0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
openat(r0, &(0x7f0000000240)='./file1\x00', 0x0, 0x80)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:16:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000005e80)='./file0\x00', 0x101042, 0x1c4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
recvmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/74, 0x4a}, {&(0x7f00000000c0)=""/3, 0x3}], 0x5, &(0x7f0000001440)=""/154, 0x9a}, 0x401}, {{&(0x7f0000001500)=@hci, 0x80, &(0x7f0000003880)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/75, 0x4b}, {&(0x7f0000002600)=""/243, 0xf3}, {&(0x7f0000002700)=""/44, 0x2c}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/232, 0xe8}, {&(0x7f0000003840)=""/34, 0x22}], 0x7, &(0x7f0000003900)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000004980)=""/54, 0x36}, {&(0x7f00000049c0)=""/127, 0x7f}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/160, 0xa0}], 0x4}, 0x10001}, {{&(0x7f0000005b40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005bc0)=""/8, 0x8}], 0x1, &(0x7f0000005c40)=""/213, 0xd5}, 0x1}], 0x4, 0x12001, &(0x7f0000005e40)={0x77359400})

[ 1868.962182] loop3: detected capacity change from 0 to 40
[ 1868.976885] loop6: detected capacity change from 0 to 40
04:16:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 33)

04:16:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x80000000, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000240)="2b9c965a8e123b4b69c800366682c7eed439f4a6e4fbdba25f3ff307ee9fae0f486925d400fdd2f5f4c35db60eb2247e2411ad0aeb5e602b9d10d6e4e3d01952d12a195735469596bdf6e884a2b32f933ee0c95476196f370e6d91af58859b3c4787f17b487c6a239080ccbbf09eda75272ae9bcb8bc0fc37403986381b028854f8e5d9386508665fd76e4088f8c7d66de83241ed463cbf7198ea02938a70f9dcb2f413225090bee0a60dee19c9a74423359a2ce4f77963e5a528744bcb5745e37a8103ba3b192893e8a546f5eebda0dbf943be9cacdb70747a63a2d410e0cf723f1bb3b0b5f8a1b32f02983c534138dc6cc", 0xf2, 0x7f}, {&(0x7f00000000c0)="cd55f9651f14931a44a4f1ae1d3469a2842efb6a0528d6a65628884fb478e6487be3bf51be22b2d655d5ba6697563616adedc7a63ccfb73e6cacfa7333cd39", 0x3f, 0x12f2}, {&(0x7f0000000180)="5b229202785cc6ef3cd0daf830f5d8b8077a538ad404d48159f019d1896164aed5667428697192d811bbbbe156a7de91667feeba2d851a1d80d666ee4cd72ee6ab97eb3b466cfbada7422b7f84b0f7294e6f70a5efcc3b8798c31abc26e236693ba5bef706bbe89be9f70886bc3d63eaaa65", 0x72}, {&(0x7f0000000340)="453cc1d57f1be7858422be263608f8a955c91f0128ed165632f1f77583e3d967f31031106a666ef02b86cf8e12a902d735c0b72de595a3250321c929a842f16d84f37b65b8b248d5dbf14a8bfe4730c018e5972c99c6322205ace0763218f3749893abb6b0cec53669523d4f5481184649bd0bc7bd092dfa7caf8336add7ac720b3edcb86e70694eaf65c2dde069fe9a", 0x90, 0x20}, {&(0x7f0000000400)="dcd89e089001fc2ffb778f8b83ebf453e31b8b0a6a564947c452c63045608a77c6b31c715f3187200324062aa8dc645c74b118e394cc42fefa789b56c28c47d735fb112b4fccc7f9135599dbe63dbee52d668d746eefb72b01fa857a594fd973b42c88b6136d37253e90773886e054cdf6e6d9080c8dd3066c67ab9237d7f749f9255689b8b9212ea5587c94af3e9dbc2f68db7e127057ced293562e3ec939e8441470b8", 0xa4, 0xe4}], 0x1821072, &(0x7f0000000540)={[{@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@barrier}, {@jqfmt_vfsold}, {@bh}, {@resuid}, {@auto_da_alloc}, {@journal_checksum}, {@noinit_itable}, {@auto_da_alloc}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]})
openat(r1, &(0x7f0000000640)='./file0\x00', 0x208800, 0xd2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:16:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:16:54 executing program 3:
r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0x800)
io_uring_enter(r0, 0x100fa1, 0x3, 0x2, 0x0, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "57e266805bcc47eedb8e60d092742330d56dbf473f36616f29d646435be7982bbafe5a4931c81e59f19b1d23ac64305330e54e80523ccfaebe27a0db5b2d76124b90e57d6a7f24fafaf87091474cafa288d5337bc91305a80adf701bae92e8a36bff8da493ebb09d86202b51997ada73039ddddd71d7e21452470961c483d93720ed11018df6560bb975bbc8c18562bf60bc898f03a56b1f179c0d42334db09d93c7a616b8e69f5aa01ccc559d134ab215fe84a387506a9d3ee147f610fecf97b9cacb7880df6f0f301705948149bbaa8635ab05853e6696a0450c961686df5473258ec7ef21dda2f4113d62b81324f3b0d24b112fca24d5454aa2d6259f11d33ae182faddcd11495c40b4adb6289b9ec2577c1e4ea2bb0ffb94dbaa291c69fc0e23e58aaf3d14a43969cff4df9544de5581785351b6236be4364c762d3c6367b565b96d0e49aee79231a60f8986632adcc95e73cc31ad3aa43a93fb9c5717ec8f75c3861abead4d086c7a760700f18de6cc7fb08b8c7438babce88a9913512a48822044775d525a5861f3de465df7d9bbe568da05d1519875c2b932d7a9d18b5cfe9b98373d6c76201a98856b99508b9aca9a01c17b494e47f9e0b976e92bb12c7c30a0877e6cf80d69c491df7fec2a3669292392ff1c829462a43bb873a2b262da16edd3435166f81b067f0cc32b9ae3da3ed57c2665e9b090c2af32d938c95c9766fab230bf94da6a46a78502d2c528a10881320f301db472304e1fd10ac13fc94c1b6ea651151ff92164af6ac1db704c39a801f4a20101276c18e77c79dcbfd90d69defa696393c2946fc6ff0e9875f27bea5fb132c9ac3fc1af17dc0cba0d434aba40141f89c9050a266fc088ed594fbd03bd7b2dd6234eb0d65d9f2bab8c4116b078aae565d3d8df95efc967810f97037381470b1082f93d4e0bbd70426aa162d35a2acc4c90e653007f864b5a618f7a65ab3ce5775591364718543dbb8b276e2eed7219d06f724b7934505d2e4e0a5aa1786a92bf3f17cb8815b8b60c17476ab71ae80bd5f74f2b66c11b32026eeb6919933e626803055d3accbc60bf618af1f7bb1c8106057ce560c37d8c4dc7e03bed4a1ccdfd76216057a655998b8ff4198860a21f6135ba07b297db7b90f6ebced259d53cf25b2c9038eb8ebe3400ff1328c9de9696123e8a252b0b6f29ae0beb3c3402cfaeae3598ba0ed7d34879f7ed58b870fb8f0a60ed77d8b27ace118a61995dfb231a1ea4af3442d9bc96103ed96c41d120673ff343906ba17e812c049568679c15ca9c204f0dd153311de7c80511bc2f2e9e412808c7d56fe74c0cc9142f040864708624e1ef589772dbd025169423598aede4d0073d4709e124880ad7faba61aad38c57fde48d857ba6b16e4ed2ffcbc4eb2133f612e50c9172f2802270896b808198b082020f92a78f010a84a15600b483839b8bc8d41d48fa8afc8bb372046ac800e5365c4aee2eb8caf881c36bb714da663ab33fd6927fcff4b917ac887d24b3c4daf6c0253a8dde6a0cd8a115aa3c340d62ab9cfb1629a10f3ed4904f2fc74727d5eebcff63d5ccc115059d6df397aa18f4dd1ebce09cfbea82782068e98eb0023aaf0d48e273b9975ea5d03fae11431440095e9e03b42de34ae7da61e3d3218eac0b2a0ce47d3e5b3a6e7362d0ffa98d308f160de0eba60f63b364c3eff9dbdd02d820a3e129f48f5783544324922d75914a51afe184cc2a8d28d30f502fad3c94a764dc73b46e669ebb50a4a0c67eac6cececaef4078a3eb4e1d0190bdb46e45f8201cf564efc1355547c9a55b71167ebb101895bed081f7b6f2fde3c780a15b9e2a31c11d8d422f82a78258bd4d93b4b5f6baca71c7cc3249afa2dfe7654f231c2c9f78d9f97175f71319593531c03ef41b7dc583dfcc9d4266be078133f3a6a9c78595cd58b2b00368facd135ccc30d35b1398bb19dadfd0350ba3af10dcc784c8373556c2cef040ad9c3884ac36b0aed47e8c4726aa46530fea57ba06c6fa478f4ed5c37b42cf673b1b9f77ae56018d236367c0e2c494677a375327eaddf26eb9eede029659efdbc6bd4bf7e033ccb7ab0d21eb03b7ef1f0e050663fb0d225c58c2a6c78950b04fa69a530b76fa07f2512065af5e172fb0622ecba6a639efc79be3fdf11ef5343c69eff48a91d6eed265771b6a35bc528845985fec63d3548da0998fb36bd2e350f9388682a5cdb1cf72aadfe3560dff9f3e4d9cf5f61313830ecf0274eceeb12f69ac5f1e99788e843a8d589ff911839cffa9c1615ebcc85f1504a83e73e074e767d6c95fb97dac6337095a1576087b7b3a893179935b2fa697f9f68437b952fc06f07cf15584780b82215f32460e607b09356e73c0e9e61ca128276a2dc777d0746a9e2b0adcf1a41740b16fe47f30087c3e1803ea2bb4fd5d19a0b48d0414fe4e4970ddc97a2bc44a77e8adc13e7171d2554636f803decd8c39246d8479a24c12f8f61a953f0db836490df995bdff2df5b4d7852461cacaa31f78498501be16e69f2ec63f8942d12869f2b86215206a8898df824871f460dca399bab33b2497cc77d172c3bce809a8aea1cc8614b56081fe4b81667f18281d39d616c9cfe9a499884a04d0cce1e24dee0f8b28c82cde210a5a138cdf60bea12fe248512e66cb6694f54287cd67d877aab378c06ba777d54bae49f1150bd6a4f826d767959b22fd93468f1d48111651627bce407a03029ee6d7e24078a0a49b0afb58a3bbf57394626aa043ffddf19a66bbf726cb09de9e7bebd21eb186b929ad0e1a22a4729903494164c02b0f0000f5c4ca8f6cd459f9f1e881ba810ee3fb7fcebb7cc17f2f0e0ad9f27da8b2b33c08704b07cadcb2266ab2fce18f869cf71c1c893c65253a49853c85eb35fefe2e0ad06b0e2979384e49b7199421e7fcb0067c890251f0e727c480cfb60529af6e0e8e9d62924a22acd2dbcc7ff60940dc4f763b1d36645c0ae509c28b7e61695882e9343df9705bd3652ef04ec0847dc64bef2e705d0486be1594fbea6bb1d635bc9a1804b3b6ac63b6815915dc5b1871f76e2f5ba3cca0a06bde4407b2d47e7174eb8cd55734c9709a894ca220cb1fd563e758acf1997caefdf5716acefcdb21f39af46a3758f51d55c3b95d0c5ef30642a52fe7aba271a557cba54fcb24bdc273c284129e2fbd2244b2e4cfffd1a70a077a0c83e258db4a76e34e06228c81155aa214b9dd3c88547c8e9aec53c553db5362ae127fab511cc495cdd9d323adedb88bf0f87c7d9178519926a190234c07decf6d6f2317c771bf177093cff63264a8a43db773c3c34c7e0b88c394c2b5d8927c031704de5d2b92ed710b8dae4f89da491be91c645a00e26a2e2446391488c0cc7e45fc0056fb022b6e8981a1ace7b8f45143a0c78d2f9d97dd6deedc9e89cf674d53294b7324352945160de5f3b723b3e43401144eaeebed44b32fdaf1b8479bb54ccf0bce41baaf6a09840318fde4ef1020d9cfba7709018250cb7d9e0b144bfc22d0f2bf8a12a84b86b4e4c6adc9bb659b8f1387bd4391ccba5b91c9b5f95b2a29adc12d4078c3c02cd106330985c5ba8686f4f7b2225923b6a6d7178c10a355d0bf50c0eabf1cc29aca555fca875a99692c5e39ccf896a48f509c5d4aebc2aea57b1570dab9c66941b0a02431dca94eca337d01b96a30c20192a3e1b2235410ff3692c1de1660793186480ebe58dd73ddf3b704c7de9fcef0922aa56b966385710e56adef3d6855541334671f692bca97bf245ea0a21bbf80717e51b36441f6a33497ef51b05d5dd2978e4a9d086cc9ef9d5be8460001a93b2f4eb2433d5ed12a985d2f23a8ae78b324893374a18bc9aebd2adf2370baee3a9e01d954ed136f6d25508dc00bf4ebfe02a1a34aa53c40bfd97d56760b6bbe27d1cd66be1be91719583fc3e39b97a97f9eda033e917630815e6731b7d9c575f0f7f0eba6f0ee72bc1ff3a3e5b793b3f2a382091b27051d8d29a47e26ae7869def9bd6b927fb732350b9df38198add66fa40e6ec11d7fd54cc52847b59d9e86592357aa2bbbe92d31230ec7789ca846f48e13b94c64481dfe3bbef74e5cb14cdcf6da236220f6fff37944d3c95dac69a22430085de7975bf1fe9fcf0f885419e5776f4c35dec69afdaf76a60dc822bf7f76a3e30a5791f97a6707d45d5d3920e2a54d66dd091b83decdfa877b33710d36e97ed89c8c4937fd8ef26e019dc6d2beec390204411fc1b5bf1415d14edf346fdc4af992593e570024a2802b67d962caca912b72b1e28f79fb5c919baf5081cc0dd5848a72002d183da6debfd0d04ac95a90925aca46b30f8d1cb8fc6743defa0400eec086110f5c8bca7aace739e48f60419d1d572327ee8fe93e80cef9ff2ec3b06b255de552c158935b4723556831f16db4582c4799730df278c0896dcb676f56612ff1766fb4261ac0f9d1c06efddba5afc9efca18dd4f0c99b66b2f5c172256a4babcba601c51b311cc50022bba3e717af410964cd7176f7a78c5e1a5da95aba128ef2d90ce6aa130104e9a2442236866166e7891301d38d5eacdc67aa72aa40bcfba8cf97795c2b2660b02719f519eda7ef001ca46442ce19b79e32af5f343587b301ba770da0dc4c7fd0e6fb5ee3dfe5dd44fd18b9813f43078b5bbfa59153e33df7bd21cd5d3a2919d589ba11ac018b1e9532ac5655cda776e49937f428e1533d683f5702a5c4029a7457e6cfbdd65dbe3f57e34bd199a76a1d327f721139c324997d3015be66f39fc8d21d0fc2a7e871e64febaf12c76f6eeccd4f70c049c55ce5cd8e7ea4faa5285ff5eb3584b0d620e74327fb7c9f0888d85b3127fd4b0c6defd473281cd33482ec4fe45d48df92471feff7bba5534aa7a3661cfc89d429863e5d3120f6f1508175c3ad9223fc75d020c5eb3dd3229dcc8859eb265eca4ca5e8c76dcef048722ac1a9361814e162cc6aa8062cc699c100274a4a5cf69ecb2165c03b8e6032c69ff93d892554f892731cb0946f7801b8ceaac8dd659c13855efddca48836c615179a9a85137bfe2475f635a90175d5ed612aa8f751fe35ca50b2140a9b7d36e784e40f88fa8549256439849b494403d9ef8ebb54ab7f57fbf0a3af5a2e73d350250049df2985c864e24d901ce5dfd820e8a7e593fa670b4f0873b8d2c61dfec47c739862f879e5f66ac815c55f4933c119654e952c4471b93731dc0be4a2276e7c2720523541ce207fa06ebd72bb04e02422df3b1f63fb35709c4b0480f059c67ffd268632d8ce57eeffd68e104782f9e65e2b3aa3f836fc8c371c084ce9e2bfb9d27836a6815a694846759c5d988bae251f821c5c835f8c2e726c6d225de35fc122e3ee3274a5e0d5853232b18508bf24ba56e6e3df6686844d28963f"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080))
sendfile(r3, r2, 0x0, 0xfffffdef)

04:16:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x101040, 0x0)
getgroups(0x1, &(0x7f0000000280)=[<r3=>0xffffffffffffffff])
statx(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x800, 0x80, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setxattr$system_posix_acl(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x5, 0xffffffffffffffff}], {0x4, 0x1}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0x6}, {0x8, 0x4, r3}, {0x8, 0x4, r4}], {}, {0x20, 0x5}}, 0x54, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff, {0x140}}, './file1\x00'})
sendfile(r2, r6, &(0x7f00000000c0)=0x1, 0x16f)
write(r5, &(0x7f0000000080)="01", 0x292e9)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r7, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {r7}}, './file0\x00'})
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

04:16:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\n', 0x292e9)

04:16:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 31)

04:16:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
accept4$unix(r2, &(0x7f0000000b00), &(0x7f0000000b80)=0x6e, 0x40800)
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r1, @in_args={0x2}}, './file1\x00'})
r4 = accept$inet6(r0, &(0x7f0000000340), &(0x7f0000000380)=0x1c)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01000000010000001800000041d81f8fc734330d3a46f481c66be21394198a4d3737977665ef41b00e07c859a1a287b42922d172bdbf441f4cde928f47058583998ad8cf5c323c2e", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00'])
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000240)={0x7f, 0x101, 0x1, 0x0, 0x3, "96cf3bc549565662"})

[ 1884.152537] loop0: detected capacity change from 0 to 40
[ 1884.154903] loop1: detected capacity change from 0 to 40
[ 1884.179720] loop2: detected capacity change from 0 to 40
[ 1884.196509] FAULT_INJECTION: forcing a failure.
[ 1884.196509] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1884.197920] CPU: 0 PID: 10983 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1884.198465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1884.199007] Call Trace:
[ 1884.199188]  <TASK>
[ 1884.199350]  dump_stack_lvl+0x8f/0xb7
[ 1884.199642]  should_fail_ex.cold+0x5/0xa
[ 1884.199941]  prepare_alloc_pages+0x178/0x500
[ 1884.200264]  __alloc_pages+0x149/0x510
[ 1884.200547]  ? __pfx___alloc_pages+0x10/0x10
[ 1884.200864]  ? __pfx___lock_acquire+0x10/0x10
[ 1884.201186]  ? __pfx_lock_release+0x10/0x10
[ 1884.201504]  alloc_pages+0x1a0/0x260
[ 1884.201778]  filemap_alloc_folio+0x363/0x400
[ 1884.202090]  ? __filemap_get_folio+0x253/0xcd0
[ 1884.202421]  ? __pfx_lock_release+0x10/0x10
[ 1884.202734]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1884.203082]  ? xas_load+0x6a/0x140
[ 1884.203345]  __filemap_get_folio+0x32b/0xcd0
[ 1884.203670]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1884.204028]  ? lock_is_held_type+0xdb/0x130
[ 1884.204346]  pagecache_get_page+0x2e/0x130
[ 1884.204649]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.204965]  block_write_begin+0x35/0x450
[ 1884.205293]  cont_write_begin+0x4fe/0x700
[ 1884.205602]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.205916]  ? __pfx_cont_write_begin+0x10/0x10
[ 1884.206245]  ? fault_in_readable+0x147/0x250
[ 1884.206560]  ? __pfx_fault_in_readable+0x10/0x10
[ 1884.206901]  fat_write_begin+0x89/0x180
[ 1884.207177]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.207492]  generic_perform_write+0x25a/0x580
[ 1884.207825]  ? __pfx_generic_perform_write+0x10/0x10
[ 1884.208191]  ? __pfx_fat_update_time+0x10/0x10
[ 1884.208530]  ? __pfx_file_update_time+0x10/0x10
[ 1884.208867]  ? generic_write_checks+0x2c0/0x400
[ 1884.209202]  __generic_file_write_iter+0x308/0x4b0
[ 1884.209573]  ? trace_lock_acquire+0x16c/0x1c0
[ 1884.209916]  generic_file_write_iter+0xe7/0x350
[ 1884.210266]  vfs_write+0x9c7/0xdd0
[ 1884.210541]  ? __pfx_vfs_write+0x10/0x10
[ 1884.210836]  ? __pfx___fget_files+0x10/0x10
[ 1884.211165]  ? __fget_files+0x270/0x480
[ 1884.211478]  ksys_write+0x12b/0x260
[ 1884.211753]  ? __pfx_ksys_write+0x10/0x10
[ 1884.212058]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1884.212419]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1884.212813]  do_syscall_64+0x3f/0x90
[ 1884.213094]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1884.213497] RIP: 0033:0x7f57ba4dfb19
[ 1884.213769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1884.215034] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1884.215577] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1884.216082] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1884.216579] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1884.217086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1884.217614] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 1884.218140]  </TASK>
[ 1884.220443] loop6: detected capacity change from 0 to 40
[ 1884.220876] loop4: detected capacity change from 0 to 40
[ 1884.224541] loop3: detected capacity change from 0 to 40
[ 1884.232557] bio_check_eod: 9 callbacks suppressed
[ 1884.232569] syz-executor.0: attempt to access beyond end of device
[ 1884.232569] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1884.234120] buffer_io_error: 6 callbacks suppressed
[ 1884.234130] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 1884.262744] syz-executor.6: attempt to access beyond end of device
[ 1884.262744] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1884.263611] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1884.267468] syz-executor.2: attempt to access beyond end of device
[ 1884.267468] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1884.268865] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1884.283505] syz-executor.6: attempt to access beyond end of device
[ 1884.283505] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
04:16:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
io_submit(0x0, 0x3, &(0x7f0000000bc0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="167e486747d108a9bc5f4faa0dfdb9636242b758117a6d450f10b5ff3e7edc4c56281fffee40aa3ac8578a655b87349f12ba716c18895d607b6661c489bb974e2d58c971c793425c11c1cac163bb4a1e41c7f105394fc738ea0cfff5a065b27664588b7a871140e7acdc5f69ea498c7596e17c37ee9e5048e261b88fe6fdf8cdac8b59be7f80f54d95af423cb6648a05bcdff291ff776826ef45a92dbe27c28b2d92c95991737104aa49b74a44eca8aeb02c91807c9bd0a49aa4", 0xba, 0x2, 0x0, 0x2, r1}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x8, 0x6, r3, &(0x7f00000003c0)='\\', 0x1, 0xffffffff, 0x0, 0x1, r4}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x6, 0x3ff, r2, &(0x7f0000000b40)="ddf91ea068def11f831c67c9714d176cc10bcd7c7dfba4c5dec73941", 0x1c, 0x7fff, 0x0, 0x2}])
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:16:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 32)

[ 1884.314212] syz-executor.6: attempt to access beyond end of device
[ 1884.314212] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1884.315086] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:16:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1884.361548] syz-executor.4: attempt to access beyond end of device
[ 1884.361548] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1884.364124] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:16:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="086a77281b05ffc621cefccaca5e27d8c3efbb6273d7a250982aaddd4cb1449e162cf26dafc91eafdad9ae58d71a8c9ca1f2434b7194edb81170016b61f6c8dfd0fd8b5bea292eb64d9c1e9d1a8e2429f206943756c9ed5f4288236cf4268c633af4b83ed979e36fe2843f9152375ffb4cad290974befead0d611f351706aa34728af9758c987a6ff8df4bcf585334481afabc2d5c4ab50415215b9d9604d421a2728ecc391b8d"])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x188, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x31)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendfile(r0, r3, 0x0, 0x79)

[ 1884.384553] loop0: detected capacity change from 0 to 40
04:16:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 34)

[ 1884.431881] loop2: detected capacity change from 0 to 40
[ 1884.451938] FAULT_INJECTION: forcing a failure.
[ 1884.451938] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1884.453109] CPU: 0 PID: 11003 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1884.453676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1884.454226] Call Trace:
[ 1884.454405]  <TASK>
[ 1884.454571]  dump_stack_lvl+0x8f/0xb7
[ 1884.454863]  should_fail_ex.cold+0x5/0xa
[ 1884.455164]  copyin+0x19/0x120
[ 1884.455403]  copy_page_from_iter_atomic+0x276/0x12a0
[ 1884.455756]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.456071]  ? __pfx_cont_write_begin+0x10/0x10
[ 1884.456401]  ? fault_in_readable+0x147/0x250
[ 1884.456717]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 1884.457100]  ? __pfx_fault_in_readable+0x10/0x10
[ 1884.457448]  ? fat_write_begin+0x95/0x180
[ 1884.457739]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.458059]  generic_perform_write+0x2cf/0x580
[ 1884.458389]  ? __pfx_generic_perform_write+0x10/0x10
[ 1884.458739]  ? __pfx_fat_update_time+0x10/0x10
[ 1884.459067]  ? __pfx_file_update_time+0x10/0x10
[ 1884.459394]  ? generic_write_checks+0x2c0/0x400
[ 1884.459727]  __generic_file_write_iter+0x308/0x4b0
[ 1884.460065]  ? trace_lock_acquire+0x16c/0x1c0
[ 1884.460501]  generic_file_write_iter+0xe7/0x350
[ 1884.460879]  vfs_write+0x9c7/0xdd0
[ 1884.461134]  ? __pfx_vfs_write+0x10/0x10
[ 1884.461423]  ? __pfx___fget_files+0x10/0x10
[ 1884.461733]  ? __fget_files+0x270/0x480
[ 1884.462027]  ksys_write+0x12b/0x260
[ 1884.462282]  ? __pfx_ksys_write+0x10/0x10
[ 1884.462566]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1884.462927]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1884.463291]  do_syscall_64+0x3f/0x90
[ 1884.463556]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1884.463918] RIP: 0033:0x7fe4f88bdb19
[ 1884.464175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1884.465361] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1884.465880] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1884.466356] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1884.466831] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1884.467307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1884.467397] syz-executor.3: attempt to access beyond end of device
[ 1884.467397] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1884.467777] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1884.467809]  </TASK>
[ 1884.473168] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1884.480187] loop6: detected capacity change from 0 to 40
[ 1884.489884] FAT-fs (loop6): Unrecognized mount option "jw(ÿÆ!ÎüÊÊ^'ØÃï»bs×¢P˜*­ÝL±Dž" or missing value
[ 1884.507835] loop1: detected capacity change from 0 to 40
04:16:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\v', 0x292e9)

04:16:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x80)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 1884.573090] loop6: detected capacity change from 0 to 40
[ 1884.580953] syz-executor.0: attempt to access beyond end of device
[ 1884.580953] loop0: rw=2049, sector=76, nr_sectors = 48 limit=40
[ 1884.584710] FAT-fs (loop6): Unrecognized mount option "jw(ÿÆ!ÎüÊÊ^'ØÃï»bs×¢P˜*­ÝL±Dž" or missing value
[ 1884.591528] syz-executor.0: attempt to access beyond end of device
[ 1884.591528] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1884.592788] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 1884.600023] syz-executor.0: attempt to access beyond end of device
[ 1884.600023] loop0: rw=2049, sector=68, nr_sectors = 8 limit=40
[ 1884.610333] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:16:54 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
syz_io_uring_setup(0x4d90, &(0x7f0000000180)={0x0, 0xfdd, 0x4, 0x2, 0x248, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000240))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1884.630239] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1884.655984] loop4: detected capacity change from 0 to 40
04:16:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 33)

04:16:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 35)

[ 1884.777277] loop3: detected capacity change from 0 to 40
[ 1884.840541] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1884.882945] loop0: detected capacity change from 0 to 40
[ 1884.884369] loop1: detected capacity change from 0 to 40
[ 1884.947134] FAULT_INJECTION: forcing a failure.
[ 1884.947134] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1884.948982] CPU: 1 PID: 11031 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1884.950023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1884.951048] Call Trace:
[ 1884.951411]  <TASK>
[ 1884.951711]  dump_stack_lvl+0x8f/0xb7
[ 1884.952217]  should_fail_ex.cold+0x5/0xa
[ 1884.952756]  prepare_alloc_pages+0x178/0x500
[ 1884.953372]  __alloc_pages+0x149/0x510
[ 1884.953887]  ? __pfx___alloc_pages+0x10/0x10
[ 1884.954459]  ? __pfx___lock_acquire+0x10/0x10
[ 1884.955055]  ? __pfx_lock_release+0x10/0x10
[ 1884.955644]  alloc_pages+0x1a0/0x260
[ 1884.956140]  filemap_alloc_folio+0x363/0x400
[ 1884.956703]  ? __filemap_get_folio+0x253/0xcd0
[ 1884.957310]  ? __pfx_lock_release+0x10/0x10
[ 1884.957921]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1884.958580]  ? xas_load+0x6a/0x140
[ 1884.959095]  __filemap_get_folio+0x32b/0xcd0
[ 1884.959741]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1884.960452]  ? lock_is_held_type+0xdb/0x130
[ 1884.961075]  pagecache_get_page+0x2e/0x130
[ 1884.961679]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.962252]  block_write_begin+0x35/0x450
[ 1884.962859]  cont_write_begin+0x4fe/0x700
[ 1884.963477]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.964099]  ? __pfx_cont_write_begin+0x10/0x10
[ 1884.964752]  ? fault_in_readable+0x147/0x250
[ 1884.965416]  ? __pfx_fault_in_readable+0x10/0x10
[ 1884.966097]  fat_write_begin+0x89/0x180
[ 1884.966679]  ? __pfx_fat_get_block+0x10/0x10
[ 1884.967314]  generic_perform_write+0x25a/0x580
[ 1884.967993]  ? __pfx_generic_perform_write+0x10/0x10
[ 1884.968687]  ? __pfx_fat_update_time+0x10/0x10
[ 1884.969347]  ? __pfx_file_update_time+0x10/0x10
[ 1884.970006]  ? generic_write_checks+0x2c0/0x400
[ 1884.970693]  __generic_file_write_iter+0x308/0x4b0
[ 1884.971383]  ? trace_lock_acquire+0x16c/0x1c0
[ 1884.972023]  generic_file_write_iter+0xe7/0x350
[ 1884.972676]  vfs_write+0x9c7/0xdd0
[ 1884.973189]  ? __pfx_vfs_write+0x10/0x10
[ 1884.973787]  ? __pfx___fget_files+0x10/0x10
[ 1884.974405]  ? __fget_files+0x270/0x480
[ 1884.974958]  ksys_write+0x12b/0x260
[ 1884.975487]  ? __pfx_ksys_write+0x10/0x10
[ 1884.976070]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1884.976792]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1884.977528]  do_syscall_64+0x3f/0x90
[ 1884.978078]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1884.978823] RIP: 0033:0x7fe4f88bdb19
[ 1884.979331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1884.981751] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1884.982762] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1884.983703] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1884.984625] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1884.985572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1884.986496] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1884.987476]  </TASK>
04:17:11 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0xfffffffffffffffe}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f00000013c0)=ANY=[@ANYBLOB="bbd073708617ea958484bf6be280af79a5e4327429ca5dda04a9da37c2a54f2031f343a674b087ed4c5e7161871ca62714b68532bfb5e1b957ed0c108edc6a625d9d6f86256bf30f3f141e5adf088a931dc925ff64a6e36a6270b30039cf7ae0b2751e3ab9c3df8ebd176bf8a8dc029e5c466e8c0c3babef73bfea3c1024568d79a568921b66650af1a3a1", @ANYBLOB="6dc138fec0834d00dfb7eb7c57af9b9b6dbaee0feef3435bbd1246e14bad9398a7e30ceddb17fdf9e17b263d3c674982a7e7dc7a3055e8019775675a2dcf7eb24400f9aad8840b5b52cd277ba070b25c6294e2562b5e00e876d5ee436a0acde57854ee447525b41e056cfefa19592b40a9d74f50f3f128d91a71f86301391b5ad06d30627122c6aef7c02a82573542ac4e33e2cbb55fb331b04363aa2b4cac5b99812d604b608734b72a1f6bb3eff41982d1b12be255aaa70d30d4d0e91143b7d6b9f980355216b4bf7a2f1f251bb3100e", @ANYRES64])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESOCT=r1, @ANYRES16=r2], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
sendfile(r3, r1, 0x0, 0xfffffdef)

04:17:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 34)

04:17:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 36)

04:17:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:17:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000000)="a44f9537dec8ef51e4b7a872bee5bc9d57aec15fa494cd5164017e4ed6e2fdb4371d5172592e55d03efa0e3d1c41299db64de88eea5fa2829e804c552ea8059f06221c510fa637e7253864949521f1982009", 0x52}], 0x2, 0x5, 0x401)

04:17:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\f', 0x292e9)

04:17:11 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x400c000)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x18e)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x10a)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r5, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x3, 0x0, 0x80, 0x0, 0x0, 0x1000, 0x4228, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x2}, 0x2000, 0x4, 0xb, 0x4, 0x118, 0x7, 0xc, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x2000000000b, r2, 0xb)

