fd90485e29f6b485d241387c52caf8f98b1a99c0e4f41cd68125e71df5c48f6d345f7c1cecea572a3712846f2a82ddc3df7740b68173b2786672cd368ed135030ec655af7fc03dfdee8edcd6886233a291189ae4afb5c68fc05c25d2325e366b8e3fa23e9b804afb1211c7cb13364569f93bc9ed2fe57697e98014e1d9998f93a96e295071062709707ecce62df2c4e70d71bdfb914fa75f885988da6df5bbc34b7883ac72cdd65b620b063c6eac333cf131df8f6f87c1f23941f8c4ef88e3a7281c43b10bff6b53dc944bd58a870a82c9e37821cb5358bb55df5b2a904fb3b16756c88254d895731d112d5adafe1179ac6c7b48848250d8af6b3f00f1d59421590ce2af290af29371508b90a2a8b45aa1edb7a068cd7238cd29d1150391448c64619a0c5438c27fb722d05ba09279ed1dfbb58921d512e9162e890a44d4cf244502c9351fa416806ebb8088f969d2bac9609c3040c399fd2d6cc62b30be6ba93256e992d0476d4b2f375bcd77bdaaedf90e32b4e4618a24c2bb74ddb8399ac21a82836dc903f94a167bd2b594e81a7a37d0933621f0a5e836417af6ba2b2672c950e00ddc7f22a620ec652ce6b3b3037f37aaa478ec3db1d3991e900654d22530ec5dade38b803639135f62d48360f86a0cc02c5bad246f73018af30ad982e0e0928c66ecb7fec60f2c64cf627d75ae19f853ebab9cdc19f3f95fdd1a22c44c29d3ac27bdec8a95795daa357c20c71260b67b4847900b66e5d7b857a287d2aa0d93f765e24265810a0f0a5854fda1d9c6c3e184f769998c4f8cdc2a746a4ba8b530dfe2cfa01ffdd35bb3a631039d6c10c52043b2c2595055f16d3cf574c3c05b11beb63705497c3e65e928e639b7f6c3cc27ce86fd1dfe6106454192071aef4d751b2faf4b9bb147471a9f6085fd6a495b4914e18b8c6fccd3b26186d9fb19409d8013066ffe94670317f358fdddc79b54459fc3a30ee2f256be978b1d2f414321764624b3d74fd39b6421c65bcedb50fac98d935a1379b65df528fc64271a66936d413272b6a4de3fe7a8f5cfc09052ae9e1db69417771f87f6c2c52e30b1169da4d6a971e84e150a25ce795d5fc57e09631baf7fdeb3e7721289ce5fc7ff3eb4678747a2f3e7fb21ad32dead0a9c9d75b5b2c94afdbb505539aaa818bf19208f46466d8cdcb6ad7cd7b71885d3e805307954652088bf69026ca58bd524e6790374595eb555cab0e1921fd5b9cf75be02b22773b93e16961f8afcba3ac61c585dc88c07497cd5214161f5e40be438db030e3d04b224a1efc0516f643fba326d029058b9080beb2b4d6cbbcb6984b489dcddd0d6905d2c013d2e58b1c4a7002e74f725e720ee2e1a4e142655260b184f75e66aa7aee8aa0b48792c5b611dd95de46882818c9429e599039a1116ee5efb09c98f31e86afce65936a1d41c4299f142bc7a9ce93a385374b4dd768821bfe8c1321db2e733bbe7239a2c135b7290a1dba746973fa617d736d4f71d2f5821fc0ee0c3346c0266e97624b81c618dfb3f19eca27ab8010cd7b5249c181db6c901846af1d339a6d0a00d59f1e9dcc20dcbb1582730efb5f21d1347d8c642f795ace45bbbe95a1c4ba269393497b853dd09a5789469d93a3825a077dfea6c048ce049e2bfe5a0d5bc51fd6bd6502fa49969aae5dddd14aff80da3769263019bcaf79d56532b125861ec887a52209f29efd6388304d6201c9b81fa56148269bb6adc56437e23052f4f346f9fa62d6005589d6aa585a643602ff125e7d9a258cb673496f95a0e0dfc510d97fa9a641c202efc7b1ccfff208cc1f00e5c8fafa1e3ddee46e2701dabcc2c8f121c3ffa95d964d16f0766c19a3707575b556077d226c39b6b693a90baa95c65cc6fd16b4449bec559402345eb00e0a6d12f1a87ed01e099cd379336823f2084ce77f9ca58cedd66b66b1473bb87bbdad5cbc34f49a240172ecd07a71fa39d743f9d06389e42265a046b935eed42176d5fac17d1a244f142bf6831df67948a9d5f4b1ff8a975350c3690404cc257833939b4746c3417a9d9e2ff4afe65d4090a6a48f26797f804ce7bf6a50880dd19437ea8501bf004e7e2886ff6ce1436b2ab0ce7104f488613c894d25ac79fda4080965583a211a8d05bab97aa37dae55ff042855c096c8b3879c4ffb25219f9179e6a53b5f3f8d0a9fbca5bf3604c4c8e0f2e570e5446a20252e56cc9a0fbc9e67aa3486155f5be18eac7c9bf15ba34325fc077b0c195ab84a803fdeac734e49ee5696680e8499334b88ee8820ba0d7f739dd72f336ca7703334637c47c60ca92a549abfe81fc18b79ea8c42dfba7776eef64f1df2eb1da442bbe6564375d277ad44926ba3580c03e353ad79fff61443b9d9207c8896f9d840b2f61e2e9e0647c4fc1fb632dbf6286c977286389e392f780832b9e513e41d35b220a303ab457e12c42431f455f2d94e91a27d00f24cc8f727cb340086fcd0e9d5b2cc9dff84c6c5312ecd17c53d5666dab54c7fbad5c3c4dec7ca5b356bb027b417974cee7c2e2f366d4e86d953782d5c0182ac4ba8be5a018cc74552dd8a6e28edf32138cd7de786532e9781fb17e5896638fcec04b0e561a4975d16b5e5b83904d6ff275ea255847aa2a099d0ce02ba15e0bf8c385e236e003ca9d18689fbfd55ed7b28872d7f5866d22a51aa8654a15c65560489d49a4c17996945b60ea16a60f95b832bedeca44d579a1558575bf84f9061ee0b98d47441a81fe7f3f8597855e1d8b0051fb0cccac8fa58b50375142b298652910f94ab7cbc5cbec9cc93d349b9c2f01af6dcd4c566ad7f37e58f22829b14fee51cc10b9587bad977577a954bd86bd413c39ef2e9484e25d511fcdf59d0c217482e9bbae22e57af198e19cfdfba19a43208565f260e8e9caf084e57a8c67daa2f0dd5d3c693c7055aa05fecc7510aba1c3cf644868d8745a05bb2f42859d465a3f72eb6f758231fe238a133ae12b2fa900db94abadfb878a3bb9f71b4a853ad7c5da77dda3b38694d576a51b63b025f1db244c8a95f7b36dc2645a0bc8bf140f1672064c94b179471cfb4aa6ef67413a2f07eced32df9c52745ba1d055154ffc651e9f3205971f5cda3d89bd7fc03b037f9ef6adc502db91b3f804801769be62f79bc88fcfd35a1c8e838d89073ef93fbbc632e6b64db1d4a42b620152974396709ed2cf1b752cb2379a07678c610e6759261547738dfc6dc5bab270f4ace8017cd9cbe6e71de48fd16c3f2fe876ec85f0c2bbb7114094ed885258b56175952d4aa1089190b2172bae5bb6ffaac72c32941d1f905bbe8badfa931026ac84357831364c178861484168a3164c1c559582b68295c830f1e6076491357802dcd87be55eb811515142328cb6fb7090196d0dcac9414cc60158be27bb46cd46386aa1d77b3d090efb259c14b4e3293ddc3bfbdd8ed749361cc13ac57591ae36be379c3875223653043aeaadf7ebff40479b3a21cd66495c0f341c3cf5eee7b97883c0e5a68efa78621b342163cd6357c9f2214aed2225a264edf271c8a943de778796795087ac8d4a9922cebac171971aca02653ad3a848cccaa237f72f006dab51b7f4a07a3fd9620d3be36d4", 0x1000}, {&(0x7f0000002a80)="fbd4a0c899678768c9934b722aef1c85d900d7f4b8a777cdd3d21b6c596e4518087449b17fd5efc68a595749083e0b0eaa57e0eb4d6781bf9460115a3e7cdad69d571b21054e09c7acea9513698a3483dda187c7230c8bdabe37ef8f18f31299d2ff8f14b4128fa3b1c42b7723187d87abc6ddb27f5ba894666f2b42677cbede1ea2e714bc3a5e173452b47340768c674366b7eb8ee4ccb681af4b4e8b082c956573867dd20c031ea9e6694a50336848b2f510499ab19fce2a40992e2114297ef6a5ee5322124f23bdfeda87b7f96127bc908934139b6e72bbc0afdbc7f88bb2fa1a6ae664dba7c1", 