[ 1901.791321] loop1: detected capacity change from 0 to 40
04:17:11 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000240)=0x935, 0xffffffffffffffff, 0x0, 0x1, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
r3 = gettid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x73, 0x0, 0xc4, 0x0, 0xd21d, 0x1180, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3a, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0x28, 0xf1, 0x1, 0x1, 0x1, 0xe, 0x1cc, 0x0, 0x5, 0x0, 0x8}, r3, 0xf, r2, 0x9)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
syz_open_procfs(r3, &(0x7f00000003c0)='net/packet\x00')
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 1901.811771] loop4: detected capacity change from 0 to 40
[ 1901.825265] loop6: detected capacity change from 0 to 40
[ 1901.858165] bio_check_eod: 5 callbacks suppressed
[ 1901.858199] syz-executor.4: attempt to access beyond end of device
[ 1901.858199] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1901.859943] buffer_io_error: 2 callbacks suppressed
[ 1901.859953] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1901.867473] FAULT_INJECTION: forcing a failure.
[ 1901.867473] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1901.868018] loop2: detected capacity change from 0 to 40
[ 1901.868602] CPU: 0 PID: 11050 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1901.869702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1901.870255] Call Trace:
[ 1901.870437]  <TASK>
[ 1901.870602]  dump_stack_lvl+0x8f/0xb7
[ 1901.870886]  should_fail_ex.cold+0x5/0xa
[ 1901.871181]  copyin+0x19/0x120
[ 1901.871419]  copy_page_from_iter_atomic+0x276/0x12a0
[ 1901.871774]  ? __pfx_fat_get_block+0x10/0x10
[ 1901.872090]  ? __pfx_cont_write_begin+0x10/0x10
[ 1901.872422]  ? fault_in_readable+0x147/0x250
[ 1901.872741]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 1901.873123]  ? __pfx_fault_in_readable+0x10/0x10
[ 1901.873463]  ? fat_write_begin+0x95/0x180
[ 1901.873769]  ? __pfx_fat_get_block+0x10/0x10
[ 1901.874083]  generic_perform_write+0x2cf/0x580
[ 1901.874415]  ? __pfx_generic_perform_write+0x10/0x10
[ 1901.874776]  ? __pfx_fat_update_time+0x10/0x10
[ 1901.875102]  ? __pfx_file_update_time+0x10/0x10
[ 1901.875425]  ? generic_write_checks+0x2c0/0x400
[ 1901.875760]  __generic_file_write_iter+0x308/0x4b0
[ 1901.876101]  ? trace_lock_acquire+0x16c/0x1c0
[ 1901.876427]  generic_file_write_iter+0xe7/0x350
[ 1901.876766]  vfs_write+0x9c7/0xdd0
[ 1901.877022]  ? __pfx_vfs_write+0x10/0x10
[ 1901.877321]  ? __pfx___fget_files+0x10/0x10
[ 1901.877639]  ? __fget_files+0x270/0x480
[ 1901.877960]  ksys_write+0x12b/0x260
[ 1901.878223]  ? __pfx_ksys_write+0x10/0x10
[ 1901.878531]  ? syscall_enter_from_user_mode+0x2b/0x50
[ 1901.878897]  do_syscall_64+0x3f/0x90
[ 1901.879212]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1901.879575] RIP: 0033:0x7f57ba4dfb19
[ 1901.879852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1901.881036] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1901.881590] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1901.882101] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1901.882609] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1901.883120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1901.883622] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 1901.884158]  </TASK>
[ 1901.885829] loop0: detected capacity change from 0 to 40
[ 1901.893029] syz-executor.6: attempt to access beyond end of device
[ 1901.893029] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1901.894778] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1901.921468] syz-executor.6: attempt to access beyond end of device
[ 1901.921468] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 1901.947740] syz-executor.6: attempt to access beyond end of device
[ 1901.947740] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1901.949497] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:17:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\r', 0x292e9)

[ 1901.998495] syz-executor.0: attempt to access beyond end of device
[ 1901.998495] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1901.999962] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 1902.031264] syz-executor.2: attempt to access beyond end of device
[ 1902.031264] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1902.032543] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1902.063426] syz-executor.1: attempt to access beyond end of device
[ 1902.063426] loop1: rw=2049, sector=84, nr_sectors = 40 limit=40
[ 1902.065380] syz-executor.1: attempt to access beyond end of device
[ 1902.065380] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1902.066563] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:17:12 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
sendfile(r0, r2, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}, {@cachetag}, {@cachetag={'cachetag', 0x3d, '&\'}'}}, {@posixacl}, {@access_client}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '}'}}, {@dont_hash}, {@dont_appraise}]}})

[ 1902.094464] syz-executor.1: attempt to access beyond end of device
[ 1902.094464] loop1: rw=2049, sector=76, nr_sectors = 8 limit=40
[ 1902.123899] loop4: detected capacity change from 0 to 40
04:17:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1902.150695] loop6: detected capacity change from 0 to 40
[ 1902.176397] loop2: detected capacity change from 0 to 40
[ 1902.210215] syz-executor.4: attempt to access beyond end of device
[ 1902.210215] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1902.212428] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1902.214730] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1902.221271] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1902.226387] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1902.238336] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 1902.300036] loop3: detected capacity change from 0 to 32640
[ 1902.302499] FAT-fs (loop3): Unrecognized mount option "»Ðsp†ê•„„¿k y¥ä2t)Ê]Ú©Ú7Â¥O 1óC¦t°‡íL^qa‡¦'¶…2¿µá¹WíŽÜjb]�o†%kó?Zߊ“É%ÿd¦ãjbp³" or missing value
04:17:27 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0xed, 0x7, 0x1})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=<r3=>0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x10800, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f0000000340)={r5, r2})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:17:27 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
creat(&(0x7f00000000c0)='./file2\x00', 0x44)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

04:17:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r4})
sendfile(r0, r2, 0x0, 0xfffffdef)

04:17:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 37)

04:17:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:17:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="0e", 0x292e9)

[ 1917.363896] loop2: detected capacity change from 0 to 40
04:17:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 35)

[ 1917.367646] loop4: detected capacity change from 0 to 40
[ 1917.379743] loop6: detected capacity change from 0 to 40
04:17:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = accept4(r0, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x80, 0x80000)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
pwrite64(r1, &(0x7f00000004c0)="7dcd65933eeb9a812307a3d689074bd0053cbdf05d916f6d38a1dce1073d6c4c30fbae4ed409c29e9921b5d6bbda946f8f1ca5c7bb9d96b6e12ceb96ce564a2fea7292ce010a152b545322023b3f821c954dc002788f80d528ffe4a0a46bba5173e9b4499a5077c29f7add76d22bb24338766d85d705bc566894f93e2c17359cdf38917cbec68992bddcb3039129043129130b692086cd2e5716249e406decd40ffc212358f3a3500ea740540024f7f6b0f2eb98701f29cee3bd401416168e67f3178e26e5193a826ba96ba8d15113e965e2a4c2389fee7cae134a0a5edcb54f9d0d36ee9f67c3a9d9d34ccc4513d5f50786c468a94eb6e2b2c9a769edcf26e2711bd18ad5ea63a08ea82f80c6a20bef845a87ae55892b12245d41e1de67b1f3a9c0c0f08fd06c1ba031f5a7397618b9b4c1fc8bfe03e21212ab5c9d8712f78194cf109a6c9a8cf48eaa592f3964951a0a961445eb8fe033f482b52b8d7258db0c02aece7219082585b8c114ee1d734d466d030ac411abcc348c499a2dba681f723d916506910eb37a26ca6dda7e513b71edf25f0d83893fd601dcd3f545262ad4d69a60f48c4cc8443473b5b4d4953ccfe30ea3e4234986498974b4319e38041bbc5ab969e7c7deca77bf540f308e66983742f69a4598cf38e5cb2813bb0aa0acaa825840285c4078a4c9a1a796889bae7ae9e2ab102611666b978b0c82845571fb80f55e6dd888fcae85cbc8c5ee3b25390689b68e44dcb8693b6a8033460f31014bd8dcd130ad199311864eefd642c539df0467822cef91ea5757539137ad7509963a10e81f6181a96a9828068ec798ff67d5f239f11512a2d190831b4713e7702952308510043b97593e33d8435e18c9f20b60e28740c7629ac9515b69a349f4bbd81387b045edea620574c229f83c18044d029d47f0e066bc98c325ae3cad04bcf46a22afdd93f80317127762bb7794d813ef746274c729d417206f250825832ca9f35ce5e800260047e0e3e1717b894131bf253d3072c3b6ec6c45cd6d9f29b301bd24d856abebe95c5218ec33b3b814a3df0e57b4579d430a0f946a9798cf9e41d64f6134b8a7c098b0037834485d94f014883cbb463cc39ce2562ce253b460eca2f010b08623110cbc941dacf1d5c48478cb4ddfc1639e6f63033f734ffc277f6c2b2b05c2deb79d6b29873f343a714088c7cad22a291357684fe800e26a893cc055d97fbe412298328f0bcc6d6e1e7fdb5b9835627c7937a6e4cbed1ed8ba82dbccfd2872bc09d43f6a151e654580badbf69ac2f14a87e9186c44bec74cb270e78f91d69b3995f6fd593fb9d2c249a7834b56a460482390896a526ebe25634b2df79ae82d893dc33494bc6b76298ef0ba9e281a744ac02d02480354af0cef48c2ced8b7563d31916abd813e5b9289c1844664ae5787bedea27842c0094e19082f2bd69be8ca52f8dea5d0397ba67283651fd5aabd2d5bf136e90894f0a217fdd8dc6606330591d2cd71bdc51995aafb323bbf4895514c25c8c634ca56742e05add50cc6848a054505eb9eedee39ded38f923c92715a69c320ef7ef93bb42fd0ad614fc681b0f5db1c578b0d3ae9f33fcb053291e9f9aca3cb789e3ccdb947fb500c09b1c97303c7277c269126fedd210407bb8f13ca145d6677188a27fb8090a2fb581c6b5be3afefa633ddbd2f21a5aad9a5a4796cc91911456c2629fb14792d9450913bba875669ccc96a37b031c32db438614ac7528e1e9e3805603201a1786ae41504d74f35f02c413f6cb35af2e50abfb81e12d6f5b619fa2f421786f4e33324f7a65b9ed1550534ba55e261087d919f9ec5bce2736804aef6bda75066df4b07d6d0bd743bd4185a831d32d3d623150cd9cae9f1fd189ade5defcd9667200a916b347eae9f3db5fae7826a170d1304896363c79515da708336bd8c7bb522f0c6f43931f21ac79923c656cfa54459e91c9502444cd7324939dec19bd6962fdcb5b8b5fb066937e8249011923dc0c79debca1567e366ca66ef768d4d7d494d300d7d6dca688086edb64cc5993c08576ccd83457fb24cffd8a71647466ce1fa835963e69b04fba81d11da95487bf0d4c5c9b20eb5f12d3a35bae743f2320d8f2bddab1e539b91f933bc9d4be0ecdd98122dd5608bc067a234ea098b1f24428277e15af2b308d34ef6d2ccf18cbf093f3ad78540c9eb283ca874f2e0b92e8e001779cd27027f1608247024204b980b0507657c2091eb7784d86c09900d7a96a5fbcd6216fb7a5cbb99d83aef788e1bae84b8e9f2f35c51177f7503369b734638eaa0712eb6c074baaaaafedd3010e0d4f89a842195232903cf2d14696dcd7d20bff0509b93171948ef0e52746c9608d2ef254b0a0120ce2f6bb27b044097ea95d3636f551aade9516953ddaf6c210ddb89c27fd8d68e886f05e6f101f469e969a7324e333b5acfa38ae6e1003a8637e62d15425c923ed0744759df93dd44cbfcdd779326117c18aa61c6e0e6201437154bbaf07633b1020911bee499cb718ed8f02e9931433bb00ed611a738adc4cf1b271b5ac7bbcc1a19bb1dfbc80605ec9e8fcb133fc81f55f50513aca3117c5c433979c4947a919eb5412ad15721ed1075e91d695370c7dca3c518d9bdeaff5fa064b4eb75ecf03175b5c91b51756d724fd37b5e4491c5b2564c39cbe697a4f0d8d888652e102a287868a167a52e96ef2bdcce6b4296d0f8415e534b463c44f0922c99ba398d912fb4274cfd1f0bd4b612635a59c9b8a05d83295335e51c4dabef1e37c737ea308759d4a0106a2b2143fda27dfcb1caf1562192cc3dc1a638c2d3863d359380138d18dc68a87cd6d1b6149ce6cb3e62fc75b898d76b71d19d0b69e8a88cfa0978477e9ad8532d636a616722c927bbdeb337efbf5e837dd5d4c9faa5737418e38f3a89b5ec58eea48ebf53758a01f5ccb775372b95b34443f6dab16741dac831f55a8aafed569ed61e0c8721e59817300c8ad271de76b143fe8523a3bf7ef514d769108dcfa4f8e22d81d681bfa69f7dc03f284782baa7107facac2758bb2830b9015aca3f19841426a50852a5b067ae27334de98cc1b33e399bf79059effd2e0d55d0ae67e358c0d2eaec608fafb6b3e94cc98d613b76ae26823bca4d4d4d2609b8ddf92d89d0596386958f90667ef75eea3204d37e407a0bf63c98279e91d4f3f4264fa735aa8e235982c4d6d9c9aa9a5b7c262fdd1413dea3a639e7f0cd5e302be16b14dcab09bb32dfcc57fda7a8f2cab1d27888bf4e7045ea2aa2a1fe4a66233dd6b05f77e7bf3e702df4a7af73b233c46f97ed9375dc75ec69b7e694349c2bbc910a2890880ff3b728fb67eb4549a0bc508fd377b20d335841115bccc933159c9056784222d2d676523cf0c131c5e63f22350751bdb148a8f2dc86626c98dafa45434bc0adfc1d3b783a98834785af066d76e22b01706ade82163a2bf84cdc7478bae4e3a04fae8414faac5fc50ab01be88725ce581f734ea04c049ca7e55f0292a8b3b1e3207556b62991de12d9600516c41321754a3c5e1ef5be77a920d752d36c78acd76a37d30b04693461cc3552799bed72ef7fb6861b7f10665ad94e83c9244fe8e8caf1070093b1a96ebcb45534a0faf8f9b4ab5117948fe8d72f4c9f52e2e2b3e1926ee86726536befa088b509137205b0aa93c4ae628827c200cb0f2d1714c3652bf011d334f54991aa54c493fc7cf92e9478db60b5f671648cc83a94a4bd37e11375562168cc39800022d4fa13d34e17ebcd7ce9c654d4516c4e9b2c7b24abe07c05bd32f4d25219e1cf058ff9878fb787ae857d5203c979a20f5ef4c414b84a0ef78bc31b2e6b37831e4e53ee6b27e12672524492f0c1372e1a3eea8d8008fbd9f6f50e47eb825ce60da7854d50c33090cc9cae7251c19813342a45304928471a528e04cf5c6d9edd6dc0df951fb7e57261c72cfa029742b79de3ba5df4ad44d96c1715cb35c450a7a3dbe5059bfd0e6b05bb544ee0d8b32799ad83be71535c7f493ae27d138747c1615172d0235dbed7cf070f06b7285fe3c6d75d3ebe01290a2d589b872c32c11e7df23f0a2b27a209d129f8c301547abd8bbfd870a885b5607445335e5c9e632e3d9ab21c640ca826fea0f8c26616a0a33df9855a8bbb0e555cfa719176c7878431bd33190e998855696e75198906ee459d6010b889109eaa3fd680e53e48121a5e60eec73bc7c67d66399c1fe7f79e4d20afa4cb318efab89cc48e345421861d6e3d74f1de3dba4481e8d194a9581a37e053ead00efdc04dcc44d747f69946471aa1a1275b4a99b2f9d5a53ffa55ba7b51e57bc378c00694f776c2d95ac7a1f3d2866be02c4ccdb8280d631967dda9afaa358498b77e1d84c2bce4e62df3b1132caf7197dfe69d98de6830a1f5bda71e1435bdeb7dfac7f5aada0c783b19f5943640724ab0ad80e09049d7abee870c10a247168ef214f29310d2bda96d6f102e12c060d269a13961b28bd9c24634cdb0cd8f7d95cf459f170f66c64c2e55b72859470df7603c66a21a0b5df9b839c852945ed547dd73c578673ca26b631ab04309315d8cb2b7a416869f8c7656a2d5db54f205abff1cda3bd488a1695867f8c1211bc2781a487ac735868be208a68dd5b99bb8999dbfb9bf02b4dda3e7c339ea3c704c725fc5846ed24a97db10703b56a50e66b5e0a659913dbdf0d4ab32d9d8c9a4d4e7eb59e678e63b08b29a92f6bc31bd13ebe82725c4ae36544e9cc4c3b7562f83d45ce70eea20712e36a8c507e53e71e0bbc02700f026e3378c0e939a14dff3cadda2626d28bdd6d50e107dd19278f19d66f8f587ecf7a5140d6f3e2eafec874cb18c0180f74f65219e812096a9db967fd126c521839c9409ed4a8df62f013f60a1f28e1d6e1e1f6c7e758d397dffb685cbf9894693fab5928a2c7a574544d369006f807c97a25f00a3c0ddd73c03e2a106126818185bb9fde914bad01276070f69b7a743d9dbcd4a0880f90b36baa7754e34289dd7c1a71701aa902bbe92ecb5c6332614222d78ce66aad508d74b4c29d682fd70c345522fd524238a9ab794d6a17ca723c0cadadcd7cc497ff9886e700575e512833d75705dd421af65f9a6aff229a36ca7ac7fcafea7b6fba40a41ff91d21c34db2ff8b824cfef0d2287df993c0559d9fac5cc2232e2c80eebfa5ab7439da8f7649e80b030d5b270a319e3d2c9b2c5aeaffa5abf7cea19edd8e570200330aa8542b3344c4e913334c3594d2d5eb8c35dffebcc35feaaf1ac0b65be2add9cb984c7482a98a8986a2270bd72003679796ad6dcd1618111388bfa8c5b625c1561138d6a60096d13d00be9fd63b50ba84bc9cba4357c441de26a9ea2f49cdeaf57bf523fa21a785e3721647dc79fd58a9acab8e21fa1d03a72e2bf1d6734933af99f7c5fcfe432805b191209a9d8db8d2714f663d1c98677f9fede8cbc3fd6bd57e2f8486c44353fc40ba1144ae68a4ef0ac480ac957790462f66900b13f4cb1e2626e5c8923b1c1e0a1381556b35f56568b0725c6d3c8940b45b331ed947ae25feb17b7b5a0cd64bba1d890ce41a29d8421dea0a7324ac2cc6ea2612dcfbbf1d8895ce54ea95b40aed0440769447ceb3f94a6b3e26af413991972343908ed86b9b384e22259449244058bfe2f9ccd4009e2429e1e39a82569fd9a625ad9f82b0066617cf1dfd0bf3fe87781d90dee5d965963f38bfe8b8ea97ae7807c35dbd0c9cf655fad22c6d114126cdd02958e6dccc5dd71ab218f0698b5211a0293985f", 0x1000, 0x8)
r5 = socket$unix(0x1, 0x5, 0x0)
write$binfmt_aout(r5, &(0x7f00000014c0)=ANY=[@ANYBLOB="08017504c80100006a02000008000000c5000000000000000000000000000000f6c48ad11afcbc245ed71e1543c8ebb82cb95a7918db923b006ca404417cf1502e7ba782066fb4f96c116e91d28f1e4400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001df4ab4afac5498900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006fb060badd41480000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b89000000"], 0x250)
r6 = fork()
process_vm_readv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r7, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x8, 0x1, 0x4, 0x0, 0x2, 0x8000, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x266, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x40000, 0xfff, 0x8000, 0x0, 0x1, 0xc31, 0x8, 0x0, 0x7, 0x0, 0x54}, r6, 0x10, r7, 0xb)
sendfile(r2, r4, 0x0, 0xfffffdef)

[ 1917.394785] loop1: detected capacity change from 0 to 40
[ 1917.428409] bio_check_eod: 8 callbacks suppressed
[ 1917.428422] syz-executor.6: attempt to access beyond end of device
[ 1917.428422] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1917.429808] buffer_io_error: 5 callbacks suppressed
[ 1917.429818] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1917.433521] loop0: detected capacity change from 0 to 40
[ 1917.439201] syz-executor.2: attempt to access beyond end of device
[ 1917.439201] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1917.440358] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1917.444057] syz-executor.4: attempt to access beyond end of device
[ 1917.444057] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1917.445259] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1917.451835] loop3: detected capacity change from 0 to 40
[ 1917.465497] syz-executor.6: attempt to access beyond end of device
[ 1917.465497] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 1917.491176] syz-executor.6: attempt to access beyond end of device
[ 1917.491176] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1917.492090] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1917.492294] FAULT_INJECTION: forcing a failure.
[ 1917.492294] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1917.495039] CPU: 1 PID: 11096 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1917.496082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1917.497115] Call Trace:
[ 1917.497462]  <TASK>
[ 1917.497783]  dump_stack_lvl+0x8f/0xb7
[ 1917.498315]  should_fail_ex.cold+0x5/0xa
[ 1917.498877]  prepare_alloc_pages+0x178/0x500
[ 1917.499489]  __alloc_pages+0x149/0x510
[ 1917.500028]  ? __pfx___alloc_pages+0x10/0x10
[ 1917.500644]  ? __pfx___lock_acquire+0x10/0x10
[ 1917.501269]  ? __pfx_lock_release+0x10/0x10
[ 1917.501884]  alloc_pages+0x1a0/0x260
[ 1917.502407]  filemap_alloc_folio+0x363/0x400
[ 1917.503020]  ? __filemap_get_folio+0x253/0xcd0
[ 1917.503653]  ? __pfx_lock_release+0x10/0x10
04:17:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1917.504245]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1917.505129]  ? xas_load+0x6a/0x140
[ 1917.505637]  __filemap_get_folio+0x32b/0xcd0
[ 1917.506262]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1917.506943]  ? lock_is_held_type+0xdb/0x130
[ 1917.507557]  pagecache_get_page+0x2e/0x130
[ 1917.508127]  ? __pfx_fat_get_block+0x10/0x10
[ 1917.508727]  block_write_begin+0x35/0x450
[ 1917.509312]  cont_write_begin+0x4fe/0x700
[ 1917.509929]  ? __pfx_fat_get_block+0x10/0x10
[ 1917.510727]  ? __pfx_cont_write_begin+0x10/0x10
[ 1917.511354]  ? fault_in_readable+0x147/0x250
[ 1917.511969]  ? __pfx_fault_in_readable+0x10/0x10
[ 1917.512617]  fat_write_begin+0x89/0x180
[ 1917.513158]  ? __pfx_fat_get_block+0x10/0x10
[ 1917.513785]  generic_perform_write+0x25a/0x580
[ 1917.514430]  ? __pfx_generic_perform_write+0x10/0x10
[ 1917.515104]  ? __pfx_fat_update_time+0x10/0x10
[ 1917.515724]  ? __pfx_file_update_time+0x10/0x10
[ 1917.516349]  ? generic_write_checks+0x2c0/0x400
[ 1917.516997]  __generic_file_write_iter+0x308/0x4b0
[ 1917.517663]  ? trace_lock_acquire+0x16c/0x1c0
[ 1917.518293]  generic_file_write_iter+0xe7/0x350
[ 1917.518944]  vfs_write+0x9c7/0xdd0
[ 1917.519441]  ? __pfx_vfs_write+0x10/0x10
[ 1917.519974]  ? __pfx___fget_files+0x10/0x10
[ 1917.520580]  ? __fget_files+0x270/0x480
[ 1917.521153]  ksys_write+0x12b/0x260
[ 1917.521653]  ? __pfx_ksys_write+0x10/0x10
[ 1917.522214]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1917.522911]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1917.523614]  do_syscall_64+0x3f/0x90
[ 1917.524139]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1917.524845] RIP: 0033:0x7f57ba4dfb19
[ 1917.525339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1917.527597] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1917.528583] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1917.529492] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1917.530426] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1917.531330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1917.532241] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
04:17:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="0f", 0x292e9)

[ 1917.533188]  </TASK>
[ 1917.539558] syz-executor.6: attempt to access beyond end of device
[ 1917.539558] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 1917.580336] syz-executor.0: attempt to access beyond end of device
[ 1917.580336] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1917.581701] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:17:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xd)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/iommu_groups', 0x10000, 0xc0)
openat(r3, &(0x7f00000000c0)='./file0\x00', 0x298400, 0x2)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:17:27 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 38)

[ 1917.659106] syz-executor.3: attempt to access beyond end of device
[ 1917.659106] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1917.660835] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1917.661469] loop4: detected capacity change from 0 to 40
[ 1917.664104] loop2: detected capacity change from 0 to 40
[ 1917.684771] syz-executor.3: attempt to access beyond end of device
[ 1917.684771] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1917.685784] Buffer I/O error on dev loop3, logical block 10, lost async page write
04:17:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 36)

[ 1917.733048] loop6: detected capacity change from 0 to 40
[ 1917.743265] syz-executor.4: attempt to access beyond end of device
[ 1917.743265] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1917.744429] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1917.749362] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:17:27 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 1917.787057] loop1: detected capacity change from 0 to 40
04:17:27 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
creat(&(0x7f00000001c0)='./file0\x00', 0x84)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r2, r0, 0x0, 0xfffffdef)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file1\x00'})

04:17:27 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1917.851380] loop0: detected capacity change from 0 to 40
[ 1917.888941] loop2: detected capacity change from 0 to 40
[ 1917.908919] loop3: detected capacity change from 0 to 40
[ 1917.910041] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 1917.936409] FAULT_INJECTION: forcing a failure.
[ 1917.936409] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1917.937895] CPU: 0 PID: 11128 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1917.938476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1917.939053] Call Trace:
[ 1917.939241]  <TASK>
[ 1917.939413]  dump_stack_lvl+0x8f/0xb7
[ 1917.939711]  should_fail_ex.cold+0x5/0xa
[ 1917.940022]  copyin+0x19/0x120
[ 1917.940272]  copy_page_from_iter_atomic+0x276/0x12a0
[ 1917.940649]  ? __pfx_fat_get_block+0x10/0x10
[ 1917.940980]  ? __pfx_cont_write_begin+0x10/0x10
[ 1917.941326]  ? fault_in_readable+0x147/0x250
[ 1917.941659]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 1917.942085]  ? __pfx_fault_in_readable+0x10/0x10
[ 1917.942440]  ? fat_write_begin+0x95/0x180
[ 1917.942742]  ? __pfx_fat_get_block+0x10/0x10
[ 1917.943062]  generic_perform_write+0x2cf/0x580
[ 1917.943415]  ? __pfx_generic_perform_write+0x10/0x10
[ 1917.943762]  ? __pfx_fat_update_time+0x10/0x10
[ 1917.944107]  ? __pfx_file_update_time+0x10/0x10
[ 1917.944437]  ? generic_write_checks+0x2c0/0x400
[ 1917.944793]  __generic_file_write_iter+0x308/0x4b0
[ 1917.945136]  ? trace_lock_acquire+0x16c/0x1c0
[ 1917.945483]  generic_file_write_iter+0xe7/0x350
[ 1917.945837]  vfs_write+0x9c7/0xdd0
[ 1917.946107]  ? __pfx_vfs_write+0x10/0x10
[ 1917.946408]  ? __pfx___fget_files+0x10/0x10
[ 1917.946735]  ? __fget_files+0x270/0x480
[ 1917.947048]  ksys_write+0x12b/0x260
[ 1917.947326]  ? __pfx_ksys_write+0x10/0x10
[ 1917.947617]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1917.947978]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1917.948345]  do_syscall_64+0x3f/0x90
[ 1917.948622]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1917.948984] RIP: 0033:0x7fe4f88bdb19
[ 1917.949242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1917.950454] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1917.950974] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1917.951456] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1917.951933] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1917.952404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1917.952886] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1917.953386]  </TASK>
04:17:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 39)

04:17:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:17:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 37)

04:17:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="10", 0x292e9)

[ 1933.012017] loop1: detected capacity change from 0 to 40
04:17:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1, 0x4, &(0x7f0000000480)=[{&(0x7f00000000c0)="13d333fea44eb09bb9df37bdea85", 0xe, 0x8}, {&(0x7f0000000180)="f97f041d5fff187f0e29635a216075cf1f9eebe8bdd7810795344292b9fb3e7df69a2d84fd05d3f564eb215a975d619824b59d32f73a570e2dc11fd637608701a15e694d59b56f4201d2a546dfcd8c8ccee0e1f822639ee7da979c88be88524c7a88576f95bc87dde084ac7f23af73d36f11c52343914223437527641022", 0x7e, 0xffffffffffffffb1}, {&(0x7f0000000200)="1ca511efecda4f159d0bfdd3406c8cce84c7996780486387fda2bea8eee1c3b799283b9600350d2861651608d7f5197f304d933b914070cae8cfe32b99ff14ed6f03c6e3b90be1650a45cdda58cb4ef420d745355cf5d25ffc17b8a69e43444bfbdf10965953009937ff2f72e93d3b5c53ea421bd1a49aad62d91c6496004a5d3dfe80c8710506a5b651d6d6632bae9f54b5d241aadcc49018ba73737a1ee5304ae9b10c6069a6f44b346451f9340095c028cdf647e280f87bcba487625113dbe23dc6bc99b3ae2c6ec58a7a4cce", 0xce}, {&(0x7f0000000380)="b16214e22258cd1fe0ec16ab18e4655d5978e45bf4eacea57c521db01c99d4e50bbfb40ea8e5151c51f0eaa157684885afe6b0f324abeecb69ac2b8a0da3c45b52e57681ef25398591af456515a35a98b0dc2e62370d6aa72f5de35e76818d52ddc4d12354f460fffdd283e08275878911f33810cf929b649c441bcfdb079aded0e27a8ebf9ee23ff6392be1b099503ca19110c406c9cd86ee64f6ab609df3a67618872edbe0ad759f88af5bebbd2634f386d4d8a887f00da522ae3bc3156a1b16fb7b6cbfdc56654cff91bb0ea3258b92f0686ed140cf3ca0294586cfa8178583bf203c98e3f6289986cb", 0xeb, 0xc0000000000}], 0x208401, &(0x7f0000000000)=ANY=[@ANYRES32])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
acct(&(0x7f0000000040)='./file1\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4e4140, 0x20)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:17:43 executing program 5:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:17:43 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x80, 0x8)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:17:43 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b000100"/23, 0x17}, {0x0, 0x0, 0x2800}], 0x700405c, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1933.025206] loop4: detected capacity change from 0 to 40
[ 1933.030523] audit: type=1326 audit(1672978663.059:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11155 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcf7550b19 code=0x0
[ 1933.031699] loop0: detected capacity change from 0 to 40
[ 1933.036083] loop6: detected capacity change from 0 to 264192
[ 1933.039454] loop3: detected capacity change from 0 to 40
[ 1933.048477] FAT-fs (loop3): bogus number of reserved sectors
[ 1933.048923] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1933.064006] loop2: detected capacity change from 0 to 40
[ 1933.091419] FAULT_INJECTION: forcing a failure.
[ 1933.091419] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1933.092863] CPU: 0 PID: 11160 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1933.093418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1933.093991] Call Trace:
[ 1933.094172]  <TASK>
[ 1933.094337]  dump_stack_lvl+0x8f/0xb7
[ 1933.094621]  should_fail_ex.cold+0x5/0xa
[ 1933.094916]  prepare_alloc_pages+0x178/0x500
[ 1933.095249]  __alloc_pages+0x149/0x510
[ 1933.095531]  ? __pfx___alloc_pages+0x10/0x10
[ 1933.095845]  ? __pfx___lock_acquire+0x10/0x10
[ 1933.096199]  ? __pfx_lock_release+0x10/0x10
[ 1933.096519]  alloc_pages+0x1a0/0x260
[ 1933.096788]  filemap_alloc_folio+0x363/0x400
[ 1933.097100]  ? __filemap_get_folio+0x253/0xcd0
[ 1933.097431]  ? __pfx_lock_release+0x10/0x10
[ 1933.097739]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1933.098101]  ? xas_load+0x6a/0x140
[ 1933.098371]  __filemap_get_folio+0x32b/0xcd0
[ 1933.098691]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1933.099063]  ? lock_is_held_type+0xdb/0x130
[ 1933.099380]  pagecache_get_page+0x2e/0x130
[ 1933.099672]  ? __pfx_fat_get_block+0x10/0x10
[ 1933.099983]  block_write_begin+0x35/0x450
[ 1933.100285]  cont_write_begin+0x4fe/0x700
[ 1933.100604]  ? __pfx_fat_get_block+0x10/0x10
[ 1933.100925]  ? __pfx_cont_write_begin+0x10/0x10
[ 1933.101277]  ? fault_in_readable+0x147/0x250
[ 1933.101623]  ? __pfx_fault_in_readable+0x10/0x10
[ 1933.101998]  fat_write_begin+0x89/0x180
[ 1933.102298]  ? __pfx_fat_get_block+0x10/0x10
[ 1933.102644]  generic_perform_write+0x25a/0x580
[ 1933.102988]  ? __pfx_generic_perform_write+0x10/0x10
[ 1933.103353]  ? __pfx_fat_update_time+0x10/0x10
[ 1933.103678]  ? __pfx_file_update_time+0x10/0x10
[ 1933.104019]  ? generic_write_checks+0x2c0/0x400
[ 1933.104353]  __generic_file_write_iter+0x308/0x4b0
[ 1933.104725]  ? trace_lock_acquire+0x16c/0x1c0
[ 1933.105063]  generic_file_write_iter+0xe7/0x350
[ 1933.105419]  vfs_write+0x9c7/0xdd0
[ 1933.105687]  ? __pfx_vfs_write+0x10/0x10
[ 1933.106003]  ? __pfx___fget_files+0x10/0x10
[ 1933.106341]  ? __fget_files+0x270/0x480
[ 1933.106675]  ksys_write+0x12b/0x260
[ 1933.106955]  ? __pfx_ksys_write+0x10/0x10
[ 1933.107262]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1933.107627]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1933.108020]  do_syscall_64+0x3f/0x90
[ 1933.108291]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1933.108683] RIP: 0033:0x7fe4f88bdb19
[ 1933.108961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1933.110240] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1933.110777] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1933.111283] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1933.111804] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1933.112314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1933.112827] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1933.113359]  </TASK>
[ 1933.152436] bio_check_eod: 8 callbacks suppressed
[ 1933.152448] syz-executor.1: attempt to access beyond end of device
[ 1933.152448] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.154551] buffer_io_error: 4 callbacks suppressed
[ 1933.154561] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 1933.170192] syz-executor.4: attempt to access beyond end of device
[ 1933.170192] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.172219] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1933.178085] loop6: detected capacity change from 0 to 264192
[ 1933.239298] Process accounting resumed
04:17:43 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 40)

[ 1933.272987] syz-executor.2: attempt to access beyond end of device
[ 1933.272987] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.274238] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1933.286399] Process accounting resumed
04:17:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', r1)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:17:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="11", 0x292e9)

04:17:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 38)

04:17:43 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1933.378283] loop1: detected capacity change from 0 to 40
[ 1933.410851] loop6: detected capacity change from 0 to 40
[ 1933.416409] loop4: detected capacity change from 0 to 40
[ 1933.429937] loop0: detected capacity change from 0 to 40
[ 1933.451975] syz-executor.6: attempt to access beyond end of device
[ 1933.451975] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.452869] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1933.456460] FAULT_INJECTION: forcing a failure.
[ 1933.456460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1933.457856] CPU: 0 PID: 11173 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1933.458418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1933.458981] Call Trace:
[ 1933.459172]  <TASK>
[ 1933.459337]  dump_stack_lvl+0x8f/0xb7
[ 1933.459627]  should_fail_ex.cold+0x5/0xa
[ 1933.459921]  copyin+0x19/0x120
[ 1933.460160]  copy_page_from_iter_atomic+0x276/0x12a0
[ 1933.460515]  ? __pfx_fat_get_block+0x10/0x10
[ 1933.460829]  ? __pfx_cont_write_begin+0x10/0x10
[ 1933.461156]  ? fault_in_readable+0x147/0x250
[ 1933.461470]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 1933.461875]  ? __pfx_fault_in_readable+0x10/0x10
[ 1933.462232]  ? fat_write_begin+0x95/0x180
[ 1933.462544]  ? __pfx_fat_get_block+0x10/0x10
[ 1933.462884]  generic_perform_write+0x2cf/0x580
[ 1933.463240]  ? __pfx_generic_perform_write+0x10/0x10
[ 1933.463613]  ? __pfx_fat_update_time+0x10/0x10
[ 1933.463962]  ? __pfx_file_update_time+0x10/0x10
[ 1933.464309]  ? generic_write_checks+0x2c0/0x400
[ 1933.464663]  __generic_file_write_iter+0x308/0x4b0
[ 1933.465029]  ? trace_lock_acquire+0x16c/0x1c0
[ 1933.465383]  generic_file_write_iter+0xe7/0x350
[ 1933.465734]  vfs_write+0x9c7/0xdd0
[ 1933.466028]  ? __pfx_vfs_write+0x10/0x10
[ 1933.466320]  ? __pfx___fget_files+0x10/0x10
[ 1933.466650]  ? __fget_files+0x270/0x480
[ 1933.466965]  ksys_write+0x12b/0x260
[ 1933.467233]  ? __pfx_ksys_write+0x10/0x10
[ 1933.467541]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1933.467930]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1933.468323]  do_syscall_64+0x3f/0x90
[ 1933.468615]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1933.469002] RIP: 0033:0x7f57ba4dfb19
[ 1933.469276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1933.470561] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1933.471109] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1933.471627] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1933.472151] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1933.472661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1933.473173] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 1933.473701]  </TASK>
[ 1933.486171] loop2: detected capacity change from 0 to 40
[ 1933.488623] syz-executor.6: attempt to access beyond end of device
[ 1933.488623] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.490188] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1933.507522] syz-executor.4: attempt to access beyond end of device
[ 1933.507522] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.508847] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1933.515899] syz-executor.6: attempt to access beyond end of device
[ 1933.515899] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 1933.526874] syz-executor.6: attempt to access beyond end of device
[ 1933.526874] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.527750] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1933.547087] syz-executor.0: attempt to access beyond end of device
[ 1933.547087] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.548988] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 1933.563281] syz-executor.2: attempt to access beyond end of device
[ 1933.563281] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1933.564733] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1933.610263] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 1933.856016] audit: type=1326 audit(1672978663.885:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11155 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcf7550b19 code=0x0
[ 1933.868234] loop3: detected capacity change from 0 to 40
[ 1933.875638] FAT-fs (loop3): bogus number of reserved sectors
[ 1933.876517] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1933.890924] I/O error, dev loop3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
04:18:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x80, 0x80)

04:18:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="12", 0x292e9)

04:18:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 39)

04:18:04 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x141000, 0x100)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
sendfile(r2, r1, 0x0, 0xfffffdef)

04:18:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000000)=[{&(0x7f0000010000)="601c6d6b5778267a9539eb556aac8d0f646f7b66d8a02b", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000240)="57214064de91a444a11520763781df53ed6ef00a1cb09dac59180ac51517e7fc15e54caf0942390ed956b0d4182488dceb6dfec7b1a75ecfcc9f688607252b751b3cb5d4ff75e4a143f09e6dcc34733a981231293442d05bf5780577d6477c41da5bc8be44208f46dddb96facd75a8d7861f9493a4e261548bdcdd2515af3d686b8418f492957bf8eafc9f5506c25b4764724ed76767919d61dceabed930dd163944bb13455fc648698c890fc27ab0a3e0a3441898fca7d83f41190e94b09d63b1a034b4ee0095db1e9e00cbd49bc7254f47a3433802c4dd3186d1a4b98900285b8cd4947c", 0xe5, 0x8}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:18:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:18:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 41)

04:18:04 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x5, 0x80, 0x1, 0xd7, 0x0, 0xa6, 0x18040, 0xd, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xff, 0x5}, 0x2008, 0x4, 0xfffffc00, 0x0, 0xf7, 0x3a71, 0x8000, 0x0, 0xfffffffa, 0x0, 0xfffffffffffffffb}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x4)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={<r3=>0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000b00)={<r5=>r3, 0x22, 0x6})
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000f40)={r5, 0x4, 0x9})

[ 1954.451809] loop6: detected capacity change from 0 to 40
[ 1954.455854] loop4: detected capacity change from 0 to 40
[ 1954.466269] loop0: detected capacity change from 0 to 40
[ 1954.471036] FAT-fs (loop6): invalid media value (0x81)
[ 1954.471444] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1954.512222] loop1: detected capacity change from 0 to 40
[ 1954.512979] loop2: detected capacity change from 0 to 40
[ 1954.516983] bio_check_eod: 3 callbacks suppressed
[ 1954.516994] syz-executor.4: attempt to access beyond end of device
[ 1954.516994] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1954.518396] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1954.555448] loop6: detected capacity change from 0 to 40
[ 1954.560712] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
[ 1954.574471] syz-executor.0: attempt to access beyond end of device
[ 1954.574471] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1954.575533] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 1954.607740] loop3: detected capacity change from 0 to 40
[ 1954.613119] syz-executor.2: attempt to access beyond end of device
[ 1954.613119] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1954.614250] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1954.623001] FAULT_INJECTION: forcing a failure.
[ 1954.623001] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1954.624165] CPU: 1 PID: 11212 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1954.624714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1954.625260] Call Trace:
[ 1954.625440]  <TASK>
[ 1954.625605]  dump_stack_lvl+0x8f/0xb7
[ 1954.625896]  should_fail_ex.cold+0x5/0xa
[ 1954.626200]  prepare_alloc_pages+0x178/0x500
[ 1954.626508]  __alloc_pages+0x149/0x510
[ 1954.626793]  ? __pfx___alloc_pages+0x10/0x10
[ 1954.627111]  ? __pfx___lock_acquire+0x10/0x10
[ 1954.627441]  ? __pfx_lock_release+0x10/0x10
[ 1954.627735]  alloc_pages+0x1a0/0x260
[ 1954.628009]  filemap_alloc_folio+0x363/0x400
[ 1954.628329]  ? __filemap_get_folio+0x253/0xcd0
[ 1954.628661]  ? __pfx_lock_release+0x10/0x10
[ 1954.628967]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1954.629315]  ? xas_load+0x6a/0x140
[ 1954.629581]  __filemap_get_folio+0x32b/0xcd0
[ 1954.629906]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1954.630247]  ? lock_is_held_type+0xdb/0x130
[ 1954.630567]  pagecache_get_page+0x2e/0x130
[ 1954.630843]  ? __pfx_fat_get_block+0x10/0x10
[ 1954.631159]  block_write_begin+0x35/0x450
[ 1954.631462]  cont_write_begin+0x4fe/0x700
[ 1954.631771]  ? __pfx_fat_get_block+0x10/0x10
[ 1954.632080]  ? __pfx_cont_write_begin+0x10/0x10
[ 1954.632385]  ? fault_in_readable+0x147/0x250
[ 1954.632680]  ? __pfx_fault_in_readable+0x10/0x10
[ 1954.632992]  fat_write_begin+0x89/0x180
[ 1954.633252]  ? __pfx_fat_get_block+0x10/0x10
[ 1954.633544]  generic_perform_write+0x25a/0x580
[ 1954.633849]  ? __pfx_generic_perform_write+0x10/0x10
[ 1954.634171]  ? __pfx_fat_update_time+0x10/0x10
[ 1954.634538]  ? __pfx_file_update_time+0x10/0x10
[ 1954.634842]  ? generic_write_checks+0x2c0/0x400
[ 1954.635176]  __generic_file_write_iter+0x308/0x4b0
[ 1954.635497]  ? trace_lock_acquire+0x16c/0x1c0
[ 1954.635798]  generic_file_write_iter+0xe7/0x350
[ 1954.636107]  vfs_write+0x9c7/0xdd0
[ 1954.636345]  ? __pfx_vfs_write+0x10/0x10
[ 1954.636610]  ? __pfx___fget_files+0x10/0x10
[ 1954.636901]  ? __fget_files+0x270/0x480
[ 1954.637179]  ksys_write+0x12b/0x260
[ 1954.637415]  ? __pfx_ksys_write+0x10/0x10
[ 1954.637680]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1954.638042]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1954.638391]  do_syscall_64+0x3f/0x90
[ 1954.638647]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1954.638980] RIP: 0033:0x7f57ba4dfb19
[ 1954.639245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1954.640331] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1954.640801] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1954.641282] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1954.641754] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1954.642244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1954.642719] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 1954.643215]  </TASK>
04:18:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="13", 0x292e9)

04:18:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:useradd_exec_t:s0\x00', 0x24, 0x0)

04:18:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 40)

04:18:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x101003, 0x42)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000180)={{}, {0x7f}, 0x86, 0x0, 0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)="e901678701295a6acbccd9315e20e50c1ea32df83c3f0bc746adb2ddd303c0f4833d75acb2ff1846ff09810f56d81ef8116cdc490e378565d76091f60b3aab534cb42633e2172cb4c526e412861d2c153197bae72ee754aad2374508adec82ba6048c8ed8af23b8ed6b74ade49a1e4ae627584ad190f10990ed19065561f09c59bd0134de58bff9bb59284d3672e24cc5723fa03ae88c47a255ca05e77766131858959d85ea905b09fa9c7cbc8766bdb6140a92b263cfe9be5d61978c9b12936fd445b808cf03dda9185b20fb95a9f448879f098ea1ca5767d80815b", 0xdc, 0x0, &(0x7f0000000340)={0x2, 0x134, {0x1, 0xc, 0xdb, "818d23e2b72e9506e88dd49a2706d3bac3affdf41c9bf22e887ad533a65e89b1205db638f11145b0881b58cf7016a48b4cec780886e71f544f8de024d5c908a82cfbf1715f73068fb0a96ec574fec8c320aad827e24c56bba51797cebe58d835adcf60c371659fffcd5634ecd962ed221b403b3521eb179dbf78228eea2bdc5d493134b9bcac90a1a916aa475e56430d16fc0e2b67b8a0cd2c3a03646ade4a86904f777c71bfa37144ed99493ac8696ad818def0266c18739dfd8cd8b9666715462ba7992c686892f679b5d2b7ad3cf0d078b4e74052b03bcb64ec", 0x4c, "d429c7a6dcdf1ffa1d2f98418b001f04385be6fb174d57c461e4ef939af50e7fd8447fdcaf12adeace5c3c5253273ce06406367e6c4322b346e1bd31955a7be15b7a1764e1ae39a1a7225495"}, 0xb7, "a92c88e956907258b0722f7a8be94d674f8e2b26d86173542a46988916905476cb49063fe09784b83c1b4d6abcf0fd96f13bd7889f24bff125455d5397aa404bbcdcf2dbbd5fd6d4df0ea9e6466da0ab2fd5dbca7423459aa601edc449fce05e2fac8e58d59a893dfb006a5f6d74acd69eca9bcbf0bf1614552a713ab0240459fc75d7ba9495c8d5dd54d1519a7d7e98ed95efef9c4cef4592b64c502af9ba29a20950204e432d7f516c63ad7140e3fc7033ff75297bc2"}, 0x1f7})
sendfile(r1, r3, 0x0, 0xfffffdef)

[ 1954.740308] loop6: detected capacity change from 0 to 40
[ 1954.742792] loop4: detected capacity change from 0 to 40
[ 1954.771756] syz-executor.6: attempt to access beyond end of device
[ 1954.771756] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1954.772610] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1954.779426] syz-executor.6: attempt to access beyond end of device
[ 1954.779426] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 1954.806462] syz-executor.6: attempt to access beyond end of device
[ 1954.806462] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1954.807437] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:18:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1954.817950] syz-executor.4: attempt to access beyond end of device
[ 1954.817950] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1954.819271] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:18:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 42)

[ 1954.849230] syz-executor.3: attempt to access beyond end of device
[ 1954.849230] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1954.850963] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1954.851116] loop0: detected capacity change from 0 to 40
[ 1954.869172] syz-executor.3: attempt to access beyond end of device
[ 1954.869172] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1954.870993] Buffer I/O error on dev loop3, logical block 10, lost async page write
04:18:04 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
openat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0x56800, 0xa)

04:18:04 executing program 6:
r0 = semget(0x3, 0x0, 0x20)
semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f0000000240)=""/4096)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
openat$incfs(r4, &(0x7f0000000000)='.pending_reads\x00', 0x200, 0xa)

[ 1954.934141] loop2: detected capacity change from 0 to 40
04:18:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
r2 = fork()
process_vm_readv(r2, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0xa0, 0x0, 0x37, 0x59, 0x0, 0x4, 0xa0800, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x200, 0x200}, 0x8500, 0x6, 0x9, 0x3, 0x3bc, 0x401, 0x401, 0x0, 0xfffffff9, 0x0, 0x7f}, r2, 0x1, r1, 0x2)
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 1954.954376] loop1: detected capacity change from 0 to 40
04:18:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="14", 0x292e9)

[ 1955.024492] syz-executor.2: attempt to access beyond end of device
[ 1955.024492] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1955.025287] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 1955.025750] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1955.035257] loop3: detected capacity change from 0 to 40
[ 1955.040337] FAULT_INJECTION: forcing a failure.
[ 1955.040337] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1955.042052] CPU: 0 PID: 11239 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1955.043115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1955.044153] Call Trace:
[ 1955.044489]  <TASK>
[ 1955.044799]  dump_stack_lvl+0x8f/0xb7
[ 1955.045326]  should_fail_ex.cold+0x5/0xa
[ 1955.045882]  prepare_alloc_pages+0x178/0x500
[ 1955.046497]  __alloc_pages+0x149/0x510
[ 1955.047028]  ? __pfx___alloc_pages+0x10/0x10
[ 1955.047629]  ? __pfx___lock_acquire+0x10/0x10
[ 1955.048245]  ? __pfx_lock_release+0x10/0x10
[ 1955.048837]  alloc_pages+0x1a0/0x260
[ 1955.049363]  filemap_alloc_folio+0x363/0x400
[ 1955.049949]  ? __filemap_get_folio+0x253/0xcd0
[ 1955.050577]  ? __pfx_lock_release+0x10/0x10
[ 1955.051143]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1955.051771]  ? xas_load+0x6a/0x140
[ 1955.052263]  __filemap_get_folio+0x32b/0xcd0
[ 1955.052875]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1955.053543]  ? lock_is_held_type+0xdb/0x130
[ 1955.054135]  pagecache_get_page+0x2e/0x130
[ 1955.054727]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.055320]  block_write_begin+0x35/0x450
[ 1955.055888]  cont_write_begin+0x4fe/0x700
[ 1955.056461]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.057050]  ? __pfx_cont_write_begin+0x10/0x10
[ 1955.057669]  ? fault_in_readable+0x147/0x250
[ 1955.058275]  ? __pfx_fault_in_readable+0x10/0x10
[ 1955.058917]  fat_write_begin+0x89/0x180
[ 1955.059435]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.060022]  generic_perform_write+0x25a/0x580
[ 1955.060652]  ? __pfx_generic_perform_write+0x10/0x10
[ 1955.061309]  ? __pfx_fat_update_time+0x10/0x10
[ 1955.061919]  ? __pfx_file_update_time+0x10/0x10
[ 1955.062550]  ? generic_write_checks+0x2c0/0x400
[ 1955.063181]  __generic_file_write_iter+0x308/0x4b0
[ 1955.063840]  ? trace_lock_acquire+0x16c/0x1c0
[ 1955.064440]  generic_file_write_iter+0xe7/0x350
[ 1955.065073]  vfs_write+0x9c7/0xdd0
[ 1955.065559]  ? __pfx_vfs_write+0x10/0x10
[ 1955.066094]  ? __pfx___fget_files+0x10/0x10
[ 1955.066700]  ? __fget_files+0x270/0x480
[ 1955.067273]  ksys_write+0x12b/0x260
[ 1955.067755]  ? __pfx_ksys_write+0x10/0x10
[ 1955.068302]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1955.068988]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1955.069683]  do_syscall_64+0x3f/0x90
[ 1955.070207]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1955.070897] RIP: 0033:0x7f57ba4dfb19
[ 1955.071386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1955.073615] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1955.074583] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1955.075483] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1955.076377] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1955.077272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1955.078164] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 1955.079122]  </TASK>
04:18:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1955.111350] loop4: detected capacity change from 0 to 40
04:18:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x220a82, 0x0)
openat(r0, &(0x7f0000000400)='./file1\x00', 0x40101, 0x20)
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
clone3(&(0x7f0000000680)={0x10000000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x2a}, &(0x7f0000000500)=""/140, 0x8c, &(0x7f00000005c0)=""/85, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0xa, {r0}}, 0x58)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
sendfile(r1, r3, 0x0, 0x7)
r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000180)="bede952872f3c15c0dad85a80135dd2105a63da1e0491f77c19a1e4690eea771e369e281af3342f8e28a4443edacd7081bbec37e18cba8c619e44b8817e302cee1c06dba666f6bb154524ac598bef70f914b4e22b30dc1388cdb128073f11a66a4fb1a160ec5f15359", 0x69, 0x7}], 0x840000, &(0x7f0000000240)={[{@map_off}, {}, {@session={'session', 0x3d, 0x3b}}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'cp775'}}], [{@pcr={'pcr', 0x3d, 0x20}}, {@appraise}, {@context={'context', 0x3d, 'sysadm_u'}}, {@hash}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
ioctl(r4, 0xf041, &(0x7f0000000300)="110bdc8825667dcdea10a21c4914cde6ae6a8078e73cfdfc055787eb2a5ac6770d8c2689ee1cfb5fc5c8c989d0b379ed48e92658325e39d13df28288a9ce8e243f24c1a9773d5524cb83b5e39a7827cdb81973d5fea0f53bda64346a9b6d06fd598e56490fb2467298d91172e94d0906e9ac821dc0da664e1002251f6694260257df")

04:18:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 41)

[ 1955.150740] loop2: detected capacity change from 0 to 40
04:18:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 43)

[ 1955.276055] loop0: detected capacity change from 0 to 40
04:18:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:18:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4, 0x4, &(0x7f0000001300)=[{&(0x7f00000000c0)="260898a7ee74fd23cc99b30c3b668b66dec93bcd5d3c080d", 0x18, 0x5}, {&(0x7f0000000240)="aa6eb39145ad54bb07efe5ee126143860bf45413697e8a13aed3ea45796256d60fab0c738f5f6b68c09e6802cab7be43b69d5a174a4f0e28c445dd4b45bb55ebc38e31fc233ba02ac7a0d6245284805219dbcf8605baa490b831413e46f188c36f5f9f107639f17491f987d93e1aa71ba3f4ab301079ac0d749f742f578b064500bcd9b5fbb31976bbbcdceea5c66edcc217eb8bdb6da46f259344508b248c9cc7b8ac12616757297f621527812ae0abdb85b574de9ca7ebef21c662", 0xbc, 0x4}, {&(0x7f0000000180)="c961f6e26d76bd3b53d4e1ed8bf0619e47ca7bdfde73ca2515c67e9e5dae6d66b23717f01614abae0eb2edc415cd28126218804444", 0x35, 0xff40}, {&(0x7f0000000300)="bf24132686fadabef7f796a006f257b9fd2f80a058713f97fc5f639cef4c8ce60cde6a2bdd57e8354ef47c4cbebece5b0e674727627b1e69f6c2259afed1567861b7fbe0df0885fccd72110b4994888daa364c9a657509b73437634eb9ad1dcea66967018ab2b5f54eedf61bb4ec5b1f99c98dc8febdf1fa1917b61f790bf09b73d35fbc4003648d815fca66b9c3d27985d907e1bdadabb699a53638f8929dd463871f088481ef5e9189188439ec676bb5f066b49cc7bfa3c0be212ebe1b9321d265f416072fdd3f6b371f29628b24e7cd88f0c5bb2a1881fb0ccd94b72a12f1a0404f2be9223b8e32d081be8bb1c82518f3d25496ea86a7e64747713353a863d400dac1fe5e7c44d3ab0af387cfb8485a85b112e2ec2b5208ee8d3dfe0b247c227d13968f3a174bfc05f22f5bc19ba1fb3ad79c76079484819576d764e5c66602fddb454b2f14d2763129b000dd9b9246bff304eecda5e1b95da7cdb6b7481ad2588b08a1555af7c9957be959ae01313725f37baf5e9cfb6fb144cd2b5ff9ceaef934f6889d25f4c5d0d5f9d5176607e5c2e1878186e0b0d23cb5b62a47f4ce9cc07932a85e83cf081d258951d36223d91d2bafc0b6c32ea58312dbf3988b77e1efe2db46954e99e2db653dd2b3c6c3324c11018ba7a30d97f73e642a1e64dae381a1668177070627c17aa956ce169ecc0de5be507c678c19575c1d86435eda867f4afcd3f9ffad281028f24cb8081c4271a8c5b02025dfb287246676a10482aa51681f899f277f27eadb192e5faa6c479d5cf2095a5f2d117ba44fdec9284ed8132bedb122b6a2366e5a8ca58cf8297e82412090068278e5e33e1478ac8f5ab659e57afec88c9cd94ffeaec00e70454a53f9e379e0ec57572c326a36e6940e0fa250d1d39893ebefebfe038cf9ba0735f6209771a7061bb7ea6ad4cb2c90c8bee1a3c1900782ae22e348fe4bb3d49f05e95adea8b115b8076b6bdf366fa1088c411eb66276ab121c9c9ec6c84eb725406fb8e198389067b098fadf49c24e399791095205f034256c625ef728fc97e9b3ea635f142c2da0ab5dfa733cf4a27925eb166a403fdbf91532db960aedaf14cbed34e6c3939cc06b4a3fe60edfdada813788aff58d609116d1b187f29a89d20b9a16244aa121228cf47e924340504aac96c8461544e891fd923a2f01a6ef4141ab67c1d737ca9cea7de08edf4df0cc295843407f0d4a5623efd6c5e331f4eae0686cc8662a1a948a678dfcbae58a93c35eea881e902be95c495c8e2cd2889048e63ec6d8671c158066c362e8525fbd04113b6cc786797c4de09a6ab166bed687b1e5918e35e83c0ccab1ffb694cda7f790f1fb3403a9df4d8255c58d37a0d82d7fbcce14fe711ac46069ca26c11c661e7565417ebd2d55388691d0f7afc934fc79198ad8e5a007622119883f1cca34aa2c1d0bbd97fc36bdd1e64c469f177b97509bd620036e817c270dcf2e95659003adc87b7b122c7e9bd188119ad4a30c2793391356989af8885536dba657756c54ad00979c51a848e4079ed56159de1c58925418c27cd001e95ab0c0735f8075c08ba73bbad6e4f3ac12702c47e76a323dd11df461a4ecfcdd48564c67e8b39e3c4988f5688daa417e6680bb5b6451d2312050f3e27ebd3d6401993a58552060a374d3efe98f095284daf368efe07cde404632cc724afe5e5f8bf5131741c175306d2be4591bd2c28c0a79710e27d917fbf0736adc205a000c80ed8bac2146af7b7e518f67a7ea6106c263f5c3e0c9525d3f0cd7e884d9e43fa25b5cfd887788159f3aa9915b94c3ebaa20643b13bbcf1d040bc5bdd34f03a229b11dbbe8a7a4bcb607fd4dcc168a1d1beed61ee6baa500bb8e61b40b7add1696b1d1d4e80e3a9e30e53e038bbe075ae64c5ed73d412857b70c14c4c9f154a6df7adac903d203086efc95589e75e633c4f0baae22734b63f5726bce5796503decf97e0c21c2ec69c5811381c23603ce8ecf48e7f1babf38536dd29689b03636fdf8c4fbacaffe68f9666538ca10bad09f309ae14796620c0b35ab27b32bf4d06468d2b6dfada5368486b1dabca0224e3651d8440b2ca1dd9d35920e73af5c2a1906335698ba9d75e57991fb070ab74a680e1a5e34b28f96b9442af683bd6ac8ca254c48239ecd6498abd45d610127c5da0d0cc2bb5efe39fa30c9df7a97a08e9caad6f809bbb35f0f003fc967b29d86f7ee3e555cc1d52479841bfbbee6daea86e514983b4cd91b66fc0d1fe160b264a866a9809d1c0ab4b7bbbd23a4922029736f8b7ba272eb5575c3caacc000af268d2bc079e17f6954a3451c99c61ff10e41931e5014b377f92c71ed7dfbd63222c5fe9352b02ee97fa2d9d8ab1cbabf58056975a05c5d0f6c39ea09233ed2953dd4d2591ddac90790bd1229e109ccf9148160a4f961bd57eeb346f0820ca6d8064091afba2111eb775478e856c6b97e6aa482b9c1f8aa68eb66929d1fb8b52dc2aad56297a76bebbdc6d95b10b9446fb8e3a3676f7f9555036aa92eb900d64145bb32142dc401de1396651d1e5bc061b3baed244e83318f6c65de89e4b13d23aa070eb8fdd221b7a4d37adc602367bf1e74839a609b0c3c537508ebc3e520ed9d4e7ba8f5618daa18273de592f8c6a055bf046331f82632a9ee614c18b8677dcb49d8ab9f377190ef603b809efcc4a2d8d7aae7a921853c1f5ba092e9af503d0cfd18b2040bb9b333888d25f9f7d9edc8d397d27c61ebcc1965e0dc63692414a5a56341b3e185b5c6794eaed315927874b7af9c5df0ded1758c526bc757f000bd053c0fc66dad204d601e1547195ce4c4ffbf9ed17c0d7bb1f867faaa8cc9880d3aed6aaa7bb7e3bb58382927d0efec2bbb6ed10f46a6d3e5242b11262074150ee97d84ae06e1a1603815d0e1e4f4a6a6ae8de9f3da6938639a473fdabf7d0e97059332307a250e2ca1f7edfd930e673db13a6551b870979c1d6575e36adab2282d8ee2ce122aa2f6989fff6f8050e8b7c29bc3cc942ef143c4fc9a4693208b7a62ccc71f90f75f2dd9b840c7b058f61a7520d1b45bead19ff0a004e7519a4a9ac716ff436af6a9b5a4779c51d08a3bc3f211b0ed51e5d4193095ac075aaa3d952f7c1870996b9f84d4230480f68a4e881431dfe326cdda2a8943fb6fd3c5b806a078297ddc5a3274baa9eb32e748fe4251238c2379e5a74cbe4e9c111e4b7ea9c293114eff668d1e8ad01317644b228d77b08ec7088a231ca6625c68f9652dc0fd158cabd84d3691f84d0d1bf21989966e8d77e66b5dd055a72997dc87bdfbe7375e470a05c5e18ddb829e06943ee8b31abe542adae21075bf3f17a6b3c1d1111214d20dbca32d5d7679752f28da9295cb94fe6163682e0c9fc6580045c296a3ead6c887cd724287a8e21bf606f5d34667871a4b501f63c50c639cf204d402fd292e1da4d5128fa519cc01274f10b8be1e61769b4fa64a1fbe903a8271bd278a3f9a07117afbfefc561527a5cdfafffd9a93ae1096cb148ee5213cbce874559861bfd01655b7bd3b660ae2f733769d90b088214a03187a8e154d929b832555fb5a032898dc2d182fdae44794ea0b135241950f723acc80f2fe67347d3b79f1c7f1b8636f4cbd519c6b553571fb72dae5709a727d89a9c3c3e36315640bf3d68ed27d54e5948cab3173bd70b0396c82faa6d62fc4178176d9f4d62c2bd01c4b22a18468d0e2be9e69ade866e8969fec8d80e42318b39089528887a095a43de87b135042054304c9672170a83df5eb684431d3caa3f105d6dccfe8bddb74158cd8d999b794715f4c05bdf96130006b12b4388e80d6146cafac0b8fb06c010138e54d003089c6f29ce2bebeffbad25975e92602669b3f6c3ec2f9f15bbbc5597462c962b23e08f6f8ee4626e9ec14df8fcab832742c002756addc6af133917e1064a6b0cc8b41adce1f05b19e6225bfe8480d0af07a7db14649c586eca23e28a142cf5905a9ded950551603e82b07890206f8d09c8a3d27e8dae066c40936b3787b5d99174fd7bc1e7d6dcf96fdad0a3528b25ea0cdca3bd86a8010ce8efbb816458eb7242f2aa59f01aa08ed9077f2aac3d22f4c705b06db45cb09505f4ec360eaa20c8ffb66e922819f95a393af2dd456098b37ae63135a7090b94d30fbf0d2a0a378ded069d292b15e6dee51195cc8a6972ec4927782d40b44d5a014f2d27d25c80a9c3d7942ca252681bfd946949704794c6193f2f4fe3ca917bf457d68fd5fc0ee8a340e81f4e7a414e862b099a0dce9e4ae035e6cbb0452e218eec117dcb8f9d6d74a3e8fcd7079dd9241444a3c2fc61d4b1c328ccc8cb03f330f204d4927e2141b6b767bae9d5eed2bba9c3e253bd57d6a9b74f267367652c0d0a05c2163c6c9e6f141fa634ee4c35ef880d44429037fe41b68524b34cb006a192203058f2bdaf77dfbe36bb24ec7a4b89a0f0a57da9d2a5ffcaa989e68df86280a68ba9b7c369e992eaca3469a017b4bd128a8d184158919a52aad05e5b4faae8685bca6d45d70cb3a0e45ce2e016a869c7deb7876d33df651e0ac87878a99bf6e657f692b00fea75015eb82f4aabe36b4df5ffd09ec234fcd029452adc61763162e10aa54bc51a498bb5b20ac5155b431e5ad2e338b927c3ae45dc4cf62ef5c773d727a76a1791f62ab7179feb313195ad3cc154779acecb7ee3cd800294a93427d2f8a2ff6a7120ece6f8b4bb0fa06699537702a49b05ad8b53da78fbaa9f11411a1ef9e88bc72916de1ad5d603fd5b02f27da963af5e71998a73fb9d6f7f0769039ead9cf0a26c8367150e5696290d80a4b12991c55742e412c30393b6ae3e13b51d9b0df4609384cffaea1500b8eb20c6fb26c18c1dcc0178784ad5f0bb1ff49a4066b9c6561d6c4a81ad57bb2a7b9bbae6e05742b3b071278c5defc90663fb2c279309b02679bf1e15790741b10b21828529877715aad2c5ab78b45090cf915c9020a98e78a39ef8434e8505ac690eb8519368b6ab4b8f22cebdafa8150a5048550a7115bfb4ecd96bc32beb309b940e309a83b34f0a137b7b54e9ec805ebd7f8941fe3b6252e81136359bf029028da81a9d6918a99060d0b18a20af5776f66f5f75eb57ebedccd9ce2bc771c598bb4ee8bd44c8b1ade4d723390754e00ec8ce821b06d843477e609211d4b173b3ab3bf000825eb3db295c32190197983dd22322e27b487cbefdddf8b1e65f50622077727571a7bbbfba08376006121abead46f357b520a02d624656c470c578b864373a7854fb7cdb321f8731a4095d4aabe4bd949fcf2261f72c5c78d83b52a7549099d175bfafe12338f4937169d25796cb4a58937109f065072f5b90691db35a2e64e1893b28db4e6f569e9e2ffe04c4d915a76a657a5c2fdc05aec44811ece907cfc23e407addcfb541d47cb7e226e38aa0e09a7e285068db9ab600cd47ce44bd5018143338428c3d3c02a702319bf3884d66628352355622eb76af7be265d1d952982f131b8a23a916c45abd39497fd2e652c4d6beec64fc770e6a38fa8d3b9a2309b5c593c22b3bf0a4b67df5ab86a3deff6af38fa0b22200fd18b20e21914925d78d70f60802d846f45c7560918c3f715af138c0d29dc4de0d63f36d1db12ae0670713a239b7e641e423efccd1cbf2e4d77907680042571dedc7dd06edff5d1e4f69e7121684ca3ff02f7669665c723b97d5e64324b12e1319a43a45032e81f20bd4a13d1b68dd42054c4b89125d9a851ea7df588515c01cbe59b89b89cfabb96cfa2e25eb83bc2", 0x1000, 0xc2}], 0xd, &(0x7f0000001380)={[{@fat=@quiet}, {@shortname_win95}, {@nonumtail}, {@shortname_lower}], [{@smackfstransmute={'smackfstransmute', 0x3d, '@-%*}}'}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}, {@measure}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@uid_gt={'uid>', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 1955.346158] FAULT_INJECTION: forcing a failure.
[ 1955.346158] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1955.348050] CPU: 0 PID: 11264 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1955.349084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1955.350237] Call Trace:
[ 1955.350563]  <TASK>
[ 1955.350861]  dump_stack_lvl+0x8f/0xb7
[ 1955.351378]  should_fail_ex.cold+0x5/0xa
[ 1955.351915]  prepare_alloc_pages+0x178/0x500
[ 1955.352510]  __alloc_pages+0x149/0x510
[ 1955.353027]  ? __pfx___alloc_pages+0x10/0x10
[ 1955.353604]  ? __pfx___lock_acquire+0x10/0x10
[ 1955.354215]  ? __pfx_lock_release+0x10/0x10
[ 1955.354806]  alloc_pages+0x1a0/0x260
[ 1955.355302]  filemap_alloc_folio+0x363/0x400
[ 1955.355887]  ? __filemap_get_folio+0x253/0xcd0
[ 1955.356488]  ? __pfx_lock_release+0x10/0x10
[ 1955.357050]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1955.357697]  ? xas_load+0x6a/0x140
[ 1955.358182]  __filemap_get_folio+0x32b/0xcd0
[ 1955.358805]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1955.359473]  ? lock_is_held_type+0xdb/0x130
[ 1955.360058]  pagecache_get_page+0x2e/0x130
[ 1955.360603]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.361178]  block_write_begin+0x35/0x450
[ 1955.361737]  cont_write_begin+0x4fe/0x700
[ 1955.362317]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.362903]  ? __pfx_cont_write_begin+0x10/0x10
[ 1955.363519]  ? fault_in_readable+0x147/0x250
[ 1955.364104]  ? __pfx_fault_in_readable+0x10/0x10
[ 1955.364739]  fat_write_begin+0x89/0x180
[ 1955.365262]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.365853]  generic_perform_write+0x25a/0x580
[ 1955.366474]  ? __pfx_generic_perform_write+0x10/0x10
[ 1955.367129]  ? __pfx_fat_update_time+0x10/0x10
[ 1955.367732]  ? __pfx_file_update_time+0x10/0x10
[ 1955.368336]  ? generic_write_checks+0x2c0/0x400
[ 1955.368961]  __generic_file_write_iter+0x308/0x4b0
[ 1955.369602]  ? trace_lock_acquire+0x16c/0x1c0
[ 1955.370224]  generic_file_write_iter+0xe7/0x350
[ 1955.370850]  vfs_write+0x9c7/0xdd0
[ 1955.371322]  ? __pfx_vfs_write+0x10/0x10
[ 1955.371842]  ? __pfx___fget_files+0x10/0x10
[ 1955.372415]  ? __fget_files+0x270/0x480
[ 1955.372975]  ksys_write+0x12b/0x260
[ 1955.373458]  ? __pfx_ksys_write+0x10/0x10
[ 1955.373999]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1955.374678]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1955.375357]  do_syscall_64+0x3f/0x90
[ 1955.375865]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1955.376540] RIP: 0033:0x7fe4f88bdb19
[ 1955.377020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1955.379217] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1955.380154] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1955.381041] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1955.381925] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1955.382811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1955.383681] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1955.384599]  </TASK>
[ 1955.407192] loop2: detected capacity change from 0 to 40
04:18:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="15", 0x292e9)