0xe8}, {&(0x7f0000002b80)="e709b2686e7172f11047cd94f6819a4dfb1a49ed098aed156eb5e3f42a4f3b123f7ed577a4ce2a4d5c519565bd0a927c834bbb630c18d5bc3b23230b53eb1d15d18c6e97b952707d36dd718d4192aed3f8c081041bf520e9423fc4a0618671bcbc814ec7a957b524b7e074bfe810aa0059066712a34c3daeb2829421942997bd141b6f0b6beca6aa9f9ecd1db0156baae6e71dc4f04bd507afac8416914e46185d44d2440236a1b64cd535c0729c4bdde6d8013ce5c06fcfe04812f4ea17f7f85fa50b35fa1c23c872fee8211841d2b2d8015a34ff188f", 0xd7}, {&(0x7f0000002c80)="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", 0x1000}], 0x5, &(0x7f0000003d00)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}], 0x4, 0x40)

[ 2074.047282] syz-executor.5: attempt to access beyond end of device
[ 2074.047282] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2074.049153] Buffer I/O error on dev loop5, logical block 10, lost async page write
03:28:40 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup(r1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x8, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r4, r3, 0x0, 0xfffffdef)

[ 2074.092862] syz-executor.2: attempt to access beyond end of device
[ 2074.092862] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2074.094477] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2074.133805] syz-executor.5: attempt to access beyond end of device
[ 2074.133805] loop5: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2074.135775] Buffer I/O error on dev loop5, logical block 10, lost async page write
[ 2074.164672] syz-executor.2: attempt to access beyond end of device
[ 2074.164672] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2074.166288] Buffer I/O error on dev loop2, logical block 10, lost async page write
[ 2074.239322] loop1: detected capacity change from 0 to 40
03:28:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002034f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xff, 0x6, &(0x7f0000000580)=[{&(0x7f0000000180)="c6f2ee1c9ff0bbafe167130d70af3c2626772c928d5b5ad9c2a8d5b92301cee30636e0c8907c20397dbcc00dd784aeed8d3fef52c7d2e66832dd0e", 0x3b, 0x100}, {&(0x7f0000000300)="0991527d28a06f648d7df70dd491946574202e40d6b0bcbb826d25e9334036b36384dd8f55017c30454e7f70c85024a46fc3fdc1163712ee4b3838b0080729ac55b9a1e11153f0bb610b3afd2a76cf6fbe6314283f38675d7103aeaaed3f291014338794330e6c8b33ba577f822b2f69fb2201c7d64e61d90bb7b98d993bce7eac19cf899565a8f86e3a4ab4523e15e4f7d125", 0x93, 0x1ff}, {&(0x7f00000003c0)="8a142d24f8c484a281932422bb902ae81fe8403fdf04e6dec5b3152ce0f5af6c08cc561b66e57e68f424ada8b24e3a29bd7af6134774f1d9f48d71fb486c23e9ebf5eb433da9c734ac010754f1b10606b3eeae066d3c97a72b945bc1544bfcb3ab2fab47fefe2aeafb701b325d", 0x6d, 0xe29}, {&(0x7f0000000440)="0f8c3ec9cd134e5076dddef8af3f8124c7278ffb538e37f0f815f0b758ebbd21feaaf3a3beb5df7485ea698f3a8a8ad0bb837a196f1856df44df3cfc7ee5d2dbf53fc0073976c6186790b9b5a9c15f4f0f2ef4b76957ea23760dde1dad86ad3b5685bfab0cb77808833bde4e28b9c8d773277f2a31f8a54c6c4cd2b1c713beac79cf07a024fa496b2bf190365f0e1c2f4c0c1fabc7abe06710b8139d7cb72f384881ebdcd41c4587c66abc9dfa3edbf492b51d1176a1bb7c92e751503ddce4926e2d1866782135bab6ba9a3ab74f9e26dd9dffb8e282c70bf3ae", 