[ 1955.441267] loop6: detected capacity change from 0 to 40
[ 1955.444824] loop1: detected capacity change from 0 to 40
04:18:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 42)

04:18:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:18:05 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
dup(r0)
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 1955.559424] loop4: detected capacity change from 0 to 40
[ 1955.597017] loop0: detected capacity change from 0 to 40
04:18:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x104001, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(r2, &(0x7f0000000000)='./file1\x00', 0x400000, 0x55)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r3, &(0x7f0000000240)='./file1\x00', 0x84000, 0x50)
sendfile(r0, r4, 0x0, 0xfffffdef)
getsockname$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e)

04:18:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 43)

[ 1955.736201] loop2: detected capacity change from 0 to 40
[ 1955.755042] loop6: detected capacity change from 0 to 40
[ 1955.861685] loop0: detected capacity change from 0 to 40
[ 1955.906508] FAULT_INJECTION: forcing a failure.
[ 1955.906508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1955.907663] CPU: 1 PID: 11291 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1955.908207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1955.908750] Call Trace:
[ 1955.908928]  <TASK>
[ 1955.909103]  dump_stack_lvl+0x8f/0xb7
[ 1955.909384]  should_fail_ex.cold+0x5/0xa
[ 1955.909678]  copyin+0x19/0x120
[ 1955.909916]  copy_page_from_iter_atomic+0x276/0x12a0
[ 1955.910283]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.910599]  ? __pfx_cont_write_begin+0x10/0x10
[ 1955.910933]  ? fault_in_readable+0x147/0x250
[ 1955.911243]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 1955.911623]  ? __pfx_fault_in_readable+0x10/0x10
[ 1955.911961]  ? fat_write_begin+0x95/0x180
[ 1955.912252]  ? __pfx_fat_get_block+0x10/0x10
[ 1955.912565]  generic_perform_write+0x2cf/0x580
[ 1955.912893]  ? __pfx_generic_perform_write+0x10/0x10
[ 1955.913240]  ? __pfx_fat_update_time+0x10/0x10
[ 1955.913556]  ? __pfx_file_update_time+0x10/0x10
[ 1955.913877]  ? generic_write_checks+0x2c0/0x400
[ 1955.914221]  __generic_file_write_iter+0x308/0x4b0
[ 1955.914564]  ? trace_lock_acquire+0x16c/0x1c0
[ 1955.914884]  generic_file_write_iter+0xe7/0x350
[ 1955.915216]  vfs_write+0x9c7/0xdd0
[ 1955.915468]  ? __pfx_vfs_write+0x10/0x10
[ 1955.915749]  ? __pfx___fget_files+0x10/0x10
[ 1955.916055]  ? __fget_files+0x270/0x480
[ 1955.916359]  ksys_write+0x12b/0x260
[ 1955.916619]  ? __pfx_ksys_write+0x10/0x10
[ 1955.916907]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1955.917266]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1955.917635]  do_syscall_64+0x3f/0x90
[ 1955.917906]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1955.918282] RIP: 0033:0x7fe4f88bdb19
[ 1955.918538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1955.919733] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1955.920238] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1955.920709] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1955.921182] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1955.921652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1955.922131] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1955.922633]  </TASK>
04:18:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 44)

04:18:20 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x4}}, './file1\x00'})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x8010, r0, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 1970.921538] loop0: detected capacity change from 0 to 40
[ 1970.922718] loop2: detected capacity change from 0 to 40
04:18:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 44)

04:18:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="16", 0x292e9)

04:18:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open(&(0x7f0000000000)='./file1\x00', 0x40000, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r1, 0x0, 0xfffffdef)

04:18:20 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x80000000, 0x5, &(0x7f0000001200)=[{&(0x7f0000000f40)="779a6d8cdd7bc16f11689e9c3382a1c6c69f836c61cd2ae98053365f4cac2a9aa6184ed1d0ed845d14a0ef7c2eb2ccf11f2c7fb2c95e24d88d0467b8fa532fcfe8b10c7cc3ca44710532cfcd3dbfcdaca786493b65ef68abb59020275f939199d69fd31b496aa3b7f07b919ba22268e390e4afba11b022adfccca1c9aefea5bd034adf5c18d7780e3c48804ad828579efa8b043178760ba24330851c4a71881ab6daa678e1ee3452dc1402f1aaeeabf1409f928c9e4596b58569", 0xba}, {&(0x7f0000001000)="b56247f93eaa360a0e089751dc6751c70eecd24296e7d2150c396f6ab2aa53f66099c5fe35c2074998c6455723f9dd05dbc0e10d0c765d12501672943585b602184ac96a7919fba8c54f1b0ea490b0881ee9e879edc366848024ea", 0x5b, 0x401}, {&(0x7f0000001080)="cc4bdb7aad1d610c7227d396b23389383386121925bf5e24f9e8b2f2840e38fa6012314c9891c050c38979f7011be0c9090b5e0236dfd031677a7008daffaf97a85046cb316da11d9ecd480b7f607d6ec0926fec7a5c418b2f3a6643c70f5991a263970ad2b8999cf19a9215f683028adbf012609284ec8fc2ad76a690fa207562a00dec1b793f7027205b53bd5dec3f0cb41e61cbb2be4153c00e94033e6a637ce33bd1cb8bccda7db2766dabc9d266c99ee7de8fdf8d62ff32b9f6e9d217e1d102bd4f3607ed312ab4ece526", 0xcd, 0xa1}, {&(0x7f0000001180)="76beb6293946fc3494e42a59d559baa31299ac6e9721660c23ae682cc2ea89ec64619cddbe80556b99bd91561af5adfae063e09373526caffca387190c34a5eff58c1a76a3f3ca23ee71d627efeb8c0496641d9edc9466a7803500a15771d05d933e877e0114648ef95c8a781cc6", 0x6e, 0x3}, {&(0x7f00000003c0)="0f8b47607cc191d09a0291ba4e473873605951316bf31ea710dcf68af458205992c279d8b7b67bf19c718ab2edccc18244227246ccce4df5452f60c1ac5d6e54", 0x40, 0x7}], 0x0, &(0x7f0000001280)={[{@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@nocase}, {@fat=@check_normal}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@appraise}]})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x202000, 0x0)
copy_file_range(r0, &(0x7f0000000080)=0x9, r0, 0x0, 0x7fff, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000b00)={0x0, 0x7000000000000000, 0x7, 0x1})
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000300)={0xffff, 0xe63, 0x3, 0x100, 0x1, "7abc784eabf3ec85"})
syz_open_dev$vcsn(&(0x7f0000000240), 0x3, 0x401)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:18:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x4, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000000180)=""/17, 0x11}], 0x4}, 0x40012040)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
r3 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x41)
finit_module(r3, &(0x7f00000003c0)='vfat\x00', 0x1)

04:18:20 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1970.947778] loop6: detected capacity change from 0 to 40
[ 1970.950754] loop3: detected capacity change from 0 to 40
[ 1970.956350] loop1: detected capacity change from 0 to 40
[ 1970.967745] bio_check_eod: 19 callbacks suppressed
[ 1970.967758] syz-executor.6: attempt to access beyond end of device
[ 1970.967758] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1970.969050] buffer_io_error: 13 callbacks suppressed
[ 1970.969059] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1970.986272] syz-executor.6: attempt to access beyond end of device
[ 1970.986272] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
04:18:21 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = memfd_secret(0x0)
r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000600)='cpu.pressure\x00', 0x2, 0x0)
fcntl$dupfd(r1, 0x406, r2)
ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000001c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x5, &(0x7f00000007c0)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000640)="cb6aa0965567f103bfa6031b90116ac02eb4b49660e2b54a0c2da9b922373e3a697b386d6cd2b1bc7b9d4ea70a0916dc7cd2b60b8fa9b9047e9a57e0a53fe5058bcaf27257f7dc1700c89f6786e7ed1d6951a5859a40888bca8d538ad5db369f5cc91c8f5de5b7d1de76f70e5b62c845c70d0b505a249a6758f7b9b5d0ad89f502026d30c810ff3864ad61bef8638460a07d4fa71f71766713a0890d7de86683a97d9e09475d3f2e", 0xa8, 0x3}, {&(0x7f0000000700)="5c55bd5121e4e511", 0x8, 0xfffffffffffffa00}, {&(0x7f0000000200)="84b38c2ecc4fcef5f3c32322f79f8638bda44eff", 0x14, 0xfffffffffffff000}], 0x0, &(0x7f0000000600)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
syncfs(0xffffffffffffffff)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file2\x00', 0x121000, 0x2)
mount$9p_rdma(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e21,rq=0x0000000000000004,timeout=0x00000000000000ff,rq=0x00000000000009c8,mmap,rq=0x0000000000000003,obj_type=,permit_directio,fowner<', @ANYRESDEC=0xee01, @ANYBLOB="2c686173682c736d1600001200000000743d2c00"])
write$binfmt_aout(r0, &(0x7f0000000380)={{0xc0, 0x8, 0x0, 0x1c4, 0x27b, 0x3, 0x10b, 0x1}, "b744aeaa275c83e1933f1429ae6be0789075bd2efe9ba127dae7af61483aee2aac53d1d31c73c6eb9d27020f3b5b488165826f039d04955233f3e9c6d8795e61945f8a8218a134c97f44d5eb2ec3d5f4", ['\x00', '\x00']}, 0x270)
sendfile(r3, r4, 0x0, 0xfffffdef)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file3\x00', 0x4001, 0x20)

[ 1971.003532] loop4: detected capacity change from 0 to 40
[ 1971.007054] syz-executor.6: attempt to access beyond end of device
[ 1971.007054] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1971.008003] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1971.046061] loop7: detected capacity change from 0 to 264192
[ 1971.054316] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
04:18:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f00000003c0)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}, {&(0x7f0000000340)="4218cf52c04fa1732b3dd6e135e8f9cb5838bc51d186e3e763c1644cefb777d000e53527a50e151589f5f25200d8159e221eff91753ed0a19646515729e2acd8c87ddfdd48e2920abc56965f4d374f3bb118c93a5a43a3f586311a3909d08d8af168b62b", 0x64, 0x7}, {&(0x7f00000001c0)="730342cfbeb035486b9e1300ea6d6bf7ace676bc9dabdbf18847a099", 0x1c, 0x10001}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8)
setxattr$security_capability(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040), &(0x7f0000000180)=@v3={0x3000000, [{0xd088, 0x9}, {0x4, 0x4}], r0}, 0x18, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
recvfrom$inet6(r1, &(0x7f0000000200), 0x0, 0x10060, &(0x7f0000000440)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x20004}, 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

[ 1971.113526] FAULT_INJECTION: forcing a failure.
[ 1971.113526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1971.114525] syz-executor.4: attempt to access beyond end of device
[ 1971.114525] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1971.115479] CPU: 1 PID: 11312 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1971.116407] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1971.117293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1971.117316] Call Trace:
[ 1971.117326]  <TASK>
[ 1971.117339]  dump_stack_lvl+0x8f/0xb7
[ 1971.117400]  should_fail_ex.cold+0x5/0xa
[ 1971.120811]  copyin+0x19/0x120
[ 1971.121270]  copy_page_from_iter_atomic+0x276/0x12a0
[ 1971.121954]  ? __pfx_fat_get_block+0x10/0x10
[ 1971.122576]  ? __pfx_cont_write_begin+0x10/0x10
[ 1971.123217]  ? fault_in_readable+0x147/0x250
[ 1971.123839]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 1971.124585]  ? __pfx_fault_in_readable+0x10/0x10
[ 1971.125263]  ? fat_write_begin+0x95/0x180
[ 1971.125851]  ? __pfx_fat_get_block+0x10/0x10
[ 1971.126453]  generic_perform_write+0x2cf/0x580
[ 1971.127116]  ? __pfx_generic_perform_write+0x10/0x10
[ 1971.127812]  ? __pfx_fat_update_time+0x10/0x10
[ 1971.128458]  ? __pfx_file_update_time+0x10/0x10
[ 1971.129100]  ? generic_write_checks+0x2c0/0x400
[ 1971.129763]  __generic_file_write_iter+0x308/0x4b0
[ 1971.130455]  ? trace_lock_acquire+0x16c/0x1c0
[ 1971.131099]  generic_file_write_iter+0xe7/0x350
[ 1971.131799]  vfs_write+0x9c7/0xdd0
[ 1971.132315]  ? __pfx_vfs_write+0x10/0x10
[ 1971.132869]  ? __pfx___fget_files+0x10/0x10
[ 1971.133493]  ? __fget_files+0x270/0x480
[ 1971.134088]  ksys_write+0x12b/0x260
[ 1971.134623]  ? __pfx_ksys_write+0x10/0x10
[ 1971.135200]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1971.135916]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1971.136647]  do_syscall_64+0x3f/0x90
[ 1971.137191]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1971.137913] RIP: 0033:0x7f57ba4dfb19
[ 1971.138432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1971.140796] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1971.141807] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1971.142759] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1971.143693] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1971.144779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1971.145718] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 1971.146697]  </TASK>
[ 1971.175026] syz-executor.4: attempt to access beyond end of device
[ 1971.175026] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1971.175985] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1971.181477] syz-executor.1: attempt to access beyond end of device
[ 1971.181477] loop1: rw=2049, sector=100, nr_sectors = 24 limit=40
[ 1971.189165] FAULT_INJECTION: forcing a failure.
[ 1971.189165] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1971.191035] CPU: 1 PID: 11306 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1971.191047] syz-executor.1: attempt to access beyond end of device
[ 1971.191047] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1971.191076] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 1971.192043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1971.192068] Call Trace:
[ 1971.192077]  <TASK>
[ 1971.192088]  dump_stack_lvl+0x8f/0xb7
[ 1971.192147]  should_fail_ex.cold+0x5/0xa
[ 1971.192197]  copyin+0x19/0x120
[ 1971.193896] loop7: detected capacity change from 0 to 264192
[ 1971.193949]  copy_page_from_iter_atomic+0x276/0x12a0
[ 1971.197832]  ? __pfx_fat_get_block+0x10/0x10
[ 1971.198438]  ? __pfx_cont_write_begin+0x10/0x10
[ 1971.199068]  ? fault_in_readable+0x147/0x250
[ 1971.199687]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 1971.199743]  ? __pfx_fault_in_readable+0x10/0x10
[ 1971.199805]  ? fat_write_begin+0x95/0x180
[ 1971.199846]  ? __pfx_fat_get_block+0x10/0x10
[ 1971.199902]  generic_perform_write+0x2cf/0x580
04:18:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="17", 0x292e9)

[ 1971.199968]  ? __pfx_generic_perform_write+0x10/0x10
[ 1971.200009]  ? __pfx_fat_update_time+0x10/0x10
[ 1971.200056]  ? __pfx_file_update_time+0x10/0x10
[ 1971.200081] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 1971.200097]  ? generic_write_checks+0x2c0/0x400
[ 1971.200160]  __generic_file_write_iter+0x308/0x4b0
[ 1971.200210]  ? trace_lock_acquire+0x16c/0x1c0
04:18:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1971.200271]  generic_file_write_iter+0xe7/0x350
[ 1971.200334]  vfs_write+0x9c7/0xdd0
[ 1971.200377]  ? __pfx_vfs_write+0x10/0x10
[ 1971.200409]  ? __pfx___fget_files+0x10/0x10
[ 1971.200471]  ? __fget_files+0x270/0x480
[ 1971.200552]  ksys_write+0x12b/0x260
[ 1971.200588]  ? __pfx_ksys_write+0x10/0x10
[ 1971.200631]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1971.200698]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1971.200763]  do_syscall_64+0x3f/0x90
[ 1971.200818]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1971.200872] RIP: 0033:0x7fe4f88bdb19
[ 1971.200899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1971.200934] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1971.200969] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1971.200993] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1971.201016] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1971.201038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1971.201060] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1971.201123]  </TASK>
[ 1971.214298] syz-executor.1: attempt to access beyond end of device
[ 1971.214298] loop1: rw=2049, sector=92, nr_sectors = 8 limit=40
[ 1971.217246] syz-executor.2: attempt to access beyond end of device
[ 1971.217246] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1971.217266] loop6: detected capacity change from 0 to 256
[ 1971.217337] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1971.219836] FAT-fs (loop6): bogus logical sector size 20416
[ 1971.219868] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 1971.236185] syz-executor.0: attempt to access beyond end of device
[ 1971.236185] loop0: rw=2049, sector=100, nr_sectors = 24 limit=40
[ 1971.236288] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 1971.273376] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1971.300438] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 1971.303149] 9pnet: Could not find request transport: rdma
[ 1971.332982] 9pnet: Could not find request transport: rdma
[ 1971.403297] loop2: detected capacity change from 0 to 40
[ 1971.404399] loop4: detected capacity change from 0 to 40
[ 1971.408035] loop6: detected capacity change from 0 to 256
[ 1971.409640] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
[ 1971.448866] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:18:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 45)

04:18:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="18", 0x292e9)

04:18:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2100, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:18:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 45)

04:18:36 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x20000000000000, 0x8, 0x2, 0x5})
mknod(&(0x7f00000000c0)='./file0\x00', 0x800, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
sendfile(r2, r1, 0x0, 0xfffffdef)

04:18:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = syz_open_dev$rtc(&(0x7f00000001c0), 0x8, 0x7024fa8787038564)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000340))
sendfile(r0, r2, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0xf0, r5, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0xfe}}]}, 0xf0}}, 0x0)

04:18:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:18:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
fcntl$getflags(r2, 0xb)
ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, &(0x7f0000001300)={'\x00', 0x5, 0x0, 0xfffffffb})
r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x9, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="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", 0x1000, 0x7}], 0x202080, &(0x7f0000000180)={[{@utf8no}, {@numtail}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@dont_appraise}, {@permit_directio}, {@audit}]})
pipe2(&(0x7f0000001280)={<r4=>0xffffffffffffffff}, 0x180000)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000012c0)={0x0, 0x1, r4, 0xffffffff})
ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000001240)=0x2)

[ 1986.588344] loop4: detected capacity change from 0 to 40
[ 1986.610386] loop2: detected capacity change from 0 to 40
[ 1986.611067] loop0: detected capacity change from 0 to 40
[ 1986.635170] bio_check_eod: 6 callbacks suppressed
[ 1986.635182] syz-executor.2: attempt to access beyond end of device
[ 1986.635182] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1986.636605] buffer_io_error: 1 callbacks suppressed
[ 1986.636623] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1986.639331] FAULT_INJECTION: forcing a failure.
[ 1986.639331] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1986.640413] CPU: 1 PID: 11360 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1986.640973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1986.641520] Call Trace:
[ 1986.641702]  <TASK>
[ 1986.641866]  dump_stack_lvl+0x8f/0xb7
[ 1986.642153]  should_fail_ex.cold+0x5/0xa
[ 1986.642450]  prepare_alloc_pages+0x178/0x500
[ 1986.642783]  __alloc_pages+0x149/0x510
[ 1986.643064]  ? __pfx___alloc_pages+0x10/0x10
[ 1986.643382]  ? __pfx___lock_acquire+0x10/0x10
[ 1986.643714]  ? __pfx_lock_release+0x10/0x10
[ 1986.644033]  alloc_pages+0x1a0/0x260
[ 1986.644302]  filemap_alloc_folio+0x363/0x400
[ 1986.644614]  ? __filemap_get_folio+0x253/0xcd0
[ 1986.644941]  ? __pfx_lock_release+0x10/0x10
[ 1986.645243]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1986.645592]  ? xas_load+0x6a/0x140
[ 1986.645851]  __filemap_get_folio+0x32b/0xcd0
[ 1986.646180]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1986.646551]  ? lock_is_held_type+0xdb/0x130
[ 1986.646873]  pagecache_get_page+0x2e/0x130
[ 1986.647180]  ? __pfx_fat_get_block+0x10/0x10
[ 1986.647490]  block_write_begin+0x35/0x450
[ 1986.647798]  cont_write_begin+0x4fe/0x700
[ 1986.648108]  ? __pfx_fat_get_block+0x10/0x10
[ 1986.648436]  ? __pfx_cont_write_begin+0x10/0x10
[ 1986.648762]  ? fault_in_readable+0x147/0x250
[ 1986.649094]  ? __pfx_fault_in_readable+0x10/0x10
[ 1986.649441]  fat_write_begin+0x89/0x180
[ 1986.649738]  ? __pfx_fat_get_block+0x10/0x10
[ 1986.650046]  generic_perform_write+0x25a/0x580
[ 1986.650401]  ? __pfx_generic_perform_write+0x10/0x10
[ 1986.650771]  ? __pfx_fat_update_time+0x10/0x10
[ 1986.651116]  ? __pfx_file_update_time+0x10/0x10
[ 1986.651437]  ? generic_write_checks+0x2c0/0x400
[ 1986.651782]  __generic_file_write_iter+0x308/0x4b0
[ 1986.652132]  ? trace_lock_acquire+0x16c/0x1c0
[ 1986.652482]  generic_file_write_iter+0xe7/0x350
[ 1986.652818]  vfs_write+0x9c7/0xdd0
[ 1986.653090]  ? __pfx_vfs_write+0x10/0x10
[ 1986.653378]  ? __pfx___fget_files+0x10/0x10
[ 1986.653706]  ? __fget_files+0x270/0x480
[ 1986.654010]  ksys_write+0x12b/0x260
[ 1986.654288]  ? __pfx_ksys_write+0x10/0x10
[ 1986.654576]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1986.654968]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1986.655355]  do_syscall_64+0x3f/0x90
[ 1986.655647]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1986.656034] RIP: 0033:0x7fe4f88bdb19
[ 1986.656314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1986.656663] loop1: detected capacity change from 0 to 40
[ 1986.657580] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1986.657599] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 1986.657611] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 1986.657622] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 1986.660454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1986.660965] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 1986.661502]  </TASK>
[ 1986.673572] loop3: detected capacity change from 0 to 40
[ 1986.695209] loop6: detected capacity change from 0 to 40
04:18:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 1986.770354] loop2: detected capacity change from 0 to 40
[ 1986.777563] syz-executor.6: attempt to access beyond end of device
[ 1986.777563] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1986.779410] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1986.801101] syz-executor.3: attempt to access beyond end of device
[ 1986.801101] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 1986.802275] Buffer I/O error on dev loop3, logical block 10, lost async page write
04:18:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 46)

[ 1986.827928] syz-executor.6: attempt to access beyond end of device
[ 1986.827928] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 1986.828189] syz-executor.2: attempt to access beyond end of device
[ 1986.828189] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1986.831042] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 1986.833316] FAULT_INJECTION: forcing a failure.
[ 1986.833316] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1986.835045] CPU: 0 PID: 11363 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 1986.836059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1986.837055] Call Trace:
[ 1986.837395]  <TASK>
[ 1986.837695]  dump_stack_lvl+0x8f/0xb7
[ 1986.838218]  should_fail_ex.cold+0x5/0xa
[ 1986.838777]  prepare_alloc_pages+0x178/0x500
[ 1986.839387]  __alloc_pages+0x149/0x510
[ 1986.839920]  ? __pfx___alloc_pages+0x10/0x10
[ 1986.840514]  ? __pfx___lock_acquire+0x10/0x10
[ 1986.841116]  ? __pfx_lock_release+0x10/0x10
[ 1986.841704]  alloc_pages+0x1a0/0x260
[ 1986.842206]  filemap_alloc_folio+0x363/0x400
[ 1986.842798]  ? __filemap_get_folio+0x253/0xcd0
[ 1986.843413]  ? __pfx_lock_release+0x10/0x10
[ 1986.843995]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 1986.844634]  ? xas_load+0x6a/0x140
[ 1986.845134]  __filemap_get_folio+0x32b/0xcd0
[ 1986.845740]  ? __pfx___filemap_get_folio+0x10/0x10
[ 1986.846401]  ? lock_is_held_type+0xdb/0x130
[ 1986.846991]  pagecache_get_page+0x2e/0x130
[ 1986.847546]  ? __pfx_fat_get_block+0x10/0x10
[ 1986.848124]  block_write_begin+0x35/0x450
[ 1986.848681]  cont_write_begin+0x4fe/0x700
[ 1986.849241]  ? __pfx_fat_get_block+0x10/0x10
[ 1986.849825]  ? __pfx_cont_write_begin+0x10/0x10
[ 1986.850428]  ? fault_in_readable+0x147/0x250
[ 1986.851040]  ? __pfx_fault_in_readable+0x10/0x10
[ 1986.851679]  fat_write_begin+0x89/0x180
[ 1986.852197]  ? __pfx_fat_get_block+0x10/0x10
[ 1986.852789]  generic_perform_write+0x25a/0x580
[ 1986.853406]  ? __pfx_generic_perform_write+0x10/0x10
[ 1986.854064]  ? __pfx_fat_update_time+0x10/0x10
[ 1986.854678]  ? __pfx_file_update_time+0x10/0x10
[ 1986.855310]  ? generic_write_checks+0x2c0/0x400
[ 1986.856062]  __generic_file_write_iter+0x308/0x4b0
[ 1986.856836]  ? trace_lock_acquire+0x16c/0x1c0
[ 1986.857568]  generic_file_write_iter+0xe7/0x350
[ 1986.858332]  vfs_write+0x9c7/0xdd0
[ 1986.858927]  ? __pfx_vfs_write+0x10/0x10
[ 1986.859541]  ? __pfx___fget_files+0x10/0x10
[ 1986.860239]  ? __fget_files+0x270/0x480
[ 1986.860914]  ksys_write+0x12b/0x260
[ 1986.861494]  ? __pfx_ksys_write+0x10/0x10
[ 1986.862151]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1986.862347] loop0: detected capacity change from 0 to 40
[ 1986.862950]  ? syscall_enter_from_user_mode+0x21/0x50
[ 1986.864194]  do_syscall_64+0x3f/0x90
[ 1986.864806]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 1986.865619] RIP: 0033:0x7f57ba4dfb19
[ 1986.866194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1986.868871] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1986.870018] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 1986.871082] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 1986.872137] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 1986.873189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1986.874237] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 1986.875336]  </TASK>
[ 1986.888289] syz-executor.4: attempt to access beyond end of device
[ 1986.888289] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1986.891217] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 1986.913367] syz-executor.6: attempt to access beyond end of device
[ 1986.913367] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1986.915136] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 1986.955134] syz-executor.0: attempt to access beyond end of device
[ 1986.955134] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 1986.956355] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:18:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 46)

04:18:50 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6004000, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0580, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
chmod(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = syz_io_uring_complete(0x0)
write$P9_RREMOVE(r3, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7)
r4 = eventfd2(0x7fffffff, 0x0)
ppoll(&(0x7f00000001c0)=[{r4, 0x800b}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x8001]}, 0x8)

[ 2000.050466] loop0: detected capacity change from 0 to 40
[ 2000.063393] loop1: detected capacity change from 0 to 40
[ 2000.073786] FAT-fs (loop3): Unrecognized mount option "vfat" or missing value
[ 2000.090259] loop2: detected capacity change from 0 to 40
04:18:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 47)

04:18:50 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x100}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:18:50 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:18:50 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000000)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:18:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="19", 0x292e9)