0xda, 0x10000}, {&(0x7f00000001c0)="3daa487d1ae2c771fb1de343dc", 0xd, 0xffffffff}, {&(0x7f0000000540)="b6e318698219eb5eabf12da2", 0xc, 0xffffffffffff4b3e}], 0x100c, &(0x7f0000000640)={[{@fat=@check_strict}], [{@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, '*'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure}]})
sendfile(r1, r0, 0x0, 0xfffffdef)
statfs(&(0x7f0000000240)='./file1\x00', 0x0)

[ 2074.333367] loop0: detected capacity change from 0 to 40
[ 2074.378801] syz-executor.0: attempt to access beyond end of device
[ 2074.378801] loop0: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2074.380457] Buffer I/O error on dev loop0, logical block 10, lost async page write

VM DIAGNOSIS:
03:33:41  Registers:
info registers vcpu 0
RAX=ffffffff84422320 RBX=ffffffff854328c0 RCX=ffffffff844039d2 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85407e20
R8 =0000000000000001 R9 =ffff88806ce34f03 R10=ffffed100d9c69e0 R11=0000000000000001
R12=fffffbfff0a86518 R13=ffffffff85d08ed0 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8442232f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe75a138f000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe75a138d000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f242cb26010 CR3=000000000ccbe000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=007502fe016c6c6f502e726567616e61
XMM02=00000000000000000000000000000000 XMM03=0000000a0000000a0000000400000000
XMM04=78650a0073746e696820636578650a00 XMM05=67206365786508007364656573206365
XMM06=73657220726f74756365786511006e65 XMM07=6169727420636578650b007374726174
XMM08=646e616320636578650e007a7a756620 XMM09=746e696820636578650a006574616469
XMM10=650800736465657320636578650a0073 XMM11=6f74756365786511006e656720636578
XMM12=636578650b0073747261747365722072 XMM13=696d20636578650d0065676169727420
XMM14=616d7320636578650a00657a696d696e XMM15=00006c61746f7420636578650a006873
info registers vcpu 1
RAX=ffffffff84422320 RBX=ffff888008e4d040 RCX=ffffffff844039d2 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff888008ebfe58
R8 =0000000000000001 R9 =ffff88806cf34f03 R10=ffffed100d9e69e0 R11=0000000000000001
R12=ffffed10011c9a08 R13=ffffffff85d08ed0 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff8442232f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe24bd0e8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe24bd0e6000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f8750b4628 CR3=000000000ccbe000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff4ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=0000000000000000415762dc00000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000