04:18:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="601c6c6b646f7366d8a02b00ff0101000440002000f801e8b3970f89d412c2afec4c9fb6d5027acb6bd3f95027dbcbb3507433a3b05346ea4138e60f2de14213975d60029f4387d6af8056852c4d13cb8deb6f1ba1c1d8d2011c718ae452c41b685553581d8a83365b3cfe5640b1e8131585ce07ba038336aa91facc71be4f4c8f5b767671698a37500cb4c206a879cf1a90d3bb410f545ad9604ea4e2d3681b8c209799b9fc44d41c52f024208ea504450a7c0d557a6aa0c981337b78d3db8c3d3d8c3bba0c328c172fd515350babc0212819a33446b32163afec6b4d16c5bf1265351cbc698a93d1d1c29cfdfe366f9062b9abbb91f2d201242fe845c492b263fa419b5407acb3f3ac0ca48856216b5dc7f1f77ab39a0f974f48d8a823f2fc5467ae54bc11283561a8f8f720521cf877ce1798930f69bf45a11e1decfd0451d499ffed35c8f470fc334784008d9bc4a3d03a459f0221513a2c74b874b8c846324f8b871496477c0000000000e1bbe7137c4ae44bb886a1b0d38f24e3574d42661124080b6cfe7c0a88d5ef952ca6896084a958c19b516f3e2ed048c7f26329bc90a9", 0x1a3}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2000.102457] loop4: detected capacity change from 0 to 40
[ 2000.106850] loop6: detected capacity change from 0 to 40
[ 2000.125289] FAT-fs (loop6): bogus logical sector size 65280
[ 2000.126389] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2000.139556] syz-executor.2: attempt to access beyond end of device
[ 2000.139556] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2000.140959] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2000.144296] syz-executor.0: attempt to access beyond end of device
[ 2000.144296] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2000.145382] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:18:50 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x5, 0x8, 0x7, 0x0, 0xe2b2, 0x95, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8001, 0x94d8}, 0x8010, 0x4, 0x6f2, 0x9, 0xf6e, 0x5, 0x8, 0x0, 0x3}, r1, 0x4, 0xffffffffffffffff, 0x2)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
openat(r3, &(0x7f0000000240)='./file1\x00', 0x204100, 0x4)
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:18:50 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:18:50 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 48)

[ 2000.263032] syz-executor.4: attempt to access beyond end of device
[ 2000.263032] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2000.265009] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2000.265474] loop0: detected capacity change from 0 to 40
[ 2000.270226] FAULT_INJECTION: forcing a failure.
[ 2000.270226] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2000.272251] CPU: 0 PID: 11394 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2000.273237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.274233] Call Trace:
[ 2000.274565]  <TASK>
[ 2000.274897]  dump_stack_lvl+0x8f/0xb7
[ 2000.275418]  should_fail_ex.cold+0x5/0xa
[ 2000.276006]  prepare_alloc_pages+0x178/0x500
[ 2000.276623]  __alloc_pages+0x149/0x510
[ 2000.277145]  ? __pfx___alloc_pages+0x10/0x10
[ 2000.277776]  ? __pfx___lock_acquire+0x10/0x10
[ 2000.278373]  ? __pfx_lock_release+0x10/0x10
[ 2000.278993]  alloc_pages+0x1a0/0x260
[ 2000.279485]  filemap_alloc_folio+0x363/0x400
[ 2000.280091]  ? __filemap_get_folio+0x253/0xcd0
[ 2000.280714]  ? __pfx_lock_release+0x10/0x10
[ 2000.281267]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2000.281934]  ? xas_load+0x6a/0x140
[ 2000.282425]  __filemap_get_folio+0x32b/0xcd0
[ 2000.283065]  ? __pfx___filemap_get_folio+0x10/0x10
[ 2000.283764]  ? lock_is_held_type+0xdb/0x130
[ 2000.284345]  pagecache_get_page+0x2e/0x130
[ 2000.284926]  ? __pfx_fat_get_block+0x10/0x10
[ 2000.285508]  block_write_begin+0x35/0x450
[ 2000.286120]  cont_write_begin+0x4fe/0x700
[ 2000.286734]  ? __pfx_fat_get_block+0x10/0x10
[ 2000.287348]  ? __pfx_cont_write_begin+0x10/0x10
[ 2000.288082]  ? fault_in_readable+0x147/0x250
[ 2000.288695]  ? __pfx_fault_in_readable+0x10/0x10
[ 2000.289345]  fat_write_begin+0x89/0x180
[ 2000.289873]  ? __pfx_fat_get_block+0x10/0x10
[ 2000.290453]  generic_perform_write+0x25a/0x580
[ 2000.291147]  ? __pfx_generic_perform_write+0x10/0x10
[ 2000.291265] syz-executor.0: attempt to access beyond end of device
[ 2000.291265] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2000.291775]  ? __pfx_fat_update_time+0x10/0x10
[ 2000.291820]  ? __pfx_file_update_time+0x10/0x10
[ 2000.291857]  ? generic_write_checks+0x2c0/0x400
[ 2000.291914]  __generic_file_write_iter+0x308/0x4b0
[ 2000.292895] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2000.293285]  ? trace_lock_acquire+0x16c/0x1c0
[ 2000.293340]  generic_file_write_iter+0xe7/0x350
[ 2000.296887]  vfs_write+0x9c7/0xdd0
[ 2000.297371]  ? __pfx_vfs_write+0x10/0x10
[ 2000.297892]  ? __pfx___fget_files+0x10/0x10
[ 2000.298461]  ? __fget_files+0x270/0x480
[ 2000.299057]  ksys_write+0x12b/0x260
[ 2000.299531]  ? __pfx_ksys_write+0x10/0x10
[ 2000.300049]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2000.300703]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2000.301364]  do_syscall_64+0x3f/0x90
[ 2000.301860]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2000.302521] RIP: 0033:0x7f57ba4dfb19
[ 2000.302999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.305141] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2000.306064] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 2000.306937] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 2000.307811] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.307832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2000.307852] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 2000.307909]  </TASK>
[ 2000.354477] loop2: detected capacity change from 0 to 40
[ 2000.399899] loop6: detected capacity change from 0 to 40
[ 2000.418393] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
[ 2000.603398] syz-executor.2: attempt to access beyond end of device
[ 2000.603398] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2000.605414] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2000.895765] FAT-fs (loop3): Unrecognized mount option "vfat" or missing value
04:19:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 49)

04:19:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="12", 0x292e9)

04:19:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 47)

04:19:06 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
r4 = fcntl$dupfd(r0, 0x406, r1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x4d6}}, './file1\x00'})
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="43253ceb0b707be7f1dcc07209f7ef98a12099489bf7cae247781176357d45de34a11c756e84550de88bc01e4dbfca990c73535f2b686e6ab0a3c7f085d2bec4a3acccb7b8d6ee206d361e3037078228405f8d5c5071019186803df75b749d73f53ae6", @ANYRES32=r1, @ANYRES64=r0, @ANYRES16=r3], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:19:06 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000240)="0171c5c656e5c2f973d88a1250d0f69ab96915efecafa8146ebd0098f517b925681ff6d9e00df2f30dbbb816413278b5856b1baa6d1c2f272e36f3ad8f1e8326dc37ebde6a2166b6e370f42cce6345f7a15cda6a25816c5b8dbb4292cffd23826e52c41acfec201b28d03a2b11853a079db0853944245d55c3ffa9484899c5c2e06ed2937eb9d4b0699aedcac8a6f16217679fb2e8def0ac75beddf5c58d13a4d3d2ee1a0323979d6a5a3fae48fa8c7ba7171314d116ecc65b7e7b53f3cb24f85eacc5c7ca14f5be5e7ba8188840f36b66d46495d26fb424ef96f6dc191dcc325807eb707f5c62a01ae2a5eb158ba78424a0e57ce75f18", 0xf7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r2, 0x0, 0xfffffdef)

04:19:06 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
setresuid(0x0, r2, 0x0)
r4 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x30)
r5 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0), 0x0, 0x40}, {&(0x7f0000000240)="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", 0xfd, 0x4}, {&(0x7f0000000180)="18006e7557add295e53853d904cc70a574e166acd470bcdd7b83b6878cd7f03838c81cea223f554433835f8f7cf3652325cbf81a53ae2f664ad39e550d7b318b2d0cf5686e6ab9e239ccfd5f760296", 0x4f, 0x401}], 0x80040, &(0x7f00000003c0)={[{@dots}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '['}}, {@subj_user={'subj_user', 0x3d, '-'}}, {@euid_lt={'euid<', r2}}]})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r6, &(0x7f0000000080)="01", 0x292e9)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r8 = fork()
process_vm_readv(r8, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
stat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setresuid(0x0, r9, 0x0)
recvmsg$unix(r4, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000194c0)=[{&(0x7f00000192c0)=""/33, 0x21}, {&(0x7f0000019300)=""/162, 0xa2}, {&(0x7f00000193c0)=""/201, 0xc9}], 0x3, &(0x7f0000019500)=ANY=[@ANYBLOB="1c000095e00000000600000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=<r10=>0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x80}, 0x10000)
r11 = fork()
process_vm_readv(r11, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000195c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f00000196c0)=0xe8)
[ 2016.047491] loop1: detected capacity change from 0 to 40
[ 2016.060735] loop0: detected capacity change from 0 to 40
[ 2016.103041] loop6: detected capacity change from 0 to 40
[ 2016.109815] loop4: detected capacity change from 0 to 40
[ 2016.114405] loop2: detected capacity change from 0 to 40
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000019780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="bebab689f6a56992f7d47a7601ef0f51b29491a97fd5d34e25e4d417d5518a27f882b16a14789a694b1160c9917f32efe6df0c555398f6d8d1a00845d35ceceb5b4824be3a26b3d1e166ed2c95ba9140dd23d48bd1d9837b0280c233c0ab9426f5ca13a0588b46604263dc0393b90cdaab48181e97267fdfce5a79fbd60e48e57153a895550a73b49280e18f5fa966b2d0f4ab097abb46256f1fe4c5815907b9d637e0b15dd1357f8ccb74da35fd0527cec46273ea6953510150654aaec594e49c49ba4ec1352a6c717b7e5d28ea298d7d8210e4b886bae0", 0xd8}, {&(0x7f0000000580)="720a293d4c36c5bbfc96d8e95417c51c6dc43efd0ad5a927cdd859ed7517e0c937dd876007f5b0aac7955d4d735e405e05c576de850dee6151692c55b2b3f323146438c11c762edc26151c4450f3207089453b66208109287e7ef08de033a9ba3ae565b7243bab0a306d8d2327265e6461de02ad1a6999871e1bf02ae2a9567dfe0e25bad884e512bb627ee7bd8d307e0d20ab424682b498f3c7e45e0666ecd117dc3524cc09eb82aa94b95400f47394445013052e7f0bc4ce38826b52531b9858234b25e213a76faf0367a1008dcf5a111c38c2c21392d7725a4d7a0a", 0xdd}], 0x2, &(0x7f0000006d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r4]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8, 0x14}}, {{&(0x7f0000006e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000081c0)=[{&(0x7f0000006ec0)="a7d860ad5cb8b1db220d345ca8dd20ffa406c6d24d1c94a2cdb3a0bfdae99dd39c30", 0x22}, {&(0x7f0000006f00)="45c178d28b0ad71acfb677a0c5a7a6e607d960275c8f4f2f49da5be9856fa5660413d14d5f4c6228d4f2f930129b8700c1e12f7d1eb5fe7f4d0c32ff304c972436c7e86560952ce92fd8a797bf1c5b3e54a375fb0c9cef", 0x57}, {&(0x7f0000006f80)="95b68d88915b89de1f", 0x9}, {&(0x7f0000006fc0)="3badcae98b9ca07133a5c53c0d51045e9aba58e757762bca352fe9186f1b0eaf98b15d392a36ffb82c459a67ca4a64469f859dadb1365d078d0cd09abc9d9b63f809d2bc1fd7f0880940624c71eb4867cff05012", 0x54}, {&(0x7f0000007040)="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", 0x1000}, {&(0x7f0000008040)="21a61c0a5f6a298243443c825804dccceabd1d17de3f61a20c7cf93f133ca2787596e6443ffec8032dc1edfc4a313480c5a78d4ca4f49dc811eb5ac4", 0x3c}, {&(0x7f0000008080)="bd3d4e7dfeea7318fd00631abeba1d03bef9d037ed2cbbbc7b20e574e426fe8ef5ca4472ecc53c98b7151d0184d1631dabe8ad90fda571d4dd57062c8f58ce3ba779cc4dab8e69e6bf287856a1c5e582d20fe4520c34d1174e34dcc30ce308a4f313b4c65443c1360fb7ce7c1b2b4dc8088c02a5d8518ceddf848abb12c75740653fac1b6221add3b40c044cee406cc4b74457452dd3851ebb5aff0132734848a235e249a80696fb27baa1542415857f62901624196a10353788907ccaf9472bfcdcc9adae9bd9b9deb121", 0xcb}, {&(0x7f0000008180)="12129104532951e252945b4fc3c0553425634d", 0x13}], 0x8, 0x0, 0x0, 0x1}}, {{&(0x7f0000008240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000008440)=[{&(0x7f00000082c0)="de8787c330df389de02079572b5a9e1a8e53de59e63af46762a0aea14b98c931cc5d09ece33f59388a095acefa6804fbd5667a0881dd4141dfc583426da6b07997dd57d6df315e2fde1a690a70c06c8ff139bce97c0314a7938ad1d2dbf37003315513f581e27a5d2d718aeea86a94", 0x6f}, {&(0x7f0000008340)="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", 0xfd}], 0x2, &(0x7f000000e700)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r3}}}, @rights={{0x28, 0x1, 0x1, [r7, r0, r7, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x90, 0x4804}}, {{&(0x7f000000e7c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000fb00)=[{&(0x7f000000e840)="0d6a8e6d54b5afabe7106b8c0ff62b2ca9a82dbf800d03691f482006498208480b6c32f5be34ae635daf8fb5ad68bc42de542c3bb033e74bce1830182054b4874718029d17a7332ad0d745edd79746b1feb5acb137087431d1d2c0bd83fae927d5d49579df26a04cd3affc582a66ae5c006afabe", 0x74}, {&(0x7f000000e8c0)="5b9d68bb1aebf51a2b26e73f7a1d126307b67d884cb519536966cc5939d1c24e4c6e278edf9f517af756e99bfb0052857c1e830a0bbdbef12d32ffe4377309f9f34e507853bf5965ff80d2e1313975109133c5bce7132663", 0x58}, {&(0x7f000000e940)="d2a92f5ecbb5f9545a80206f05289a79710c766da591f27ecc28519f86c44645b7d29c26b7f60bc4f00ad75c0f7d0b8547b9af7f3c9822ee731c0807a420012e36d5bf5b030c603b6333cd16da4410710aebcea17dd5a6d412898d1c3ae64e3f83ccdeb591b94cf8134d6771c280f2376000eb9f12bd9fbf0b728a3df9b79a0b48192496a55b299de0155a849c4d5ca52ecd75842e7c6b105459f6e793d32e2269c5432c9e6c8aab49dbb5bd006909884929cdeb9f7e128ac4367176cb9a5673c0ef9efcf62fee9f0f8451358899bcdde4bf125f71a49610eb0c5b0440734df2bf9f9526fd8f0fd783c36e00b64502df115cd047f4089d6154f16592809cbc3a7031644c61c012340ec8a7c31eb164f9a0e8746a86c9432dfbf5d71ce3ab7b02fd5ac2a8145c5db0a01aa00c72bc7fe06d9e567b3bc90e645a868f248be226c3b34c063dd47a9c3d5e2d64fccba25756b04f4525a6377bb6a1a72b05083d9403cfddbcaaebc956aeff5895aa454416efd71b0431748e19e801afa5bc1d5712d4eda8c739e2adbe6d422d5ab9b2062129799dced4428d6c9429ef0c85b045f68a64afdb79ed4ec58c179edcfe2f9e3f601827faf190fb1b1a60f6437200debe35c3f95cb5366d9642a2e58b25fe13b25810d796d126c607338de61c97e6874e688f1bc88790437657ce6e06452c1547e36c9fc63572d03e0c2fad291c5cb7affc9e33fc29a39270587c40e77fbea683fcb48d43c753183e9b80c4e1fa2c857dbe3272abc3b6f5f1d20c9b4652143a9516fefdad472433e068bb5ed9923aa4bb6317e1a84f6e8a1987b81adff4230cb408f5edc217ce084058257154c870176b29ffe0ad11daa08cd637c116312ea2b60610454b623cde4722d751f71b6e8c8acdc17442bc277f520af3d90cb53a29dc598d9d2804d1049c318a4a35fed9b43557fe39f8d2e0a2c8d0c8f606e6cac1b600753351594e9323d715a5ba16e47edec32df6dd8cabdcf32f68c76805f2f2151e35af996f72d62da1b42c2384dd981ffb71356e3c2d5063e749e76bb8e5432c7d3604a0f703fb53cbb1c4559a185a38b0a8afcb64a2fc7b87e7e46b2986653ff9266b1f9ca7b51c358eedb7b31a141a44eb528939f741b74d20d1f96a94e862617d44d11c684c06dcde67a086c5612c54b69324aad6340a632b295f90d83c84cdbfe8289c570bec6e791dac5f90e0462539593923d7e13c4f21cc357379d4100c11744a34da1ecd88cb0fdefadca9a5b460d2ed5fbe998ee83d785e6ad8ed6df76c17ef7e8636e4ad9083fd979860ed8fa693dafc7f6e42fa5fef4601a0300be5a6445e9f0a5c596a78f3fc0e235ec586de31de3d22a442222fab4f005bfa6db5df3127511ac5c5f4de0e84855d05c603c6fde87b1c30436fcf0fe5d68bfec299994009b1c99ae48dd7556d1bfddbcd912d117e8d46c8886b698dc2853858ba50d8a3a15c5fbd17dc7e2b566b08449b03f28220560a3df8bf1a1a13b5c7cd6d2a1c8224b000fe7544333c69e0f1e351f17d46cb6260dfa4d44be5accc9b0d4498f47cc9967b154039115546bb4788382301bb11cb2fc86468af609d6b0614dcfbb37d218d3c157dbd1302c762f8f792437ebc37012acbf0da231261f23471bfa4b20e1a12929e014a47170a980f935185d914675e099fbd9cc7707820a44d68e27c69aaa904c0c7676cb3b7b7180c5a0bc65456393f9632912b8f252ab1da64d5cb29941a1b6ac71a7427c7be8ce5c82f2921ee4fd06dcfb9cdebc3bfaf395f53a0ee02b980b862ceba040ebf8ac056c0d29112e954926aad83dd3c37ddb4db42c47e6acc216aa09d1024a4a703161be747b62f4c3952ed7fa4e631495d1e62d1b28cf2932c37dfadec3e9ff04ee6c9df608abe520164e5be2c9ef44e231d6187f61d3dcf5eb3aa5598a17fc527d4beed48c0e16b93f69d281d7c7fcd2186815e8e2058b8814cfdf3566713b7802058c84d3db718cff3629d8f0d6c5c4b5a59108750d9a04e30a8cf41c498275461c67638d6b8f1479c022d74a6a7e2d49360106d01b1bf6af50e36b973d00801ea73a23cb68d818b410fe834a127308c29186c7f118830580d1efea00a8902d3578ec5a8b98953b4aa520492d2929facfadd344718a07485b41a5f3cca835c209cc906e77bea8128c3b3c1bd0005aef095a6fc0531301c45aefce3a17fec5f96a23bb974a3bc8d70648dcf495f2400a171ccfb196e074a11fe47cc8d286c8e4f242229cf9a080ec370a6aebcd2142bef107f621f693c88ece5f1bd1499baf22af1af8e9874ab8497e61f14e25b26b81de2249691e91c4129aad31b5374e78812bc8a74e1af7662f6790c180d691cda85ed4b744a72eeb717443896d9f9ed5e409c4cd65653b2397ff204f3b5ee90343598f9baf3026c340788d61382ba62ee6a0cb761cc7fcde087ce5ebe9656dfd61ddee5261f5d44c99708ff23ebfc031f281e6c9729b712b2fc49e7421002fcbe7493fb40d4c3cc1bf2b5f49a1c9c6aa132fd7fb648ae77a9144351e1d0b4eb27a9897f466f9124ef41f02a207574b81ebb4aa06d505b6b70b3783f2872c6aa9d3afb7806e309bed7f7377e01f7101eb1e66aa0f51d08bed8b7e0b814b751e81bc8ae78c318d15488c7253e60b3ca919eec45d152f33153901a5792759a50d198a70534730d0341cdee37842f3887022acf39ca6b4dc1355593162a770184be45a7758d3c00d342a299d527f856ad5a6ac14eccabff08c4ef1bfd036535ce47117ba12342f4942211ed29479d9435b4b808f386417ad46d002ba4b0f48f02888375ec6b458124374e2d84c1b425aa0e5ff776a63364d67613bcf9a58f3058594f7a812ff4e8025760e2a4192906a92a50203b0a34168db513b8f4e26840c37f3e35930eecb8f96de19f22790a55a0bded121d2bbbfdfc13af3151d85fc29ca54448d4b6207fd98cc37dd277e032fcc87ef4c9c121c06c5c7282493c10d389b0caabc39ee70ebd7c448dd140f5df3aae09b891b45f3e03527d4c7be7fb61b87982349342d783244e993e173a34f587b0683ae2bfa817ca91b1317b07cd8f5d88a49b9b34e4da540b4754dbe3b8a06e120d69c99e5dd708e206124084e3cb6ad84a7b41b0eb153b91b1d50dba18ffefc171022a30bcb79f18baf70c3e2af8bbedd29a2d8a172b971597aafebf0369768a9a40ff604cf5f8862ec8399dcf1e4185934c43ebf0a6528d8d58f58f7f881db699ebc65786489b3cd652e798ce1897dd5fe91af5fd3683c1bc9b8e076523a2b2ea4becf4da6b85daf5affde110613477dbcbf8434a1841c5aab73074c35bc6bbcd63b56cdfd7918b880c651487e32fba3d12f00995e58c884e2777e458ad3d2ae2c82a7ae69685679087deb310aacb62589237d824f062f2946d769b5c6f1ad735ccd5009232ee9402117e40acfa9f24ea64b3e9a3b1d5a188e9b07cffdead0e6e0e3c9152ec992dc2270cf09a0a8889dabbe18cb62e2b91a92c51a137ae5d09c58f4c94a41d68cbac0868825568d1876877369e3ec0f86d07f27c3b77b1fbe6bc0b6498d7d961eca9aed575c18827bc310fce3c6120389b2003ef32f37c79ac47e119eeeaf96b41a98a5c5ac44dd02f323b0e094c1a6aac290099852c03cc4fe6536f5c70d2a483ec604c839767ab2628d6b73276ffa3d4077971b206ba6f946e51712ca8218e5482a45dbfa41cb515354e92a954e22ff26e2d268f1b310d80db781c2420239a9f40420ae0241c2d7c6076d61733e0046706b301e908b068b87575bef2d620041223e545d55df9155f1f0a83f6806cbfb212d4885e73a8c31e19b326d4a90f0d4724d226c150898e78ba31ad249f0f68ddba946802cfd5b891416c7040cbba81a8dd24134c03f028df3e58d12317c86c010ac3439c77dc1939c24b37dfb60851aa9e82fa49cad539a081574048732ce4a84084918d15309b3425fbae2b1369023ead6088d3fd5e55c32889920503268a1c17b6457459b40e42315c6ccac0eb3325a4363fc37de8f09eea13dd878708e83b2eea2050ec0ef24666273704276e86d19d401740d1484003e1b13c62d2faae1cad7734dc47c2d24e00fca619f2ef1e064456c5f4a7b20e6d69f56e195ba4e4563bcf4a7003c7ce17c84c6bb183b8baf9170395114a3d2743846db9090b17e6aec9545a093123b5e2c2d47663ce11f848bf77e91041a26300300abdbcba35975c6f9bb67f6e8eb37140e5ac93ba2577f965994778ac9b381124794594312dac161554bf70bc1dc85dab14596456065d6f138803ef961701049e7634da918baad9944ffff92878e3a7aebee992350c59a7d04d742c989eb975f0068765593efbab6aff02c0825b681a52741d37236bf137257f399bdd2a3c77b968fbab8bb9583a172072b67579ceadaa4facb560e8f491e90360e2d813ca245634649824600aa6d58d730abd4af587e4faa0275b3d3c58a709d2f82917f1048a0e05f2345c9c4806dedbf2f77302f4c0d951dfecff27d1b78752e1d8afeef6ee807ee1b1278dc17288b69bccbad19695f599612a9a6c68532713fe25e638ea31557ecb45fd046675e50604414f233f784c2fdedf54d5d89e7a7bdb9b9c0b13e716fcdf74be8c7dad668250291454ad86e26c1bb53640d0fb5b2a1d69d17ce7682f0ad9d016b970449be677985a351bb8c44bddea9fd3ceabba104f82b7f09ed95be288a29dea143b38504402502ffbe26147521fdbe7d9d07e4b05b1ab3aa773249835ff8f6dfcfa681bb077f764ffc3f147b1b3dc63f7bd116a3d8baf195005ea981fe1459135167b9175127348ef1f05607702279eb7075e607169130d1d1077ffa34de65a540fed7e2cad38592361f6d9c6de6781407f45a259dbe812ed079e61d9e7d43a55bbd8d73fefcaf6551e2584a65037f82a028ac987e40cbdb348d1576c5cd9b61ae087035bc1f83539e6d86e70ba640349bd3bd9aeb750bd8d34e6668a82c4ab10a7e9ea7fa36ab3d36053c880982eb7a3814277cc8e5058d81b40eb77339be50a2456655c401eb43fbcde92d8ebc85e78e72dac281afc5a65257680051381fb426a62397fdd3629308386ef9dae19974fad83b1fcdf3a61547428f67980ccf1fd2d90ef08237908e6bbcc88ef3b5dff8084fe58b2c779fb0375f7ccd93d5eb5f746bc0b92b56f56c80eee7dcd2c3aec61838ba82914cce939f6a66bb9b6fdd209b7091ee3ccd12d60922eae220f3f1d7fd348885c56eab0138b5da2647f37a29860f1fc17d3a996bc3cb453c2c1db6624591cbab053b9ee4d8982bda8065adeceb7759486d1d994a2ade8f8b3aa99315e24b2802c73b3fcc047eccaa2cd57ad0a27992ed122b9447d6786c55289aa956398facac22f9160a154de3479a726ef2a2c37dd448660e7edceb4a116119f03383138558b427909e5943ba9d8d6ef2fd35eee31ed783d3bd3b15554605ae85a9abde53dd51be84a10478065635b3b9744b630d3da1134e8e836e043abafc19ced5858ad58d99f617115c5a65805f5cd431c6b75f10cfc94b4c7c0d5b678102d61b2570c8d49a50d3024f177206b174f289ad3d0aa7a43c8cc9b3ef98b949dd6a388020fd08e0678a1842b63aeb27d3b18e8eef80054bbe97305d30e5641e32e60aaca2f87c7ecf99ba7d5d3350753117da0eb92cd239ba90d52e9fabfcfa512e62c18e6fe9adff7a519ad8c469a04ed414ba2de2d65cdd75eb721b2a90a4f972d50caf309ba34a74c1cc85fad27c400513b703aba8d25e67fc6d88585b1", 0x1000}, {&(0x7f000000f940)="b4f5bec250441330bf2521feefc8b9e4bf3493168378b2f0bd03ac643cda38ec0f389de93d35ca70ba18dfd72405f90183a765e03fcfbcaa640f00fe9213df18862efd622b690c03282258774694cbc143beb4ee778ddf1e4fa79e9120636eb570c8948fed6762ba2a48c6e838745397c3ecd7eac472d691b6148e253a0267fdab4cd0b0e5dc973df491b77a57869a0433770a324997ec346e0d1a9f0cb2fdc01740a1c0794fbe5f6bd1ad4bb4f6db751db55de4f71eb5088925a20070f3b595084814a69a0dd5a0b4bda3b0bca2aec9ef4bfbb3d0c74089d3c7d09c85b884c089d3ff351815e063bb598632e0ade8f81f4c", 0xf2}, {&(0x7f000000fa40)="50f1e300708b21898de8596df6218d737b72700284818ce08f6e0868497c909ce5e6c019b7d9cb982135dd963f6106ca8038fadc88a67abbeae460863d0abfa382b331f67f6b6981b96992fc4d6a9471a07010899889a724823d0b4f647284c21257dab8ca386a164acdfcf99849f76881737459f87f75814f37cca4a2b60ccd293a14087fa820d1920e107d00c1f2d20f831d111c78e960d1471d2d7f26e2e4cec4ce1e383c673cf473f35ce1cfe4d2aa08", 0xb2}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r3, @ANYBLOB="00946d9aabc578dfb38250840f"], 0x78, 0x20000010}}, {{0x0, 0x0, &(0x7f000000fdc0)=[{&(0x7f0000010040)="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", 0x1000}, {&(0x7f000000fc40)="9c2f22d24cc8bc3a575427c6ae09fd5daf50bb96b0cc91fcc82117dbf47c68de29890a9217f714f04a3b72094d2dd0766916e2a959fc186d06f90829eb0c057fa472d3a44d0cf9e5b91c9011a1e93b24107b46f1299b4338c143b3327171d8978caa33769b8f2a33c0ce7ae8dde4e672e7992eb26d53c274bebf72feb8328dc26f7f4ad636b2888d3713b21d97efb39ed2df6676f3e0c779c0", 0x99}, {&(0x7f000000fd00)="a8f42d70e9ba4a75a16d4e9c3ddaf538e4b67efd3cdedeb8e79d0eb49a1e11df3ea2608f7484c7b34325bad05a1d8bac67be3c7c4dacbcb2dcfc1c0228aa2d0205c10a434fd0400363dbb1b1bb9ff8fd62c359c38dd2e485fcc443f8ab73fdc910ad2939957ff177c80f61279c71c5f598669f0c0f011bcb9352761cb89cd813281caebd761a01a8bb42e79de4595d663acae7b6c380", 0x96}], 0x3, &(0x7f0000011540)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x60, 0x8800}}, {{&(0x7f00000115c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000119c0)=[{&(0x7f0000011640)="558d9b78d9a27f50970bd3c9a7a29f822d13546da440030d32773b3f3b369840bd689c5f1eb17da32b61893fcd8d40aea481c45b271c7abb488e848c0245203b226e95cdd78c303796a393bc4347dfa4e7a7e9ecf8f4308d4f12443eb7c4aa459499756d7be3fc4a2a29519ab77aa81833a3b1976b62857ad595e53ede544358eebb12f65b44", 0x86}, {&(0x7f0000011700)="aa9dc0d46cb240728aea95b6a8ba540d3bfb5c38814b3a8ca871fb184fb4314060a1fc2ce3d3a1c2e13af17dd835dfc1c2272858fd73786e08963b57307e4f63ed254d7a1f0a625c1d", 0x49}, {&(0x7f0000011780)="25fcf3954c980215577400f1284c8b90a8395454c2c91806122ba3200d0ab31ce3bdb1d0ccd634f9242007166fc03532ca31da2a62ec10104318a2ac1aeaad908be4b9af3f67dee9bb6d00a4c7d7f8ecf868096e7825343a373074ef3f41808f5db5a2a5150ef163ea315470412b09edf13278364883fd10813501dd590b62210d2b67e2ec2d52d6a872c2b10c3fed4e9e68ea841d9136c7", 0x98}, {&(0x7f0000011840)="f29f684ada7647a3139bff397c3469b41ab16787379a858e416b441425090c02017ee59054560e12b4", 0x29}, {&(0x7f0000011880)}, {&(0x7f00000118c0)="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", 0xfb}], 0x6, &(0x7f0000017dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}], 0x80, 0x4004004}}, {{&(0x7f0000017e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000019080)=[{&(0x7f0000017ec0)="2d0a3b4d7a6201d8cad151ddb777ff8ce0c5f997dd78cc5266c720b80c1de1055f0133652d795ae36f2fb7c5c117228fb81f93309459aad68b75d063b5655121214c94765c171cac5b20ea59ba4bd5e070084e18c6fe01587a18c68b013d95a746af0233da884b28984e0640e306848141d5e4e4ccd9018cbc3826a4a8227f7ba276e17ab7720848f532096071709b713d70ba06d328dcbe2180b11e1b749b9587be487b413ff4", 0xa7}, {&(0x7f0000017f80)="bda62e08b61bb9542ec38ae806427ee8291b2e29001166954e085e", 0x1b}, {&(0x7f0000017fc0)="42f49df4a9f2ac62b3fcffc25f5820d8bd6aee7c73ee9cc65deb8ad9ed4a19c0505fcbdfe03c68f855fbc8a0d0c692f70ef3ec27cfc9b0f0d58110c60c04f738bb7075e8c81e78a9e1f33bcb4993cee64ab45f0e7367510d10fb0a05bcd0db2abb13a3fe300678d061a161d2c818de92c8b508e48edf622d4a6e19affc99d48b3bca7b92c826ddb5fb78bf58ea138e8d0a8173d58c6d625ac9630878106da7ece6bcededa829ff505ffc412b342c82f743d1da4a962a100a7b", 0xb9}, {&(0x7f0000018080)="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", 0x1000}], 0x4, &(0x7f0000019700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r3}}}], 0x80, 0x40080}}], 0x7, 0x4000000)
sendfile(r1, r7, 0x0, 0xfffffdef)

04:19:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:19:06 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
syz_io_uring_setup(0x2dfe, &(0x7f00000001c0)={0x0, 0x5165, 0x8, 0x2, 0x1ab, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000300))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x0, &(0x7f0000000200), 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r4 = memfd_secret(0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9b49}}, './file1\x00'})
r5 = openat(r2, &(0x7f00000000c0)='./file0/file0\x00', 0xfeda4e3bb2086805, 0x11)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r6, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080))
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r1, r7, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r5, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/60, 0x3c}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/238, 0xee}], 0x4, &(0x7f00000006c0)=""/99, 0x63}, 0x0, 0x2020, 0x1, {0x2, r3}}, 0x7)
sendfile(r6, r2, 0x0, 0xfffffdef)

[ 2016.202414] FAULT_INJECTION: forcing a failure.
[ 2016.202414] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2016.204486] CPU: 1 PID: 11437 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2016.205543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2016.206594] Call Trace:
[ 2016.206939]  <TASK>
[ 2016.207276]  dump_stack_lvl+0x8f/0xb7
[ 2016.207822]  should_fail_ex.cold+0x5/0xa
[ 2016.207872]  prepare_alloc_pages+0x178/0x500
[ 2016.207932]  __alloc_pages+0x149/0x510
[ 2016.207980]  ? __pfx___alloc_pages+0x10/0x10
[ 2016.208030]  ? __pfx___lock_acquire+0x10/0x10
[ 2016.208086]  ? __pfx_lock_release+0x10/0x10
[ 2016.208145]  alloc_pages+0x1a0/0x260
[ 2016.208190]  filemap_alloc_folio+0x363/0x400
[ 2016.208226]  ? __filemap_get_folio+0x253/0xcd0
[ 2016.208273]  ? __pfx_lock_release+0x10/0x10
[ 2016.208317]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2016.208363]  ? xas_load+0x6a/0x140
[ 2016.208411]  __filemap_get_folio+0x32b/0xcd0
[ 2016.215424]  ? __pfx___filemap_get_folio+0x10/0x10
[ 2016.216099]  ? lock_is_held_type+0xdb/0x130
[ 2016.216708]  pagecache_get_page+0x2e/0x130
[ 2016.217272]  ? __pfx_fat_get_block+0x10/0x10
[ 2016.217871]  block_write_begin+0x35/0x450
[ 2016.218449]  cont_write_begin+0x4fe/0x700
[ 2016.219053]  ? __pfx_fat_get_block+0x10/0x10
[ 2016.219667]  ? __pfx_cont_write_begin+0x10/0x10
[ 2016.220296]  ? fault_in_readable+0x147/0x250
[ 2016.220916]  ? __pfx_fault_in_readable+0x10/0x10
[ 2016.221571]  fat_write_begin+0x89/0x180
[ 2016.222105]  ? __pfx_fat_get_block+0x10/0x10
[ 2016.222715]  generic_perform_write+0x25a/0x580
[ 2016.223361]  ? __pfx_generic_perform_write+0x10/0x10
[ 2016.223429] syz-executor.2: attempt to access beyond end of device
[ 2016.223429] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.224015]  ? __pfx_fat_update_time+0x10/0x10
[ 2016.224060]  ? __pfx_file_update_time+0x10/0x10
[ 2016.224096]  ? generic_write_checks+0x2c0/0x400
[ 2016.224151]  __generic_file_write_iter+0x308/0x4b0
[ 2016.224196]  ? trace_lock_acquire+0x16c/0x1c0
[ 2016.224248]  generic_file_write_iter+0xe7/0x350
[ 2016.224304]  vfs_write+0x9c7/0xdd0
[ 2016.224343]  ? __pfx_vfs_write+0x10/0x10
[ 2016.224371]  ? __pfx___fget_files+0x10/0x10
[ 2016.224424]  ? __fget_files+0x270/0x480
[ 2016.226095] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2016.226448]  ksys_write+0x12b/0x260
[ 2016.226482]  ? __pfx_ksys_write+0x10/0x10
[ 2016.233380]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2016.233429]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2016.233486]  do_syscall_64+0x3f/0x90
[ 2016.233535]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2016.233582] RIP: 0033:0x7fe4f88bdb19
[ 2016.233606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2016.233635] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2016.233667] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2016.233688] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2016.233708] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2016.242580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2016.243505] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2016.243565]  </TASK>
[ 2016.249276] syz-executor.4: attempt to access beyond end of device
[ 2016.249276] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.252021] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2016.283333] syz-executor.1: attempt to access beyond end of device
[ 2016.283333] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.285426] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2016.309558] FAT-fs (loop3): bogus number of reserved sectors
[ 2016.310385] FAT-fs (loop3): Can't find a valid FAT filesystem
04:19:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x10)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:19:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:19:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 48)

04:19:06 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000b00)={0x0, 0x7ff, 0xffffffff00000001, 0x1})
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:19:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2016.473888] loop6: detected capacity change from 0 to 40
[ 2016.510319] loop2: detected capacity change from 0 to 40
[ 2016.585101] syz-executor.6: attempt to access beyond end of device
[ 2016.585101] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.586864] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:19:06 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 50)

[ 2016.622342] loop1: detected capacity change from 0 to 40
[ 2016.682260] syz-executor.6: attempt to access beyond end of device
[ 2016.682260] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2016.691643] loop4: detected capacity change from 0 to 40
[ 2016.740409] syz-executor.6: attempt to access beyond end of device
[ 2016.740409] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.742054] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2016.802005] loop0: detected capacity change from 0 to 40
[ 2016.817017] FAULT_INJECTION: forcing a failure.
[ 2016.817017] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2016.818934] CPU: 0 PID: 11469 Comm: syz-executor.1 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2016.819955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2016.820973] Call Trace:
[ 2016.821300]  <TASK>
[ 2016.821597]  dump_stack_lvl+0x8f/0xb7
[ 2016.822120]  should_fail_ex.cold+0x5/0xa
[ 2016.822652]  copyin+0x19/0x120
[ 2016.823108]  copy_page_from_iter_atomic+0x276/0x12a0
[ 2016.823757]  ? __pfx_fat_get_block+0x10/0x10
[ 2016.824326]  ? __pfx_cont_write_begin+0x10/0x10
[ 2016.824928]  ? fault_in_readable+0x147/0x250
[ 2016.825516]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 2016.826229]  ? __pfx_fault_in_readable+0x10/0x10
[ 2016.826859]  ? fat_write_begin+0x95/0x180
[ 2016.827407]  ? __pfx_fat_get_block+0x10/0x10
[ 2016.827986]  generic_perform_write+0x2cf/0x580
[ 2016.828589]  ? __pfx_generic_perform_write+0x10/0x10
[ 2016.829238]  ? __pfx_fat_update_time+0x10/0x10
[ 2016.829826]  ? __pfx_file_update_time+0x10/0x10
[ 2016.830428]  ? generic_write_checks+0x2c0/0x400
[ 2016.831049]  __generic_file_write_iter+0x308/0x4b0
[ 2016.831672]  ? trace_lock_acquire+0x16c/0x1c0
[ 2016.832268]  generic_file_write_iter+0xe7/0x350
[ 2016.832880]  vfs_write+0x9c7/0xdd0
[ 2016.833355]  ? __pfx_vfs_write+0x10/0x10
[ 2016.833885]  ? __pfx___fget_files+0x10/0x10
[ 2016.834455]  ? __fget_files+0x270/0x480
[ 2016.835040]  ksys_write+0x12b/0x260
[ 2016.835574]  ? __pfx_ksys_write+0x10/0x10
[ 2016.836137]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2016.836800]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2016.837477]  do_syscall_64+0x3f/0x90
[ 2016.837579] syz-executor.2: attempt to access beyond end of device
[ 2016.837579] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.837963]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2016.838014] RIP: 0033:0x7f57ba4dfb19
[ 2016.838038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2016.838068] RSP: 002b:00007f57b7a55188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2016.838101] RAX: ffffffffffffffda RBX: 00007f57ba5f2f60 RCX: 00007f57ba4dfb19
[ 2016.838122] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000006
[ 2016.838143] RBP: 00007f57b7a551d0 R08: 0000000000000000 R09: 0000000000000000
[ 2016.838163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2016.838182] R13: 00007fff704dd20f R14: 00007f57b7a55300 R15: 0000000000022000
[ 2016.838238]  </TASK>
[ 2016.852245] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:19:06 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000000)='./file1\x00', 0x208000, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
write(r2, &(0x7f0000000080)="01", 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

04:19:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0xffffffffffff942b, 0x7, &(0x7f0000002500)=[{&(0x7f0000000180)="a887377cdf43d863f0528ead63b244737f0660eacf9e1ec1ebcd88ebfa5b7c833391ac1cd3058ef0aa0b053caffeefef61", 0x31, 0x1}, {&(0x7f0000000240)="93ec9ff4afb3bbd324f75dad04feddb9db8b9d35b516a307ab5912d7e6be5e5a6b7ded99e906e74472fba5f71e47fad5f2b26ca902594b1bf3bb9a91c78a623097b69e0c6aaaccac00a6b1f52f3ec63b91d87e2ed4674eeb07c240bc0e07e1d9930cb8a59880cf0b76430bb0e057c204d88c15b8ee3544270641d9a2134be1674916b839faf3e935d56defb30fe482cdfc0022", 0x93, 0x3}, {&(0x7f00000001c0)="161e43f2c9a829234974d25c6fb596f6caa06892b83e2c", 0x17, 0x1}, {&(0x7f0000000300)="1851d0bc35e38fe753b01f63ec88f911e7f043869f30fab98d3668dc9b34b7cb841677a4c5fab181257cdc63cd6f13fb9615806efaee39edcfa8aae6659a44ef0f47699045987ed72ddb54891085621d87aa68f56a29e5d7e8a6528b52d3119bb234b8f5f52f1be4aa6364349af891e045d63add75638fbdd248d996cdd9b13e2996c6fb03425dec9fd0a30630c9f5fefff76d32040f6e9c86dc9ea196560f61820cc84b3f2144b8a4744a8af614b4749a5c16c1dcb695c13a3195a720eb6bf3d5b454a80ea322fc074a419765a27df03e3e34dbb64cb5df569d4f", 0xdb, 0x52}, {&(0x7f0000000400)="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", 0x1000, 0x3}, {&(0x7f0000001400)="fd26d99faeae839ac81d46f09a64c25f8454369cd8ab25ddced3d5f06361ec924df0b7c9e1797fca0288a05da85c27faeb096b0c2cde6ca1e8f75c391b386b6f591669e3a608d10b98e62e2c24c4cc02189dbdcc68286c3e38ee4276639c0109da868684d206b1fcb2be66e75b419df041ee2d3316727ac17ec684816c7f48bda1d04a246b2e7355ba601ef363726e686825c6a78a1a69df56a8bd3eb35e50cbefd54f3b2e936a770165a2a622467fa9ee05a2b80b1c5d427d43054af8e53599aac0b9c04824739cb39a4f018b8bec47c92da597d55ccbcff4fdc4e5969b1b00169d2cd1dbc679168e1e9389fa885df04470ed63f77c6de8e89466facef4310be04e0eaab4039d99700a93123d026d5988c60945b61e1d21f9483ebb08eaaa448977f0d84d1432e40c5a885e7912c10e0d4214b3aacb8d0cd0a8c8a63bd2590b58cf4d65f596baa4526eabc73e37d889f605fe68000bf0bc730bd989450f6f98ac03afcfa2206266df39a7aa2f42a101585691c68cc239186de9697cfb71db442df25ae55fe025d98fce4bbc04d859a54dae70053c1a25795b41f5b1fc304978556b7e314ec53062f222fc0ef1e393be28dba558479bee02f4f6d891a8235833eec866882229c2e2766988cbd98ddeb5494eab63e7ee5e393f446e3b8c1618a380bf19885bbe722d6a28295b890d28768a082575d4e43a3f81873526990edd637067c2e9ccba71d2941d3f3c1b8a19b7a7f7de41b73320391853a5c853754fb73d8b81a9c4cafc9b42e324205410c7b6b4d5609380020bafbf5de3b22f3f87975b0ece8fdd601207b9fe97eef0edd8101be0f7e088a8127c826bfec39c1af8d6afcfa4ac1684a6b9d9bafc73ed086ff3ede2a0887ac8fe303ab52a0b0b1cd4eff20f20723f0b8d3ca00d4612d8236cc74e99ff86c4cc820ed1ec0867f47048b2bbb691170e0d25bd60896e1976c93262161238e759bb046951359860abf2ec6e44af60785ff998a0c05add34d245149a211bfb7dfb9cea40a8faebf54a214a8085937217915b4418995d38d2adfa7e80c94766a3a3c59dc9d52866dcbad9d8184bda4354083e5b3ba5242d586c18b7cc68121fce062afdef159a6737225024c37860b727662bd0d3d46754315440bc19e4e32256069099f19807c9bbbc7010dd54e1a73b59f9189ace53e6de3b8c2fcb074972c50c4b48fa9b20f865e322f8b85e2a8aabe425428386167d3cc50974819cb9155bca33a69f011875045e984cf86bddbbed9cadad0a8bc313a31ecd2ae23107c3cb3ecd185de468b381e4322ec5979cfef41c7e70d47c7db3469ecdf93eb8b91e9222ffc999c83913b329e561df66c6e2db07bc22e4a2f8dfc7a24cf445c5d675ec3b9911058a2ad7d9a5ae8a428c7c015b5e21767a0ff4b6f0cda3c7982ef699ae31b6d59f5a8f0f3402f773d4ec4778b569d42790ebd23658c04d9701f4f0338bf0f74150327db5d57bc54ca594cf9b42f7c80d73589e6540c501066d1124c39f15c464101843a3e1476de43dd8fd6b7e1478bd0319c26252c8e5e79ae679567b1f94399a2103797fec18ef9f33ca323e807d1edd17db5d14f0fcdaa0af3d6b42df055f5ad72cdfd1b115c0b10c1e63da26c7cfe8822638ca14254e01cecb703cefa85d6c686e7543e2a56585f00097a12b51d4d15c7c57a46fbc424aa58f7c879d2ffbf33f7b40506197a3a90e5d663516c8b8a353c5ac00bc99d94fc2064e5da405ed5d99cc04ebe3773ce754e648b5f8c8d6b213d13cb0fd1275d8db8b02c527e02f4866175cab601556824ec00da7bb57733529c8a886fe35598ae7252ed1706e3e78c58433e24badbcdcb054699284889801ab10b1871b905f6dc18f4c96dfe109b66d4393af620f818c00843b54fa59ddfe6d501651dcc6edad843ea10f44b241932b809f1c2ca1fd327529cd5fba7bcfdebe4f5ce698a3e558b1529839697d6c34777f127f6414bf52006664d26dafd833c22c5d33126d2ea4942f75696abfb967ef4ce1f53b2503a2e27507ca3508422bbf4e4cb0cf11716dce63c6a3ed744c70f154e23ac76874a174303a61addfb38109bdb70659d518406223b83168bd67b9bcc9c90b990992452c7df3eb0a51107820ad7022b80e5a6def18b187821026bb1bc75220e22bd70d74da801f4498b5acc51a5efa785a540f3c6d5230a785f03c6e3c7cd26b6014bf50c900368d9353e071a54cd62f40f282b22540a42c968e232b82e95735a6d2ece9c3ebaab8565c19aa243461532aa8b0829a326c0bd0f9388d7d8518494f9adaf5fcf40ae36b422d6562d95f6ac4a3f123a8b4be57fbcc025c7425d8abe44979274c95900276f1c5d2ddc0d8806b81d176c4067a97d2bff177660da4a0f6ab07a200ad89e128c3d32a529faada22c0e91c38f0275e6fa2642e38ce39c9bfb1a43701a146210c51644c4f68d236a10823dee07219660c3a8bade88e691b1a87255ec6fddff937a5eadff493de31e80a60119db9e39367be78e796f052c81d934b6d86badcd957e28237726bc2dc25757d9cf1611d4f3f8bf528056ac0921c03626ca3a269f85f2844011b3d386b45afd7c59e26a43c7bf0ecad7690304d6b274768fbdb396c0249a1f46833e66aab7eae78ec88128be89ec23106d09476a9adf6709042eec37e0622003603834ea2d982ff24ce647921e408b19844240c27a153468c3a3946f0fd77120efb40680b520b0973e375720b2c5e09668c23e802f78256b21801d475d02d428db7e96a8ea42f46430ff13c23bbef54c96fcc4cd7553513ea98aaa32e4d61b48a1f66dcae1763f7d03a0ac48d40c9e35ecfcde7f6f4088a43b2dfc93f40fcb70b1ca0d74abf1c54d32f679fb29f9537c1e9cf03348aecd51867efecd6927dc73446c064398a62ae332aa85025c8d4d719ac332a50c6eaadd7520efd03c095b3e00bc396ab5c668525d40b266019e50dcb27d642fe8adb54b98931f64cf3109a1e99483ea8d8165f19835d4993bd64684788151242b9f389f80cccab419564dc900149efcbb8e964c2c0e974b4ba745e7d086fe46362294bff5a5cf7cc0256adfd6e7465ffa95479873067cfd51329fafc6531e73bf73ccef41e9bcbce25d7833dc7e04d90b27a1d891e24d1cdad5eabc8a6003905689a2c3a4ef35d7f5020522d28da91efc978ddc7a8efa66f30aad5d962cb4b26273fb08c603c81b55313a6a436503869c86bcd90be49b18830b762c5afbc978252621d025d118f6386c9e8d66bc4f1c31ea725c640c65e8f3bc1b6956d107f15ddc264507a4bb4a289142340ebe3d43274a4ca1ff1b91b378e6e7e414927de1dd0ba2c8304ce43cb4bf8d9a1aa58be4c5e9c780e9d1d98b4c5daa68b706166d1f3469d1af65cb52b15f4d6d409653b88bf56e5ea165c0b3736bd6a46509465f32d258d062bb9489df9bc909cb674b5933a28c872a496d7e8b9b0cd3d2dbcdf8d46115055c09d69187607912de3d0dd65e96f295607a9846a9057de53d23e89fa87230a5f77e2a2d7efae94ae4bf4a3138768befa9fc715428701b99752350132430f051800efdfa3e643b8d11acbd69d3130b39301d248ad145c7a33c81e5230eb1e1de69192be82b672451aaf1a4b3cb298a52df499344b52da9257a2b79b46f83191bd70e3f4acf0ef4cd6fc4abf9778d4929e5b3fd9f56b6d73f20dd2d9c93bfee87cfebaf85c3346799ae221729d3a248d5ceaa381e26182bac370ad8d493934b5e0fe89f32b328d0eed4bd49bf034a27ac7c246827d00ed0e830733b501726c2d38f9135fccccea9e760ae73fc159b34a6212521961820788b872f873406f8fe251a39ae3caf853cf66866c64b8a3a62bd3b20a30277ddf4e1943f512965972683522b2eb19ce6de8e09cc10942e4ebe5cb48ec965d4c4e2b9d1e3058063cd36819569793189934ff280bb734ab87bd96357fd0c4f2cce13f1e030106cedaff25d12fcda06e84979a411315af05aa09a73c0a63606ce0613beb1be820b4d6ded2f4205118846ba508bb3233a765bfd5f93aad16532557c6c9aea14770e7d62861f2dbdcf52c081212aa42463ca234088fa6c6b0432814960b29577aa3c4ff5727eb6d7a0607ac495825876271abf15efaf5a65d182fece9227bfecbea78b398f2f51276e90c91232df966dc662aa63d8b1ff1154aed3b4a2be89de804107c86364e30551d645a5ca832103144d1dce89e7f6e3c4fa9a49fde3fc7ec3d58fe41c021306836461c53b3587f7e7ed1ed3f5d7e912ee922d639b3397402b4376772f211849189901addeae212d3c3932e04450cb02e7f4dc966722de4ea447bbdd71257d3e9e93afa5e0e22efe067f03d03562c7bb33730c663eb6c809d103629b5681f1eac3b501a741087e0bffba81c95d872bb3694a085253c5bf13366ea74c4eefa298cba39681098e47a77e5a1188abc63c4248909898246dac9957727c051ee21398532f99b59b0ba44a2b6555ca5841b85a1c559e23fa1fbdd23a96add831c6bd99a0a091f38bf1fc5bd63634d45374d34ec6b547a04153acc40a5a1298eb98ad9e9717e34b4e40e0910863f350ae221f2b1387fe6141f19df9d7b7e0691c89d0962678136b38d2a1463dd71fa79098268b3e636332ad7bb8b3480f13d1a775791f1fab60c75afbe20b4c30eeab1d404639ef20b97a2955dda851332221056e9a793f878a098ccf89949a2e821e8abc5610311661a497852180177c162a63979de66cc069eae43882e89dff5210f81b00bb50a879e46122eb738c5387c85ae2f094f4f2dd4854d481225dfeda80bfa6dcaee7f861ba72f9be58045bfa13d5bec3064930ea123c459f0789a2231688ef88499f1135ad644cca264568d342f99a56c9d2531feebfbd32f84886940d6bdc9812cc061d0e8e7606636a43a8caf371329291874678caf588108e3d9aab835803a1c1285143fde3b88add486965cf54f9bf9b9e5c83f3aa77c51496cdc00876ffa2291546a592e8bf6fedb900aed6e1cf951bf775960243e97f25f262ec93a696cdcdf3500375d4ca624c43f952000055a81034d6740d4a68e1f57f01bc190c425f63d9d187fd894e5d6a2a12ae10adc2d97492dbacda1f7d196d26400c024cba7c888a33f51e7b88ae3c047681420064294452465892824027acbf33dc1925f5d889c199347b2323257a19cc5bb63cd56b4297ae529ca1e7c4d7083c3f769d7a0679559728d9044f601aec3d79988aca5bfea0c886b5d248b9e0d73220ca155dc013daa563b46ec07966ffd2e2ed0e7563c66287168cd62d74cd8bcc44812fc37b333a2f6ad6778edf930a42b99d96e066d16aedec4f922de3e02312b1b777af061529c246a3b17cb26bb26eff96b600a042cb18d2978f449596229d5413aa30864a6397c6f9bf17e3d9388b5e8531352dd5a13eae546675d2d63f94a7841f3b79200ea62875ab4430a9d5d81e35e9a278c787350a5aaecf7c2489d1b3364738f13cd7d5891892d2c5188107f7717b6bca27e9419ee0f076c4ef2abf93c1984a435a0ddc6fae603a916adee0494ab39f256013db1603f4b7cd540c2847180c4d1681a43c35d7ce21ff30ed329fc71483d6d6e3307b515becdd6f7d0d2584a9362af4788529a99155c50d789f8d13caba52b2e1230a4835912e6831809289b9bd5d6c281d0a004b3e31d0b79f91f354261cac2d5c5bb0657f0881b610cb9925e08f781718523919c8635cc3661c5c0e418169351871f3d6a9c548ffbfcadc3ed8cca66fc9a758adf2aed93eed90d", 0x1000, 0x3}, {&(0x7f0000002400)="2bc71cfa61163e40ea698e3065636e52c821ce1431b3fa553fc8ddec7177c9299c2fd6058d777a5d085259bcb9e1e2cd7f31a0ebd353538a894f5dc44f8b27dd7ccf201f8b77b6d9b9e184929bd87fcc773bb62c308e87cbf9427306a882081d9ba075220006c8b09559d03030f319bd8af524221e776aa38f4dae5c1b95d41064544d78f2570f944ec71810c611ad85ee6da0a28e1d5fe5f35e8c28a8d4ac127bbe9c8f2843154b8b309a344245c259e2d6b6b1b38249d36cf6f24ffe50a7ab9abf800054a1", 0xc6, 0x7}], 0x80000, &(0x7f00000025c0)={[{@errors_remount}, {@jqfmt_vfsv1}], [{@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2016.937068] syz-executor.4: attempt to access beyond end of device
[ 2016.937068] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.939058] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2016.973347] syz-executor.1: attempt to access beyond end of device
[ 2016.973347] loop1: rw=2049, sector=108, nr_sectors = 16 limit=40
[ 2016.987534] syz-executor.1: attempt to access beyond end of device
[ 2016.987534] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2016.989508] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:19:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2017.032145] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2017.050467] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
04:19:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:19:07 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000240)='./file1\x00', 0x25)

04:19:07 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 51)

04:19:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 49)

[ 2017.194157] loop2: detected capacity change from 0 to 40
[ 2017.209058] loop4: detected capacity change from 0 to 40
04:19:07 executing program 6:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x28542, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0001000000000000002501000000080007e2141e00e4a64995568d6e0d35ffc404720339c6b996735581a1ff19c3dca953fe6f734279b11c7319db9ea802055b9347631d8491989339ece3d0db10ecf580003c107d93ebe9a2374c6764a8d1abce71e627787d58a6bcd39a05e3d8273b984168fbcaecce9c21d901fe0c6e25", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080005000000000008000700", @ANYRES32, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x20000000)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x44001)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r5, 0x0, 0xfffffdef)

[ 2017.329932] loop0: detected capacity change from 0 to 40
[ 2017.334851] loop1: detected capacity change from 0 to 40
[ 2017.342355] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2017.439960] FAULT_INJECTION: forcing a failure.
[ 2017.439960] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2017.441482] CPU: 1 PID: 11499 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2017.442177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.442863] Call Trace:
[ 2017.443109]  <TASK>
[ 2017.443317]  dump_stack_lvl+0x8f/0xb7
[ 2017.443666]  should_fail_ex.cold+0x5/0xa
[ 2017.444031]  copyin+0x19/0x120
[ 2017.444325]  copy_page_from_iter_atomic+0x276/0x12a0
[ 2017.444774]  ? __pfx_fat_get_block+0x10/0x10
[ 2017.445155]  ? __pfx_cont_write_begin+0x10/0x10
[ 2017.445633]  ? fault_in_readable+0x147/0x250
[ 2017.446034]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 2017.446608]  ? __pfx_fault_in_readable+0x10/0x10
[ 2017.447041]  ? fat_write_begin+0x95/0x180
[ 2017.447397]  ? __pfx_fat_get_block+0x10/0x10
[ 2017.447868]  generic_perform_write+0x2cf/0x580
[ 2017.448468]  ? __pfx_generic_perform_write+0x10/0x10
[ 2017.449014]  ? __pfx_fat_update_time+0x10/0x10
[ 2017.449362]  ? __pfx_file_update_time+0x10/0x10
[ 2017.449723]  ? generic_write_checks+0x2c0/0x400
[ 2017.450089]  __generic_file_write_iter+0x308/0x4b0
[ 2017.450460]  ? trace_lock_acquire+0x16c/0x1c0
[ 2017.450818]  generic_file_write_iter+0xe7/0x350
[ 2017.451205]  vfs_write+0x9c7/0xdd0
[ 2017.451488]  ? __pfx_vfs_write+0x10/0x10
[ 2017.451796]  ? __pfx___fget_files+0x10/0x10
[ 2017.452166]  ? __fget_files+0x270/0x480
[ 2017.452492]  ksys_write+0x12b/0x260
[ 2017.452801]  ? __pfx_ksys_write+0x10/0x10
[ 2017.453119]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2017.453550]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2017.453947]  do_syscall_64+0x3f/0x90
[ 2017.454271]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2017.454715] RIP: 0033:0x7fe4f88bdb19
[ 2017.455030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.456472] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2017.457080] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2017.457673] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2017.458250] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.458812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2017.459392] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2017.459985]  </TASK>
[ 2017.517477] loop6: detected capacity change from 0 to 40
[ 2017.526886] FAT-fs (loop6): Unrecognized mount option "D" or missing value
04:19:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="05", 0x292e9)

04:19:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x2000024, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:19:24 executing program 6:
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x44000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

04:19:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 52)

04:19:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 50)

04:19:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:19:24 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x401e, 0x0, 0x0, 0x40000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x5)
io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x2, r2, &(0x7f0000001180)="7fb6eb0c4c65930a76f1941630501961ad566271fd43812e368dd53cb274bf54030308609d598d3d0adf58d89ece0546f5bedd9f5dd78afc475e68cc1e53cd0ca8d179510556d096c89190cd23f8b056f90e09f2aa3ed4dc689aa45e3492ca475123b768219711603da0ce22fd1d0b9a8214c7c8174ff37b400d8a92cb41ab5fce32633b1af357eccfd92c0840604dea0abc25fc1b5cae4a2c2e440f6fd56c0d744d9e4f1e9febaf217466990cafe0e0944fec6c5b58b28d63f0fc2cd2fb307bbc5818df4988a0be350aeb8ef316dd3b6e3da747c4a0ca2bf03358d6bf0540c2950476413b414918db9d2425749e8edd429756849892efd3c403722fb06a9fb2683fca628b4a", 0x106, 0x1, 0x0, 0x2, r4}, &(0x7f0000000500))
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000e40)=ANY=[@ANYBLOB="010000000100000d18000000a9d3a0d0c0441f7e10b48873624075d9b0b3bc9a3a4bbf540b2b29ea7081ba3f36ff9d3bcbddbe2d9bca7362bd4d70e2fd22c71ce3db6a", @ANYRES32=<r5=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00'])
io_cancel(0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x9, r3, &(0x7f0000000300)="af5c42f2dbfe8bdb8b0a250e8c5a62debe96f78acf00dfc1905311e6250cb8e20a9bf36ca22e0c98c1a0a3420ecef69fd0ad72c731951ea336e7c1ff4d8afee5266e26de4f70fd59c540312b3cc8c00a0ed753cc598d9e04b536e834fee28fd9ffb12f896057b9e9eaae9e93f0051c3bc135db946e9dc31dfbdc965d742b7c6444e3541035919d", 0x87, 0x100000001, 0x0, 0x3, r5}, &(0x7f0000000b00))
read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
io_submit(0x0, 0x6, &(0x7f0000001140)=[&(0x7f0000000c00)={0x0, 0x0, 0x0, 0x8, 0x5, r5, &(0x7f0000000bc0)="00c9cfca256f9b86a3602c7809893722a1cf77eed313023d8c0d6af79b15f6581b543645", 0x24, 0x9}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x7, 0xfca, r5, &(0x7f0000000c40)="315d123e7c500afa25aed1a23bfdb2291b25c2847fbcaf9dcc0d48b5bc51491b31e2427882c7b2108c47dc3495113f800ab835010a2967a57fe0743164c273a5e4e6c47d2e1f0e4fb501df28e9c5a1fa38380b0dc7031bc39d3b238e61da9a3890105a36088f658f", 0x68, 0x80, 0x0, 0x1}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000d00)="8470b796026985f789b9cd00f57c65107b166f178cb283c070f51538f7344d3dae0807d01c3a44f9942c59e3c1666334af4a8215e70f8e6c5d936157f105cf8b19eb2bf5d7310fde6e3bc3b16b1ef304afb2bc6bc3af7d5314e446fb69789302794bb9ffc0b9f029de41f1317e475cfbcfc8e3aea72edb0d9a06d4eb250a1de094b2179a0e0cc4d4905f9b65b695b32741cdc6978c3cb01ff8dd2efac17e4751782c9c0cb33364e6ab4c8ab265e8d9c0a34278a8e41e5181533d6ff6194b0db54f8970", 0xc3, 0xff, 0x0, 0x1, r1}, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff, &(0x7f0000000e80), 0x0, 0x3ff, 0x0, 0x1}, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000000f40)="8c3b4ca13b84240e4d3f1f99c88db7ad5be711da33b35850892e4a471cf4ebdb64081153dc20ea8dfe8bc829de9e8c050b76774149e6c69393b2bd5e88516582b009b6cbdd79dbc75cda7c2b3e10351b1e1edc3f594804c7ed5d15e812dd8596c410f2d2e60089598290", 0x6a, 0x5, 0x0, 0x1}, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000001000)="664996ec553929638ff550f5bed1ebaffe14f519d387b584fdd182034941f07eb30c31e6f44b9d0a416eb3d36eeaf096aa49f1778128fbac1a62459f613579dae9a79941a6a4642abf67435e4b2d9afbee4644678649b3e3d4a03eac2871e6b19cf14fce64071842741e5e67ff269178d91d2b998d32d33e2ec7c4783dc1e57ebe0360ded8f94024e3f977aacc3da5d8cf3ad326302cfae301ec9cabff21eea1bf8a5f86d89e76ec5140823939883cb5480a8ff35b81193e6b4cfd7990c78c6faf35857119371979ff18", 0xca, 0x3, 0x0, 0x2}])
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:19:24 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f00000000c0)={0x1, r3})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2034.209156] loop6: detected capacity change from 0 to 40
[ 2034.227000] loop3: detected capacity change from 0 to 40
[ 2034.234447] loop0: detected capacity change from 0 to 40
[ 2034.243338] bio_check_eod: 8 callbacks suppressed
[ 2034.243348] syz-executor.6: attempt to access beyond end of device
[ 2034.243348] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2034.244510] buffer_io_error: 3 callbacks suppressed
[ 2034.244519] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2034.251035] syz-executor.3: attempt to access beyond end of device
[ 2034.251035] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2034.251829] Buffer I/O error on dev loop3, logical block 31, lost async page write
[ 2034.266162] syz-executor.6: attempt to access beyond end of device
[ 2034.266162] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2034.269860] loop1: detected capacity change from 0 to 40
[ 2034.279522] loop2: detected capacity change from 0 to 40
[ 2034.281936] loop4: detected capacity change from 0 to 40
[ 2034.292115] FAULT_INJECTION: forcing a failure.
[ 2034.292115] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2034.293253] CPU: 0 PID: 11525 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2034.293805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.294352] Call Trace:
[ 2034.294531]  <TASK>
[ 2034.294694]  dump_stack_lvl+0x8f/0xb7
[ 2034.294979]  should_fail_ex.cold+0x5/0xa
[ 2034.295275]  copyin+0x19/0x120
[ 2034.295510]  copy_page_from_iter_atomic+0x276/0x12a0
[ 2034.295871]  ? __pfx_fat_get_block+0x10/0x10
[ 2034.296185]  ? __pfx_cont_write_begin+0x10/0x10
[ 2034.296508]  ? fault_in_readable+0x149/0x250
[ 2034.296821]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 2034.297196]  ? __pfx_fault_in_readable+0x10/0x10
[ 2034.297532]  ? fat_write_begin+0x95/0x180
[ 2034.297820]  ? __pfx_fat_get_block+0x10/0x10
[ 2034.298135]  generic_perform_write+0x2cf/0x580
[ 2034.298470]  ? __pfx_generic_perform_write+0x10/0x10
[ 2034.298827]  ? __pfx_fat_update_time+0x10/0x10
[ 2034.299143]  ? __pfx_file_update_time+0x10/0x10
[ 2034.299481]  ? generic_write_checks+0x2c0/0x400
[ 2034.299814]  __generic_file_write_iter+0x308/0x4b0
[ 2034.300157]  ? trace_lock_acquire+0x16c/0x1c0
[ 2034.300474]  generic_file_write_iter+0xe7/0x350
[ 2034.300808]  vfs_write+0x9c7/0xdd0
[ 2034.301059]  ? __pfx_vfs_write+0x10/0x10
[ 2034.301336]  ? __pfx___fget_files+0x10/0x10
[ 2034.301652]  ? __fget_files+0x270/0x480
[ 2034.301959]  ksys_write+0x12b/0x260
[ 2034.302231]  ? __pfx_ksys_write+0x10/0x10
[ 2034.302528]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2034.302914]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2034.303283]  do_syscall_64+0x3f/0x90
[ 2034.303569]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2034.303949] RIP: 0033:0x7fe4f88bdb19
[ 2034.304222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.305506] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2034.306049] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2034.306541] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2034.307012] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.307495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2034.307978] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2034.308471]  </TASK>
[ 2034.330003] syz-executor.6: attempt to access beyond end of device
[ 2034.330003] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2034.331019] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2034.332268] syz-executor.6: attempt to access beyond end of device
[ 2034.332268] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2034.358288] syz-executor.3: attempt to access beyond end of device
[ 2034.358288] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2034.359470] Buffer I/O error on dev loop3, logical block 31, lost async page write
04:19:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/kcm\x00')
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:19:24 executing program 6:
chdir(&(0x7f0000000140)='./file0\x00')
chdir(&(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xed)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2034.391635] syz-executor.3: attempt to access beyond end of device
[ 2034.391635] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2034.392637] Buffer I/O error on dev loop3, logical block 31, lost async page write
[ 2034.411357] syz-executor.0: attempt to access beyond end of device
[ 2034.411357] loop0: rw=2049, sector=116, nr_sectors = 8 limit=40
[ 2034.412980] syz-executor.0: attempt to access beyond end of device
[ 2034.412980] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2034.414072] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2034.431060] syz-executor.0: attempt to access beyond end of device
[ 2034.431060] loop0: rw=2049, sector=108, nr_sectors = 8 limit=40
[ 2034.438419] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2034.450529] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2034.473280] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2034.476246] Buffer I/O error on dev loop3, logical block 31, lost async page write
04:19:24 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x1a1042, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r4, 0x0, 0xfffffdef)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x153302, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
openat(r5, &(0x7f0000000040)='./file1\x00', 0x0, 0x10)

04:19:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 53)

04:19:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 51)

04:19:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="06", 0x292e9)

04:19:24 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x5, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

04:19:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2034.706394] loop0: detected capacity change from 0 to 40
[ 2034.721540] loop1: detected capacity change from 0 to 40
[ 2034.761376] loop4: detected capacity change from 0 to 40
[ 2034.763382] loop2: detected capacity change from 0 to 40
[ 2034.817481] FAULT_INJECTION: forcing a failure.
[ 2034.817481] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2034.819964] CPU: 0 PID: 11558 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2034.820999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.821997] Call Trace:
[ 2034.822333]  <TASK>
[ 2034.822634]  dump_stack_lvl+0x8f/0xb7
[ 2034.823140]  should_fail_ex.cold+0x5/0xa
[ 2034.823700]  prepare_alloc_pages+0x178/0x500
[ 2034.824299]  __alloc_pages+0x149/0x510
[ 2034.824827]  ? __pfx___alloc_pages+0x10/0x10
[ 2034.825421]  ? __pfx___lock_acquire+0x10/0x10
[ 2034.826031]  ? __pfx_lock_release+0x10/0x10
[ 2034.826598]  alloc_pages+0x1a0/0x260
[ 2034.827100]  filemap_alloc_folio+0x363/0x400
[ 2034.827686]  ? __filemap_get_folio+0x253/0xcd0
[ 2034.828293]  ? __pfx_lock_release+0x10/0x10
[ 2034.828858]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2034.829490]  ? xas_load+0x6a/0x140
[ 2034.829972]  __filemap_get_folio+0x32b/0xcd0
[ 2034.830559]  ? __pfx___filemap_get_folio+0x10/0x10
[ 2034.831214]  ? lock_is_held_type+0xdb/0x130
[ 2034.831821]  pagecache_get_page+0x2e/0x130
[ 2034.832367]  ? __pfx_fat_get_block+0x10/0x10
[ 2034.832943]  block_write_begin+0x35/0x450
[ 2034.833506]  cont_write_begin+0x4fe/0x700
[ 2034.834068]  ? __pfx_fat_get_block+0x10/0x10
[ 2034.834653]  ? __pfx_cont_write_begin+0x10/0x10
[ 2034.835256]  ? fault_in_readable+0x147/0x250
[ 2034.835850]  ? __pfx_fault_in_readable+0x10/0x10
[ 2034.836478]  fat_write_begin+0x89/0x180
[ 2034.836996]  ? __pfx_fat_get_block+0x10/0x10
[ 2034.837580]  generic_perform_write+0x25a/0x580
[ 2034.838196]  ? __pfx_generic_perform_write+0x10/0x10
[ 2034.838840]  ? __pfx_fat_update_time+0x10/0x10
[ 2034.839456]  ? __pfx_file_update_time+0x10/0x10
[ 2034.840048]  ? generic_write_checks+0x2c0/0x400
[ 2034.840661]  __generic_file_write_iter+0x308/0x4b0
[ 2034.841290]  ? trace_lock_acquire+0x16c/0x1c0
[ 2034.841890]  generic_file_write_iter+0xe7/0x350
[ 2034.842502]  vfs_write+0x9c7/0xdd0
[ 2034.842978]  ? __pfx_vfs_write+0x10/0x10
[ 2034.843511]  ? __pfx___fget_files+0x10/0x10
[ 2034.844089]  ? __fget_files+0x270/0x480
[ 2034.844645]  ksys_write+0x12b/0x260
[ 2034.845127]  ? __pfx_ksys_write+0x10/0x10
[ 2034.845665]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2034.846337]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2034.847019]  do_syscall_64+0x3f/0x90
[ 2034.847546]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2034.848214] RIP: 0033:0x7fe4f88bdb19
[ 2034.848694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.850889] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2034.851838] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2034.852712] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2034.853587] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.854461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2034.855366] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2034.856277]  </TASK>
04:19:24 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=<r1=>0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x5, 0x9b, 0x7, 0x20, 0x0, 0x7, 0x40000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x4, @perf_bp={&(0x7f0000000240), 0xf}, 0x4610, 0x80, 0x7, 0x7, 0xf20, 0x2, 0x6, 0x0, 0x1000, 0x0, 0x7ff}, r1, 0xa, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b00)={0x0, 0x6, 0x8, 0x1})
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:19:40 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x6, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

04:19:40 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f00000003c0)="7fb6eb0c4c65930a76f1941630501961ad566271fd43812e368dd53cb274bf54030308609d598d3d0adf58d89ece0546f59693da3e731b082efebedd9f5dd78afc475e68cc1e53cd0ca8d179510556d096c89190cd23f8b056f90e09f2aa3ed4dc689aa45e3492ca475123b768219711603da0ce22fd1d0b9a8214c7c8174ff37b400d8a92cb41ab5fce32633b1af357eccfd92c0840604dea0abc25fc1b5cae4a2c2e440f6fd56c0d744d9e4f1e9febaf217466990cafe0e0944fec6c5b58b28d63f0fc2c", 0xc5, 0x1, 0x0, 0x2}, &(0x7f0000000500))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0x9, 0x140)
r4 = openat$random(0xffffffffffffff9c, &(0x7f00000014c0), 0x440000, 0x0)
io_submit(0x0, 0x3, &(0x7f0000002540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000380)="ce5fc1a09e70f7fdd1e7459d94eb537fc1370f2969a4a0d9f4fbd54862bccfbc7970370a576311a2c4aea88e1ecb87cd82b61f054d6309a444d9a0eeaf3aee589e40fe8df7b001bda334581643fb95d1e7114c628f643f4672c68d9faf5c237ce84a0c11bfbb3f0535dc2cb1c4f74047fb26a473e1fa4e364739d3750beddd258f901ce2662dba724065108913d42be65278793d168a98ab0d3dac5657dd5fe6dbf466d6465d58e270f9ee2178f2e427c90806132debdc25f4aef58282be96a3b8044f487ab1f2aebd6afb3098e08f35110dc0cf5d86a12662b4058468", 0xdd, 0xffffffff00000, 0x0, 0x6, r2}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x6, 0x1, r1, &(0x7f0000000480)="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", 0x1000, 0x4, 0x0, 0x1, r3}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x2, 0x4, r4, &(0x7f0000001500)="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", 0x1000, 0x5, 0x0, 0x0, r1}])
openat(r0, &(0x7f00000000c0)='./file1\x00', 0x141041, 0x10)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r5, &(0x7f0000001180)=ANY=[], 0x220)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x21008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
sendfile(0xffffffffffffffff, r5, 0x0, 0xfffefdef)

04:19:40 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:19:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 54)

04:19:40 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
perf_event_open(&(0x7f0000000b80)={0x4, 0x80, 0x3, 0x3f, 0x0, 0x1, 0x0, 0x3b4, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000b40)}, 0x4000, 0x28, 0x8, 0x5, 0x961, 0x4, 0x8001, 0x0, 0xffff, 0x0, 0x2}, 0x0, 0x0, r0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
io_submit(r2, 0x1, &(0x7f0000000b00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x6247, r3, &(0x7f0000000300)="a45f7ff16326e1e567b702a937021deeb6a811beb14acdd6c715a4c462df92b7620f64a5378d7b60e71fc0fdef4929c523c04b807eb6f2b65f1e0aed06d9b8257aef541328695bc2cc0a114cd3f3f3949cfd7c41b5bab3a6db378dafb3c075ebf416d3fa8a73011612f7a6da29623a140d50ad019bc3fdb731f970bcf7a46b5abcf96c354d655220d625a715b2430d7a3b66d5c434baf98adbfc51f7c45474405b77961e91c9abe434a5db586745038096adb8cf6b166af13e97f8e3f8cac68fe7e8908dace73b63b495088b54271bddb455416b2035b04a90f70e3b536b5e45c3324c4ea20e1ef1db", 0xe9, 0x5, 0x0, 0x2}])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:19:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\a', 0x292e9)

04:19:40 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 2050.826311] loop1: detected capacity change from 0 to 40
[ 2050.831170] loop2: detected capacity change from 0 to 40
[ 2050.839481] loop4: detected capacity change from 0 to 40
04:19:40 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
syz_genetlink_get_family_id$gtp(&(0x7f0000000800), 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x1d58}], 0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYBLOB="97129f2c74260807e37b491affad70e7a422c51ad5efad1144ec0ff2d204f6f7bb803f4733733317205de435272961b906b8351d40f0e044d5b8c828694efdeb5f1d389db8e4c03d588c8165c786b1bb1b359e1340a2fc3858365d78fa3300eb168bc1993775925d5121ac0d6ca7ae404d01248f30bc33bb379cbb4585b158ae5702d12d18", @ANYRESHEX, @ANYBLOB="5fb2e7c50d5cf0ba32193e7ce31fbefe0580d3adcbec47a531ce2f438ba9f72a00d65b1026655dddfd99aaee2925a45f33d4d4af8e34bd992dabe872eab48bcffd7a5494e710dd1539eab854105a48502b407ddbdbaeebe423812b59fd304575e6506113d0b7d4eef9c3f4a81cbb4372c589dd62a819917dfbd4b1e26727e5e4cc1bc7e9eedf891552e833eb279fa7423f807632d3030fccdcea5977aa87eec977a3edfc1411d18ea60549342f50117926ff4019649df8381c32d285ef358b37c6a1317bc0c873fd7ffb18add1269a8a4e6a6161047423e5c31b2960aaee926ee1", @ANYBLOB="e83cf031730d12744c57a6b29d8aab75a36c4e95872e006194f731084bc630b428d3c19f491d8193eef52ed62bf7f0d68601921e3073e72ce6c76b5cbcfb634bf41be13b9593d8e487e6510b4e1747d53f22f8dae0dbbbbf6f9e1dff18707d20e821c6567dcfd90cf4cd8884d341c608752afcecab577eb34fbcc097852835ff50e2bfbde94a4af4276443371546c284fd8ac7"])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r5 = socket$inet(0x2, 0x4, 0x3f5)
sendfile(r4, r5, &(0x7f0000000000)=0x3, 0x9)
write(r4, &(0x7f0000000080)="01", 0x292e9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0xd8)
write(r7, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'})
sendfile(r3, r6, 0x0, 0xfffffdef)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040))

[ 2050.869120] loop0: detected capacity change from 0 to 40
[ 2050.899334] bio_check_eod: 6 callbacks suppressed
[ 2050.899347] syz-executor.1: attempt to access beyond end of device
[ 2050.899347] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2050.901067] buffer_io_error: 2 callbacks suppressed
[ 2050.901077] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2050.908506] syz-executor.4: attempt to access beyond end of device
[ 2050.908506] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2050.909850] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2050.914388] syz-executor.2: attempt to access beyond end of device
[ 2050.914388] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2050.915475] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2050.953175] syz-executor.0: attempt to access beyond end of device
[ 2050.953175] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2050.954417] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:19:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\t', 0x292e9)

04:19:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 55)

04:19:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="02", 0x292e9)

[ 2051.043256] loop4: detected capacity change from 0 to 40
04:19:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2051.082911] syz-executor.4: attempt to access beyond end of device
[ 2051.082911] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2051.084131] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2051.090707] loop6: detected capacity change from 0 to 29
[ 2051.099063] FAT-fs (loop6): Unrecognized mount option "00000000000000000000005—Ÿ" or missing value
[ 2051.112024] loop1: detected capacity change from 0 to 40
04:19:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
recvmsg$unix(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f0000000bc0)=""/130, 0x82}], 0x3, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [<r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}, 0x40012002)
ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000e00)={0x1, 0xffffffff, 0x7, 0x9, 0x740a})
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2051.133986] loop2: detected capacity change from 0 to 40
[ 2051.177974] syz-executor.1: attempt to access beyond end of device
[ 2051.177974] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2051.179479] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2051.276436] loop0: detected capacity change from 0 to 40
[ 2051.319533] syz-executor.2: attempt to access beyond end of device
[ 2051.319533] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2051.320645] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2051.367039] loop6: detected capacity change from 0 to 29
[ 2051.377056] FAT-fs (loop6): Unrecognized mount option "00000000000000000000005—Ÿ" or missing value
[ 2051.380273] syz-executor.0: attempt to access beyond end of device
[ 2051.380273] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2051.381374] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:19:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="03", 0x292e9)

04:19:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:19:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
io_setup(0x3, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0xa52e0104e8a847db)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r5, &(0x7f0000000200)='E', 0x140000)
io_cancel(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2, r4, &(0x7f00000003c0)="7fb6eb0c4c65930a76f1941630501961ad566271fd43812e368dd53cb274bf54030308609d598d3d0adf58d89ece0546f59693da3e731b082efebedd9f5dd78afc475e68cc1e53cd0ca8d179510556d096c89190cd23f8b056f90e09f2aa3ed4dc689aa45e3492ca475123b768219711603da0ce22fd1d0b9a8214c7c8174ff37b400d8a92cb41ab5fce32633b1af357eccfd92c0840604dea0abc25fc1b5cae4a2c2e440f6fd56c0d744d9e4f1e9febaf217466990cafe0e0944fec6c5b58b28d63f0fc2c", 0xc5, 0x1, 0x0, 0x2, r5}, &(0x7f0000000500))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r6, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>r1}, './file0\x00'})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r8, &(0x7f0000000080)="01", 0x292e9)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r9, &(0x7f0000000080)="01", 0x292e9)
io_submit(r3, 0x4, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x2, r6, &(0x7f0000000000)="279519d274", 0x5, 0x9, 0x0, 0x0, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180)="c71844d57dd88152a106d0251ca614bae3140ca17047c4cabb1c0536f1753031d6d6cf4661a75d094b40a60396b156557dfd1e6ceebd46bee4a79162931199925c221ec8cd3ab97cee5286849524f086d7b65fc4523577e0ab4c49d4e755", 0x5e, 0x80000000, 0x0, 0x2, r7}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x3f, r8, &(0x7f0000000280)="8776ed762e9b7a12e9fe7dba2045fe0f9ea44fa85669078b20eee811fda972963ce0618ed28854c3ded44d5ee281446a618d45b2e13fedb5dde47ddd95234e0269ffb214f93373198ac242af5b69e8eda85ccec54f1378f1d3d1996745143d04951bd2ae9e75567b1d5fd5da6b4cffdb5efc3160deac90000dc0a6685f59daf3585a14bfd1950c2080ecfb16e49ad334cef6", 0x92, 0xf132, 0x0, 0x1, r9}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x7, r1, &(0x7f0000000380)="295e2a95e7a61978b7284661e63ffd060b8b6a586b7c40a207d94bc9a627b82236c7ebee45c803cb36a8b55bb3e9834080b2755a04cbc6a62d73ffdd806022ca6a67a468dd7e3c2500929dc9f912f94f337e4c64b7fd0030f8114238bd96f2f1b0869e2f7c021787eca09b6c3aed2795e0065df07646fec966581cdcf7160ac2a25140f89dfede1849cd48ba9715cd1dff348c67343683a49a5f18e7436bb4626c32ada89a66c87b490da849f4059ff4b68504a7656ba257f2ccabcb02f462758a2ca29d5a285cc2024761bb462145f70f86e592bd60", 0xd6, 0x4, 0x0, 0x2, r1}])

04:19:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 56)

04:19:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r1, &(0x7f0000000200)='E', 0x140000)
io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f00000003c0)="7fb6eb0c4c65930a76f1941630501961ad566271fd43812e368dd53cb274bf54030308609d598d3d0adf58d89ece0546f59693da3e731b082efebedd9f5dd78afc475e68cc1e53cd0ca8d179510556d096c89190cd23f8b056f90e09f2aa3ed4dc689aa45e3492ca475123b768219711603da0ce22fd1d0b9a8214c7c8174ff37b400d8a92cb41ab5fce32633b1af357eccfd92c0840604dea0abc25fc1b5cae4a2c2e440f6fd56c0d744d9e4f1e9febaf217466990cafe0e0944fec6c5b58b28d63f0fc2c", 0xc5, 0x1, 0x0, 0x2, r1}, &(0x7f0000000500))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000", @ANYRES32=<r2=>r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00'])
io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0xd2ed, r0, &(0x7f0000000f40)="e5e98771fcbdf96f8563c2cba7d48926a13f497232ac86a53b9405b153e997bf59350b456adf6abb513c34be42aded7a1eaa03e995a7b5190e53bce7df779882b238a369cb7fd39ab5e7ee3822db5684f061586fcf209020f0aeb36d835b67f2f2d70d7da1cf30303cc9087f0d9d83529e1a6ce85df3fcfdcf6f81da4183dc93fe7dc7fb99e09d081a53459b4b850bbed7b3eff50fd7531d00bf0f36b7dd3d3c29d30a151bd0759de2b815354df94c18f3407949d261bed3b96fbf3294ceaf5e6728f9ee3cb3c5d18ef3004aad9e588406b075d3bbf3f1a8fd1483a8c7b20804787c43a9af0739c5bbde98530770d063080405178da5fd59bf6543d09f9863c7f7af86f4bc9b3989a8c423a11c03813c453dca39b86337b8290ec06dd5aad6ce40b354d2f2c54df40fb6342d4066cbb2cda6c450f5f80c9c5e5764c44c5aa9e23cbab2e3189bf774278bce279d333c827c034abc995871565889b922f291e455e8675c48bfaf2e37287c46bb3b19204ce22f7d92e821ce113913b6437711f50d8c81c71ed045166ea28cce273204483898824231b63d6df7a1bc2c61eaed598833d93fee3b27e4cc581dc6389ac87666789478bb2f2fd39473d12522f32d1aa892df9ea97239cdf020b704d384e4628a580abd75ac32a96ef6c638bf52a6ac2cfa44a3f0c54b7a2a107d5174c9da59d0dfa4414921b8244d2308ce28d9342d40a89716afcd5e917791742864b700638f1f3aaf118bd758a3cd48cd203aacd30148f43f055c950a0b6b15fe7245873203d553b8ce6e517dfb531435560a49ee59de5663ee9210b92d8147fd3d1db8bace292fce10369a14bb01fd422342f861226c0375477993c7f6ba1b5460f67cb7869432da8ef446556acc2e2d9aa5d2d97a82ee74e87153dd1f4d6dd2f8f0658b14b7906a5dc5855e24c25f73ae9fca86fa713bec0db089d822de90f44f3d41724aea8c490f0ecc48d57b0b8b4a9402ba683d8612198a5f5f0f5d7b5133bf777fb8c2ffc7fc9c6f379d60a292465760786008200556554a3bc3c23b6183445d6584e0e939b3c718687be91fb30952061782a4eab95c1a97550605383e1b22264d208021e1e9108b314be751a6bd32665fcbb71928ecc550a9e797ce927abf9331dab1bec8fbf94e3e0720eebec5244d8cab7f19fd67d6a81639daec673dc6dbadf75ee46ef094906a7892c4189cd58080b27eb0248bab7023bc7f259f5e26c334a660363c2dabb14cf0047a89290bcc4bf739e904cd54423b6420005b6d017085a621463f69e17eef3b77b2311e539947c8ce6a7383f8bdfa86b0918610e1dc4d02febcf7856521e031ab98b2e7e021965bb246d409bf3d047051c2c6c763b44e9d97ba18fa3b5970992314bec944b5840c3a8a1d9841b3deda292fc9c54ba09910e24a51bc94c241dd7fee9c4c719ee6985e20d775dbace4c099b0584ed2c86c90171ca5e98ced2bc9d82b5b32493ccedfff1fcb5423dd7c5103eb252aa194f1b7d5748ed51e6ebf9fadd08de4216bbf2c1e55ae8d4673784e847163879f7d1e6c4fc1631f1ffaf53941a8154172f31b558e75933b4e2507fbedba28cf9d39109fec2dc1af620413f1044c46d90bfac57d9b9f3c99c3b5bdb70603edceb13ed0204bf1b7731ed23e8f79565666b7efc964fc8435d17a9aab718375ef4fd60e6871f89d7aa91e0c78fc84f2b4c90942feb906730370182d189b4cfff9a96397a82b8d8cd4c94f14a7d09f7e5c6b993c2fd18c0ca38a4d1879be07f50caf2ed0ca3c9ca5e7e31ea0d7a0399cdd688fd29a0a4cce5802456ce5206e743dd98de3e9d025a730e64123815fcc24faec508c30a91629363049ebfc8944295e1ba9c8f591dfc71b67c35a7adcf395327c8b19f5f9d7dbcbe41f5a3281da0f54d24286f0a016580876a5afef626d387bb58db700c256081e7db67501fb7280c43867bf149c77705ea4c67f70ee4d93775b36fc04c7b9151986000cecabc097c7056c3dd4763b649a36e701bddda6c4c8111b3de94f3a49588e1b340b187be1931d4164e728486a74ca62e4133e369b11c5d056c0e6221c28261942c9f8212351db8d3ee95ff042a1ae22641e1c15d5290476ae8fe114925a290c8a79c7d0fbeb5ddc1fe25018cb7584093d53f07039146049769899a70f28dfa018268731c0adbf45ddd598c64354be23269d90b8205b1efb243e9b17fab0ef234694d22192eb5ea19f2ac8642f237189b985209d03f2a3d12ed52f1bfc5f5d1ba135a40cbd5a7d1c242ad84328975fa76138b170775bc570281f4ec1eecee32289708812c6864d7dfa4717dffbf2aa6ae23ed927ceb20d74369f14bb42c4818242d173da72be19ef27b4da3c48eb38f5bfab997c4e7be8712c6af3cbe9f1e0a9604f424f094b688f3aa938119d687888116e4cc1912205115dba769ddca5c2ef69e000f95e6aaffee1f6ac14e4cc8b2b2d34ce4467fc5dd552bb85fe2ddb6464df1b241f02a3da4246cfdbd3cc0578fb4a1af21d2761a34da683dfd44e9df01eb4afd6656089ea6eb1e8913621b947ec1914aa7ae68ab7024497db0cc9b46ceb3bc1ea8fb2cabfb6a44fcc28ebc30004cb1633517efe859bd070b6d407ba718a02788d16aab321739b6b71d402df7dfdf2426f41e926ea4fb72f76a79c2bddcc8c82a626ad51e8a959f944f5f1d41006a4e93cac0db2d6daada35e41162c3b96676b830386e95cd66ac77edcd7aa88dcfd1fc5090def4a32e5218bb5072c0a93274086a8d020be6e61cd804cd45f979099c2bd7acabed82090fd00412f1b1fed890de1cd85c98ac526f932e6fb816c4260582e9471baa1ac03a8afc22e6bcc9717d9f4650c6d699ba9c9f6e99963c36522bcc2e9e814bf182b9609242c5a21ad066395d4b045a30735cecb494918ffd532f3e57177255a412e980aad5e48d389b61136cdcbc117f5eca3871ead78d6d10a58d7c0b9b6406e4586645e8215d08b7d92e72e3ddcdaa57e2089824a8bc3afddf3e8c62a0afc970c351281fde28096247a732feea96bc82450f5bafb5a4e04691c3bc782cc4d0de8f4103ea6e0f8569a760acf986b54750476088d6488b5f41b870886f529ba8aab9ae37b3c34c52911a12b83648b0b6f5cbd65b44d67d36ccbd9b0fe049690e78daf8e6e1ab782210021d58300173bd267a7dcfc33d985012b6335af7f933ec1643bb575ab7c03ae14d432a0538aaac960dde5f7ad67608b42b05543e1f4de96059c95e0da7a0c23b5640bcb3450a3f9c264a7a78da4e3331c532426f6b65600c2ab6ba8ef0b0869b532ed44dc26243b37dbacee79e97400be84569eca299669b071a1b4f912ddb6ed2e78d96493f9863e21593164fb101ba570af0e90e02981285df5d71f3aaa785eb458494f1578ad809d6b343b45cf99aacef459b9a6abaf5f005cbf6e68468ac554aced914182f15db41dfc02a6e4c36ccec888cd1e0625e6bb4b1047d612b86da89eb239179d56f51d6fe55bb932b86b80e215a94fdac29ed26401df2b3360ee71005e4fec3fe9e0d1a57f432abd260a3ccee336d7f1e976c5e8f3286e6fec6dae66bb98db69a889e2178c20335901cddade408f9ebd8feaec93ed24b8fa88cbc9592563a0623f6386e8693f720aa5e673ded5890d7033f6c2a5d6c2ad916d41fd20aaef817b7dfaf59266295b4e69c1e4c75ffe7ed227e4e79dda5946818bdab3ea620b34c43f32a75a3a17bd78ff72af1761ed23ab251c4746858b85a9177e3a44605433e85f4ff4a73eef1f0fdc6b4326d06ea957a6458a4bca7c0ecf85abe19cc01ad19b9753e61e0a38453950e39c1465a3d2b0c777c112a011d232625553fd0564a8c384456f3e959c0b85f0ab566fc9bc36aea98b089f6cc8db505632dfb0d1be1517ff12948d605b2e2f9d7d2938822a9cfa27def1104b5f3c81589d150b664f8b4df65f7f534d7cdd638b7475355ce5536615426c5e53c1e65d6aa2f95d43cb9b0d1a4d4fa0e055f724c6627cc75dbbf487efeff2f50320c2930ac7bbf7dfedc4e0d8dbd3bed8b047afbcd077ada03d2d43dfb8af6a3de32c0a633df4841beaa8473205c9df4b41bad1c43c2ff6cc56e9cac9dcc78735b424e02d637e7a4cb1911d6e89c4efd32a6fb9c66aa3613b16aa33aa0aba9c974af888c50f598702f692e48f81f279c5b4f00f8d09027f67e9b13b4c09f49b181c15fc267f5c7678f99d58eee9d1f2779c21eed7d205628de58e29ebe23b475ed04783e3a4049fbfdf35e32f47f73cdab29775fb2426396a7769c576006f53fbc8a2b9f5f12916cac4ac8e57dcfcee12f244ffee27659ed98555b034b1aa909a248e96d03413286f7382aa5c32b151b90df39ec9eb850e0692a65eacedb251800c8858123762da174afbdd68c19471382edde89e47959f2db7deae579ec4c7e64620341c6b3733467ba6d6ccc2cf3c8a703d2dd83d1c3414b9a737321e99b603033c429d8d9654596cb9292e4fc530c7a8bfcac6a14254035922c514302e9ab181bbdcfbc38b4d51bd91282d9f9c21c5f298614aa9d7b88680c9bac8761fcdd20b357ce940f4648a9badf16ef3642fb2d594146ed697bd649ba5c275362f567efd45396d121666b6c0cded79e08979377de024ef27cbd40d6836dc29b992c2b9e9811c21dcc1e6543b1301185d1e798c4102f29c92058fba9c75740619ef9cffe524a65542246a038248daf5a4f0402ca6a97f4126a4dce5a5222c3664d11e1a955d49d1a89b57cc1ba9a570407a12adaf3b26d53b70e405b44423bc5ad1dfd174af3685b353fceeb804d40ed7f11243c4a9aba991a0941899e2bc18382023fe71cea8d0d19a5fffafc6c28582bf790bfb2702a41a55f3104df4a9182044c951893bc99182982241c83afba1e7ef064af93078ac72702b8a7f0071e0dd0ada05f2fcfc9e3e2ef2a22ec8fbc092566a0f8dddf9b91936c1bb746677ce367b9ae4d6b6c178ed50e36ff6b9134b39250281edb60ba31074527c61f478f8337c20c42f06a53348aececaa04dc55e1c325776aaf90e26235c28d005775f0a0cf83695a13e2971f8087d8957f5635dd70c663921d3fc785ba4b24f92ab34bd31eb4e1074298d2445c563bb1a8851732ea1acd0b10b586ef7e106cf36e120a6e09476db4f683017ff523ba9b2429cffb948e4d216749d5deb512c8143683886b9678c36d25b7ae0bcba0f079b443eeeca8ada30f10f979356dfa1f1a50d72af37d3408594533a3a06f56c3e0b2b5d6aac927df72f72d9112721c6d91f77919965aed64c6b2e4ce3e4a5b6a73155cc34b019954b4220d539bb7342ab4a66fa1a5949596e4bcf7a874f6d902e759e94c693674342a3a17c63ba41543d92bbcd4479d4d7833cc9b2cf2e5dc50f0e892118945542135d90504f0b01344e935b163c7de90562ac27e24f1b88e6c47df6e5536e3caa0c29b6acff08b66c192e196b9a8c2e8a637f5a400e8fc15b721d7f251447ab22cbf09818b4ef19d3ccf1f6b20b05f05b9551ce2c3430de3641e237f97dc45920b8dd4105c21d8e0cd81e2648b5ee5648c9f6bccadf825555aeca1e5edc76f99432e0519ca084999fb42ac77aa3c0e8a46f8d3be03f2fadacbd9b4b7eb3294980efc1ba2876abebfa21832ee8b73c8c63f2a765f88d64230f7eddf485688b78f29af616d7de8478be5089ed6e0555d3170619eaf0a6d31a73f2710ceb7cdad35555954e7495dc437ede221eb7b50b5cb8cc7d6d32fffbdc821d778d5db433801fd0b4b57624405ae84510806aff226f5a", 0x1000, 0xd218, 0x0, 0x1, r2}])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:19:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
accept4(r0, &(0x7f0000000000)=@hci, &(0x7f00000000c0)=0x80, 0x80000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
write(r2, &(0x7f0000000080)="01", 0x292e9)
open$dir(&(0x7f0000000180)='./file0\x00', 0x800, 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r4, 0x0, 0xfffffdef)

04:19:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:19:56 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
chdir(&(0x7f00000000c0)='./file0/file0\x00')
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2066.297935] loop2: detected capacity change from 0 to 40
[ 2066.353285] loop4: detected capacity change from 0 to 40
[ 2066.356206] loop1: detected capacity change from 0 to 40
[ 2066.361967] loop0: detected capacity change from 0 to 40
[ 2066.376411] loop6: detected capacity change from 0 to 40
[ 2066.381271] syz-executor.2: attempt to access beyond end of device
[ 2066.381271] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.383470] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2066.430276] syz-executor.6: attempt to access beyond end of device
[ 2066.430276] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.432041] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2066.453681] syz-executor.6: attempt to access beyond end of device
[ 2066.453681] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2066.454517] syz-executor.1: attempt to access beyond end of device
[ 2066.454517] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.456723] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2066.462453] syz-executor.4: attempt to access beyond end of device
[ 2066.462453] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.463831] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2066.471077] FAULT_INJECTION: forcing a failure.
[ 2066.471077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2066.472143] CPU: 0 PID: 11651 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2066.472904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2066.473440] Call Trace:
[ 2066.473620]  <TASK>
[ 2066.473780]  dump_stack_lvl+0x8f/0xb7
[ 2066.474062]  should_fail_ex.cold+0x5/0xa
[ 2066.474354]  copyin+0x19/0x120
[ 2066.474586]  copy_page_from_iter_atomic+0x276/0x12a0
[ 2066.474938]  ? __pfx_fat_get_block+0x10/0x10
[ 2066.475245]  ? __pfx_cont_write_begin+0x10/0x10
[ 2066.475569]  ? fault_in_readable+0x147/0x250
[ 2066.475895]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 2066.476275]  ? __pfx_fault_in_readable+0x10/0x10
[ 2066.476614]  ? fat_write_begin+0x95/0x180
[ 2066.476898]  ? __pfx_fat_get_block+0x10/0x10
[ 2066.477213]  generic_perform_write+0x2cf/0x580
[ 2066.477540]  ? __pfx_generic_perform_write+0x10/0x10
[ 2066.477883]  ? __pfx_fat_update_time+0x10/0x10
[ 2066.478199]  ? __pfx_file_update_time+0x10/0x10
[ 2066.478516]  ? generic_write_checks+0x2c0/0x400
[ 2066.478854]  __generic_file_write_iter+0x308/0x4b0
[ 2066.479192]  ? trace_lock_acquire+0x16c/0x1c0
[ 2066.479517]  generic_file_write_iter+0xe7/0x350
[ 2066.479858]  vfs_write+0x9c7/0xdd0
[ 2066.480113]  ? __pfx_vfs_write+0x10/0x10
[ 2066.480408]  ? __pfx___fget_files+0x10/0x10
[ 2066.480734]  ? __fget_files+0x270/0x480
[ 2066.481042]  ksys_write+0x12b/0x260
[ 2066.481313]  ? __pfx_ksys_write+0x10/0x10
[ 2066.481619]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2066.481997]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2066.482387]  do_syscall_64+0x3f/0x90
[ 2066.482674]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2066.483050] RIP: 0033:0x7fe4f88bdb19
[ 2066.483320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2066.484615] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2066.485155] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2066.485667] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2066.486178] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2066.486697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2066.487212] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2066.487771]  </TASK>
[ 2066.501566] syz-executor.6: attempt to access beyond end of device
[ 2066.501566] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.503282] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:19:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2066.527174] syz-executor.6: attempt to access beyond end of device
[ 2066.527174] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.528810] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2066.538484] syz-executor.6: attempt to access beyond end of device
[ 2066.538484] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.540205] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2066.548256] syz-executor.6: attempt to access beyond end of device
[ 2066.548256] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.549929] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2066.565532] syz-executor.6: attempt to access beyond end of device
[ 2066.565532] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2066.567326] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2066.604083] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:19:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:19:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="04", 0x292e9)

[ 2066.750240] loop2: detected capacity change from 0 to 40
04:19:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x4f, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'vfat\x00'}, {0x20, ']'}, {0x20, '\\'}, {0x20, 'vfat\x00'}], 0xa, "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"}, 0x101b)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x20080, 0x15a)

04:19:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x46080, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0xf8, 0x7, 0xff, 0x0, 0x7, 0x0, 0x7, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4c3, 0x0, @perf_config_ext={0x0, 0x3}, 0x4412d, 0x7, 0x66, 0x6, 0xb96e, 0x81, 0x8, 0x0, 0x496, 0x0, 0x100}, 0x0, 0xc, r2, 0x0)
perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0xfc, 0x5, 0x3, 0x6, 0x0, 0x2, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x8000}, 0x812, 0xfffffffffffffc01, 0xfffffeff, 0x1, 0x100, 0x4, 0x9, 0x0, 0x0, 0x0, 0x1ff}, r3, 0x4, r4, 0x9)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000f40)=ANY=[@ANYBLOB="cc008220270200005b0000004f0800003e000000ffffffff00000000000000004d60804f18340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058af57f8d3645f0c4aff96ff2508e800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1a8000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063000000000000000000000000000000000000000000000000000031aad69b74ba2315ecee8b89172df38fd66f65318e218d24d38db6"], 0x426)

04:19:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 57)

04:19:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x400001, 0x20)
r2 = fsmount(r0, 0x0, 0xf3)
openat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x529102, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

[ 2066.890235] loop6: detected capacity change from 0 to 40
[ 2066.937818] loop4: detected capacity change from 0 to 40
[ 2066.955183] loop0: detected capacity change from 0 to 40
[ 2066.956238] loop1: detected capacity change from 0 to 40
[ 2067.140330] FAULT_INJECTION: forcing a failure.
[ 2067.140330] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2067.142345] CPU: 1 PID: 11675 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2067.143442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2067.144529] Call Trace:
[ 2067.144916]  <TASK>
[ 2067.145234]  dump_stack_lvl+0x8f/0xb7
[ 2067.145797]  should_fail_ex.cold+0x5/0xa
[ 2067.146370]  prepare_alloc_pages+0x178/0x500
[ 2067.147015]  __alloc_pages+0x149/0x510
[ 2067.147571]  ? __pfx___alloc_pages+0x10/0x10
[ 2067.148222]  ? __pfx___lock_acquire+0x10/0x10
[ 2067.148879]  ? __pfx_lock_release+0x10/0x10
[ 2067.149494]  alloc_pages+0x1a0/0x260
[ 2067.150029]  filemap_alloc_folio+0x363/0x400
[ 2067.150634]  ? __filemap_get_folio+0x253/0xcd0
[ 2067.151244]  ? __pfx_lock_release+0x10/0x10
[ 2067.151867]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2067.152538]  ? xas_load+0x6a/0x140
[ 2067.153069]  __filemap_get_folio+0x32b/0xcd0
[ 2067.153712]  ? __pfx___filemap_get_folio+0x10/0x10
[ 2067.154398]  ? lock_is_held_type+0xdb/0x130
[ 2067.155025]  pagecache_get_page+0x2e/0x130
[ 2067.155608]  ? __pfx_fat_get_block+0x10/0x10
[ 2067.156221]  block_write_begin+0x35/0x450
[ 2067.156842]  cont_write_begin+0x4fe/0x700
[ 2067.157431]  ? __pfx_fat_get_block+0x10/0x10
[ 2067.158067]  ? __pfx_cont_write_begin+0x10/0x10
[ 2067.158724]  ? fault_in_readable+0x147/0x250
[ 2067.159346]  ? __pfx_fault_in_readable+0x10/0x10
[ 2067.160030]  fat_write_begin+0x89/0x180
[ 2067.160578]  ? __pfx_fat_get_block+0x10/0x10
[ 2067.161225]  generic_perform_write+0x25a/0x580
[ 2067.161881]  ? __pfx_generic_perform_write+0x10/0x10
[ 2067.162556]  ? __pfx_fat_update_time+0x10/0x10
[ 2067.163214]  ? __pfx_file_update_time+0x10/0x10
[ 2067.163919]  ? generic_write_checks+0x2c0/0x400
[ 2067.164577]  __generic_file_write_iter+0x308/0x4b0
[ 2067.165427]  ? trace_lock_acquire+0x16c/0x1c0
[ 2067.166078]  generic_file_write_iter+0xe7/0x350
[ 2067.166747]  vfs_write+0x9c7/0xdd0
[ 2067.167242]  ? __pfx_vfs_write+0x10/0x10
[ 2067.167832]  ? __pfx___fget_files+0x10/0x10
[ 2067.168441]  ? __fget_files+0x270/0x480
[ 2067.169035]  ksys_write+0x12b/0x260
[ 2067.169545]  ? __pfx_ksys_write+0x10/0x10
[ 2067.170112]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2067.170838]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2067.171545]  do_syscall_64+0x3f/0x90
[ 2067.172093]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2067.172826] RIP: 0033:0x7fe4f88bdb19
[ 2067.173327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2067.175681] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2067.176715] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2067.177643] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2067.178574] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2067.179548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2067.180628] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2067.181603]  </TASK>
04:20:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000000)={0x0, 0x4, [0xa3, 0x5, 0x5, 0x40, 0x8, 0x400]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:20:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="05", 0x292e9)

04:20:13 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_destroy(r1)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
futimesat(r2, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)={{0x0, 0x2710}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0/file0\x00'}, 0x6e)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r3, r0, 0x0, 0xfffffdef)

04:20:13 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x40018, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x3)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYRES16, @ANYBLOB="ded9d17eb1c3e405e7306411f1d9bfef36956c792fdfc228fde4ae62e4f376d6748df82c86e2e1270bef78200873c6839153972a7a78824a5a77ebb536456083a0116db2f501d0b2b980073bb7d8d7310ce18844c153443e6889c6908e26f27eab", @ANYRESDEC=0x0], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:20:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2, 0x182)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x7c1940, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:20:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 58)

04:20:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:20:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2083.243964] loop4: detected capacity change from 0 to 40
[ 2083.244898] loop2: detected capacity change from 0 to 40
[ 2083.247241] loop1: detected capacity change from 0 to 40
[ 2083.248702] loop0: detected capacity change from 0 to 40
[ 2083.262471] loop6: detected capacity change from 0 to 40
[ 2083.314978] bio_check_eod: 10 callbacks suppressed
[ 2083.314992] syz-executor.6: attempt to access beyond end of device
[ 2083.314992] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.316256] buffer_io_error: 8 callbacks suppressed
[ 2083.316266] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2083.320153] syz-executor.0: attempt to access beyond end of device
[ 2083.320153] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.321333] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2083.337284] syz-executor.4: attempt to access beyond end of device
[ 2083.337284] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.338522] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2083.343864] syz-executor.6: attempt to access beyond end of device
[ 2083.343864] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.344906] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:20:13 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x81000)
openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x210000, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
openat(r3, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x110)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r6, &(0x7f0000000080)="01", 0x292e9)
close(r6)
sendfile(r2, r5, 0x0, 0xfffffdef)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r7, &(0x7f0000000080)="01", 0x292e9)
write$binfmt_elf64(r7, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x2a, 0x33, 0x20, 0x3, 0x2, 0x0, 0x9, 0x222, 0x40, 0x53, 0xfffeffff, 0x4, 0x38, 0x1, 0x20}, [{0x2, 0x27, 0x43a39d32, 0x0, 0x9, 0x7fffffff, 0xffffffffffffffff, 0xffffffffffffff80}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1578)

[ 2083.353052] syz-executor.6: attempt to access beyond end of device
[ 2083.353052] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2083.374787] syz-executor.6: attempt to access beyond end of device
[ 2083.374787] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.375829] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:20:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 59)

[ 2083.403259] syz-executor.1: attempt to access beyond end of device
[ 2083.403259] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.404366] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:20:13 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0xa52e0104e8a807db)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0)
write(r2, &(0x7f0000000200)='E', 0x140000)
io_cancel(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x2, r1, &(0x7f00000003c0)="7fb6eb0c4c65930a76f1941630501961ad566271fd43812e368dd53cb274bf54030308609d598d3d0adf58d89ece0546f59693da3e731b082efebedd9f5dd78afc475e68cc1e53cd0ca8d179510556d096c89190cd23f8b056f90e09f2aa3ed4dc689aa45e3492ca475123b768219711603da0ce22fd1d0b9a8214c7c8174ff37b400d8a92cb41ab5fce32633b1af357eccfd92c0840604dea0abc25fc1b5cae4a2c2e440f6fd56c0d744d9e4f1e9febaf217466990cafe0e0944fec6c5b58b28d63f0fc2c", 0x113, 0x1, 0x0, 0x2, r2}, &(0x7f0000000500))
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000b80)="1836d0b9b1d65e0f78f5ba60f20b395ce7c25b2e6b015c11a48693f1a4e09994f40e9659e6206591f1e3d460bb453fc8b783f9a2f3959a72e995556b2799e2e967b45c8d4826c3ba2361a1f8b759f250e1", 0x51, 0x5, 0x0, 0x1, r0}])
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x3f, 0x4, 0x0, 0x0, 0x0, 0x2, 0x40900, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:20:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2083.462222] syz-executor.2: attempt to access beyond end of device
[ 2083.462222] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.464255] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2083.472380] syz-executor.1: attempt to access beyond end of device
[ 2083.472380] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.473539] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:20:13 executing program 6:
pwrite64(0xffffffffffffffff, &(0x7f0000000000)="0a9b94fe195dc65ea88e37d5c6bda532fff06721cee955dc40e1ed62bd326f9bce9dd9d4a86f99e2a02897c1fa", 0x2d, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file1\x00'})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000340)="b4071dba7c39b310b8cdf72a4f820222b8be9d448c5ecb3e10eb426c1eb274b452f4a62ca4c97b5b05ca0e19a9dfbacf82b2ac75dde68d85207c861a1332062379fef701e81807b9d4adc66386f4123f5e2d3d2302adedb3fdab2b650b901bcfdea10fe129f3b7829d18e92f2237113225d06ec97dc02e026d1f50b0267c01c02afcf9650983c48843e6f1dbd7d2dd540bcd4e3cc6061f0039ecba2fd1d1b7cb41de47a6478a4b6329734860f871d93d7bc540ad4a74d0714ca63f0e7f1d5d47234977829fba52613f38e1c03d35b64bae9acb169f8ac5bb2356a0638d253c532e", 0xe1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

[ 2083.488237] loop0: detected capacity change from 0 to 40
[ 2083.524847] loop4: detected capacity change from 0 to 40
04:20:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="06", 0x292e9)

04:20:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2083.603192] syz-executor.0: attempt to access beyond end of device
[ 2083.603192] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2083.604567] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2083.646420] loop6: detected capacity change from 0 to 40
04:20:13 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
getdents64(r1, &(0x7f0000000300)=""/138, 0x8a)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2083.678124] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:20:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:20:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 60)

[ 2083.700019] loop1: detected capacity change from 0 to 40
[ 2083.726704] loop2: detected capacity change from 0 to 40
[ 2083.852208] loop0: detected capacity change from 0 to 40
04:20:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:20:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:20:29 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x10000, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24081, 0x10)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$TCSBRKP(r2, 0x5425, 0x1f)
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
flistxattr(r3, &(0x7f0000003140)=""/138, 0x8a)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:20:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\a', 0x292e9)

04:20:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = fsmount(r0, 0x1, 0x2)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
fdatasync(r4)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x100000)

04:20:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 61)

[ 2099.321912] loop0: detected capacity change from 0 to 40
[ 2099.330399] loop4: detected capacity change from 0 to 40
[ 2099.336833] loop1: detected capacity change from 0 to 40
04:20:29 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440288f00f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x341043, 0x14)
write(r5, &(0x7f0000000080)="01", 0x292e9)
r6 = syz_open_pts(r1, 0x202000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r7, &(0x7f0000000080)="01", 0x292e9)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r8, &(0x7f0000000080)="01", 0x292e9)
io_submit(0x0, 0xa, &(0x7f0000000bc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000380)="f4ff2e292ee31e5afe8361ed6ba905165fdaedfbfaf5d253fa92fe600a73467dda8fccb25b2799b68f7da42f1eccdb19c545920337497406edfe65e85febc3372659ccf35d30995a116024f59a932be37338cc9c44ca7da5a731e0a17f94a6ce338fc8f671048736be6ce73b2b272cec6935f1a61ed7729f4e3f3a1bbaf5f905a1bbe83ab2c834cd803bfa768354d1dc6aba28c29e190a2d7abb604167e97459c8cb7189420b815a89d070b78b2145898dca1bedc5b8065c0cbf995af068bf8b339d538e7727b88cddd642d16ad4ce7c7efbbc439c3cebe21239b3fd177589ce11d95c2badb905ccf0dd30360544dee17f844e5393d390980e4e63bb", 0xfc, 0x9, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x800, r0, &(0x7f0000000480)="f133d8c6e348d09c865f87bef836f019c19d0cf9c9006ff77e7933d027fa34c57f1a2a1ee780ce7b32c6fea5cdb3e17a641063a932946bd932df9419c24c5fc20b4e05254e6ab7cabcacbd7411a93ecf0fde927e9bb4808e4154807bb1bfe8f7e6925c5332684324553cc21852e88bf529b2e2af79f6352dec242c0d6d4b89f1a7", 0x81, 0xffffffffffffffc0, 0x0, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9f, r4, &(0x7f0000000540)="b4a6a7adf4b5e9fa85e73d13d8908657bb0730e420118e8f45741eea4deaebd3e05382788d12b06d632d9a8847080a0398be8a839eb8ed8deb4127c04355c48c6b9704bec0d258313fdb8624f598fad12721d38a742644093706bbfa2e31bdacdda41703244f9ec8b9c4b3e95104a5860e62df39330e5cf14f14014f7dc27b60f02c88eb0ddffec5fece5338aacab41fdb8e0e95a05a5409", 0x98, 0x80, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x4000, r4, &(0x7f0000000600)="f13122872490127b5b354a445221e310148496157f6a2ff1061a3d0df5ecc131b0ddef4644633549f9fac4e649e8dda02be3b1d4de113653259a8e615a53bfb2db6e714a3bedd1b26da15bf7e1fd12b13ea9e1ff47d0956373dbb406c1a50b89d49ad249c8539659137ba55e9110e543107c8e2f5f5515f63dc25081cf08d3efa0d20b0b2e565110f3077157fcd4dad8576403753f3c4b99dcaeb50b007078a89c329e02849e5be013d52d8b8079c20e834ae9c7c03ee4aa5476f40f93a5c2c43178d1d7c98028784800d6fafad00be816918d2dcf92586a306ef0e047574e8cc5216b58add7b1ba6f4cbe", 0xeb, 0x9, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0xfe01, r3, &(0x7f0000000700)="609f09256829600b577fc9c90da1f89d051c9f66f7232b46f76830df465ae65645bed3d83bf16d80317425006845d8d5646530c9c7d5ca579893254b6dbffb38f9a36caf3dd5d18bf94961528251c5668788b7094707f7", 0x57, 0xa00000, 0x0, 0x2, r3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0x40, r0, &(0x7f00000007c0)="1e60728fa1d4d6dbc3d3ad1368e1c1b8c5990abc9c27f4d0470aa79a59c177ff05dce32e42f49cac6117e31cfedf860118b56161a9cc1f49285422e4da744ec8b44f634321b182e56a1063bbe0378042fd530d0ea3a7c982b441998dddc086d56ae03cf16e0aeceb222ab18e001b938b76ff364d8a44cadd4da82379e422be7dfdbb496c06f34079a12c92c05df4a4ea40ec0243c89d0e2f246c0213956128c466225de1493bcf75c6a4cd94bab6f4598ad7526ac01e7e76248276127584f8f48d4ac335f552317a5eea80800efee6119ff4e8e63b4ed49b891de45223dbfda1aa24af57b4c4bd79c723a4423315d97114afcc329d373d", 0xf7, 0xffff}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f0000000900)="65245522ff53e0c06ab3c48b3a940ccdf979509135e313c1bf0de7a3758de0622e582b04650b780b50f59aa205060ee841a29fbae90bafbbd47f7a5f7cd868030297fef60941504bde8bf15f95bed449ed7443080c72c76260a96fd4536e1deca3755565ea31c5315f1fae6c4cd42f2e375116704d99023c8a", 0x79, 0x2, 0x0, 0x0, r5}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xffff, r6, &(0x7f00000009c0)="61b699e9249249deac15935c8cdae3af8745cd53bf54c2f422f242352fcf671f2301c44690f691701eaf4c0f631c5756ab0a9dd18fde4dee5ec399941ba99b541ac0fbf33b71ed72987aa53d15401af3dbbc688170e80d2bfd09140ab11b290504c6d10faea6eff9a273bbb16dbf", 0x6e, 0x7, 0x0, 0x1, r7}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f0000000a80)="e8e23fd1b341bd25c1d92700fd5d8f150a22cb4e9189dbadf7fcdea1ae1f914af7c5c899398c94ebbeb5c79bdde8ca20f84335e81c6a0a63aead4c3fb969fa413f704b74e8b20ab5663810183f1a1dc74c01ea6b9faa228e72ca3bae80762c21b82d990b5e15d3425d1ca3931c76c60451a19c95c2cc43021710f64bd450c7", 0x7f, 0x39, 0x0, 0x0, r1}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0x3, r2, &(0x7f0000000b40)="ca0f87ec7782", 0x6}])
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 2099.376239] bio_check_eod: 5 callbacks suppressed
[ 2099.376274] syz-executor.0: attempt to access beyond end of device
[ 2099.376274] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2099.377993] buffer_io_error: 4 callbacks suppressed
[ 2099.378019] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2099.394339] loop2: detected capacity change from 0 to 40
[ 2099.420003] loop6: detected capacity change from 0 to 40
04:20:29 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0}, './file1\x00'})
accept4$unix(r2, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e, 0x80800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdf1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
r6 = socket$inet6(0xa, 0x80000, 0x5)
sendfile(r5, r6, 0x0, 0x3)

04:20:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x276842, 0x88)
sendfile(r0, r2, 0x0, 0xfffffdef)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
renameat(r3, &(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000180)='./file0\x00')

04:20:29 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 62)

[ 2099.506481] syz-executor.2: attempt to access beyond end of device
[ 2099.506481] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2099.507598] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2099.546233] syz-executor.6: attempt to access beyond end of device
[ 2099.546233] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2099.547997] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2099.590980] syz-executor.4: attempt to access beyond end of device
[ 2099.590980] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2099.592084] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:20:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2099.635448] loop0: detected capacity change from 0 to 40
04:20:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:20:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20a40, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2099.720694] loop2: detected capacity change from 0 to 40
[ 2099.728056] loop4: detected capacity change from 0 to 40
04:20:29 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\b', 0x292e9)

04:20:29 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000300)={0xd1e2, 0x10, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0]})
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2099.776322] FAULT_INJECTION: forcing a failure.
[ 2099.776322] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2099.777894] CPU: 1 PID: 11789 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2099.778909] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2099.779909] Call Trace:
[ 2099.780283]  <TASK>
[ 2099.780585]  dump_stack_lvl+0x8f/0xb7
[ 2099.781120]  should_fail_ex.cold+0x5/0xa
[ 2099.781663]  copyin+0x19/0x120
[ 2099.782127]  copy_page_from_iter_atomic+0x276/0x12a0
[ 2099.782803]  ? __pfx_fat_get_block+0x10/0x10
[ 2099.783379]  ? __pfx_cont_write_begin+0x10/0x10
[ 2099.784009]  ? fault_in_readable+0x147/0x250
[ 2099.784603]  ? __pfx_copy_page_from_iter_atomic+0x10/0x10
[ 2099.785302]  ? __pfx_fault_in_readable+0x10/0x10
[ 2099.785933]  ? fat_write_begin+0x95/0x180
[ 2099.786487]  ? __pfx_fat_get_block+0x10/0x10
[ 2099.787094]  generic_perform_write+0x2cf/0x580
[ 2099.787702]  ? __pfx_generic_perform_write+0x10/0x10
[ 2099.788348]  ? __pfx_fat_update_time+0x10/0x10
[ 2099.788949]  ? __pfx_file_update_time+0x10/0x10
[ 2099.789544]  ? generic_write_checks+0x2c0/0x400
[ 2099.790168]  __generic_file_write_iter+0x308/0x4b0
[ 2099.790209] syz-executor.2: attempt to access beyond end of device
[ 2099.790209] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2099.790784]  ? trace_lock_acquire+0x16c/0x1c0
[ 2099.790840]  generic_file_write_iter+0xe7/0x350
[ 2099.790897]  vfs_write+0x9c7/0xdd0
[ 2099.790936]  ? __pfx_vfs_write+0x10/0x10
[ 2099.791843] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2099.792288]  ? __pfx___fget_files+0x10/0x10
[ 2099.792347]  ? __fget_files+0x270/0x480
[ 2099.795504]  ksys_write+0x12b/0x260
[ 2099.795974]  ? __pfx_ksys_write+0x10/0x10
[ 2099.796503]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2099.797166]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2099.797834]  do_syscall_64+0x3f/0x90
[ 2099.798332]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2099.799003] RIP: 0033:0x7fe4f88bdb19
[ 2099.799471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2099.801660] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2099.802594] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2099.803547] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2099.804630] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2099.805705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2099.806772] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2099.807885]  </TASK>
[ 2099.844125] syz-executor.4: attempt to access beyond end of device
[ 2099.844125] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2099.845237] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2099.872783] loop1: detected capacity change from 0 to 40
[ 2100.014423] syz-executor.0: attempt to access beyond end of device
[ 2100.014423] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2100.016361] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2100.037325] syz-executor.1: attempt to access beyond end of device
[ 2100.037325] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2100.038428] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:20:44 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
mknod$loop(&(0x7f0000000000)='./file1\x00', 0x100, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:20:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:20:44 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0xfaba, 0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, r2}}, 0x7f)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2)
r3 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r4, r0, 0x0, 0xfffffdef)
write$binfmt_aout(r3, &(0x7f0000000380)={{0x10b, 0x53, 0x2, 0x36f, 0x37, 0xfff, 0x327, 0x101}, "aaac76c803f88292f96cec6290dd407ba45869a378b449757c3ca25bff4ccb90eaae32de188d6a5bcfbd", ['\x00', '\x00', '\x00', '\x00']}, 0x44a)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='sessionid\x00')
ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000180)=0x8)

04:20:44 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\t', 0x292e9)

[ 2114.716988] loop6: detected capacity change from 0 to 40
[ 2114.734549] loop2: detected capacity change from 0 to 40
04:20:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:20:44 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000240))
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x0, 0x1, 0x2, 0x3f, 0x0, 0x0, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x6b00, 0x4}, 0x8000, 0x9, 0x101, 0x7, 0xfffffffffffffffe, 0x80000000, 0x3, 0x0, 0xc522, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x7)
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
recvmsg$unix(r1, &(0x7f0000000c40)={&(0x7f0000000300), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000b00)=""/145, 0x91}, {&(0x7f0000000380)=""/4, 0x4}], 0x2, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x40000101)
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:20:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 63)

04:20:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="ed", 0x292e9)

[ 2114.752773] loop4: detected capacity change from 0 to 40
[ 2114.780178] loop0: detected capacity change from 0 to 40
[ 2114.787599] loop1: detected capacity change from 0 to 40
[ 2114.840981] syz-executor.2: attempt to access beyond end of device
[ 2114.840981] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
04:20:44 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x80101, 0xc0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = signalfd4(r3, &(0x7f0000000000)={[0x6]}, 0x8, 0x800)
r5 = openat(r4, &(0x7f00000000c0)='./file2\x00', 0x400000, 0x61)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r7 = fcntl$dupfd(r6, 0x406, r2)
ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000240)={{0x1ff, 0x8001}, 0x100, './file1/file0\x00'})
fcntl$setpipe(r0, 0x407, 0x2)
r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002580)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002600)={0x1, &(0x7f00000025c0)=[{0x8, 0x0, 0x5, 0xc059}]})
r10 = accept4$bt_l2cap(r5, 0x0, &(0x7f0000002640), 0x800)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r11, &(0x7f0000000080)="01", 0x292e9)
[ 2114.842339] Buffer I/O error on dev loop2, logical block 31, lost async page write
sendmsg$netlink(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)={0x10, 0x33, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x10}, {&(0x7f0000000380)={0x2194, 0x23, 0x400, 0x70bd27, 0x25dfdbff, "", [@generic="0a08d1fb06533ee023914fd622e17fb692df36d0a922670e1c134ba022b6e6d212d4b68bf063f4fbb914d56428492fe5fd020dc035cbf53a4fb0b911b1993674659e3193e00289752aa44d6cdde263f61ec3d59302e01728f1a84ae7895d976a82e66276bd1f4e03a6a685c2873e26ff6d5442a38210aef6ccb8361268506bc438a40ce645b308f2dc0a2bd592283b93be56d7d1da2fac", @generic="7aada64b7a361b0a665456", @typed={0x8, 0x7, 0x0, 0x0, @fd}, @generic="9ccd94d031a792e010ad4ff0a31b317d58638a291261fee88536604666ddee126841c9935442e77a98281e318c54b072bac38395a2e33f973cacb614d16fc4ca8f9e", @generic="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", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@local}, @generic="c32aa9fc1a80d450e40f1bcc", @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0xfffffff8}, @nested={0x1067, 0x15, 0x0, 0x1, [@typed={0xc, 0x49, 0x0, 0x0, @u64=0x400}, @generic="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", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x436}, @generic="91aeda0e3417a7f5106eb520c9737eaf8f41a6e4497289a26055e508db263860283866beb6a4c98cdaf35561f919339ed3745a", @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x93, 0x0, 0x0, @u32=0x8}]}]}, 0x2194}], 0x2, &(0x7f0000002680)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r1, @ANYBLOB="030f0000"], 0x48, 0x54e931460119f7e8}, 0x8010)

[ 2114.883056] syz-executor.4: attempt to access beyond end of device
[ 2114.883056] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2114.884359] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2114.895244] syz-executor.1: attempt to access beyond end of device
[ 2114.895244] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2114.896603] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2114.914170] loop6: detected capacity change from 0 to 40
[ 2114.914939] FAULT_INJECTION: forcing a failure.
[ 2114.914939] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2114.914970] CPU: 1 PID: 11836 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2114.914989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2114.914999] Call Trace:
[ 2114.915004]  <TASK>
[ 2114.915012]  dump_stack_lvl+0x8f/0xb7
[ 2114.915045]  should_fail_ex.cold+0x5/0xa
[ 2114.915073]  prepare_alloc_pages+0x178/0x500
[ 2114.915107]  __alloc_pages+0x149/0x510
[ 2114.915134]  ? __pfx___alloc_pages+0x10/0x10
[ 2114.919351]  ? __pfx___lock_acquire+0x10/0x10
[ 2114.919695]  ? __pfx_lock_release+0x10/0x10
[ 2114.920022]  alloc_pages+0x1a0/0x260
[ 2114.920303]  filemap_alloc_folio+0x363/0x400
[ 2114.920616]  ? __filemap_get_folio+0x253/0xcd0
[ 2114.920943]  ? __pfx_lock_release+0x10/0x10
[ 2114.921256]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2114.921609]  ? xas_load+0x6a/0x140
[ 2114.921879]  __filemap_get_folio+0x32b/0xcd0
[ 2114.922211]  ? __pfx___filemap_get_folio+0x10/0x10
[ 2114.922574]  ? lock_is_held_type+0xdb/0x130
[ 2114.922895]  pagecache_get_page+0x2e/0x130
[ 2114.923202]  ? __pfx_fat_get_block+0x10/0x10
[ 2114.923524]  block_write_begin+0x35/0x450
[ 2114.923830]  cont_write_begin+0x4fe/0x700
[ 2114.924137]  ? __pfx_fat_get_block+0x10/0x10
[ 2114.924455]  ? __pfx_cont_write_begin+0x10/0x10
[ 2114.924791]  ? fault_in_readable+0x147/0x250
[ 2114.925118]  ? __pfx_fault_in_readable+0x10/0x10
[ 2114.925467]  fat_write_begin+0x89/0x180
[ 2114.925758]  ? __pfx_fat_get_block+0x10/0x10
[ 2114.926080]  generic_perform_write+0x25a/0x580
[ 2114.926425]  ? __pfx_generic_perform_write+0x10/0x10
[ 2114.926784]  ? __pfx_fat_update_time+0x10/0x10
[ 2114.927116]  ? __pfx_file_update_time+0x10/0x10
[ 2114.927446]  ? generic_write_checks+0x2c0/0x400
[ 2114.927787]  __generic_file_write_iter+0x308/0x4b0
[ 2114.928137]  ? trace_lock_acquire+0x16c/0x1c0
[ 2114.928474]  generic_file_write_iter+0xe7/0x350
[ 2114.928817]  vfs_write+0x9c7/0xdd0
[ 2114.929074]  ? __pfx_vfs_write+0x10/0x10
[ 2114.929359]  ? __pfx___fget_files+0x10/0x10
[ 2114.929669]  ? __fget_files+0x270/0x480
[ 2114.929976]  ksys_write+0x12b/0x260
[ 2114.930230]  ? __pfx_ksys_write+0x10/0x10
[ 2114.930522]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2114.930879]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2114.931252]  do_syscall_64+0x3f/0x90
[ 2114.931522]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2114.931888] RIP: 0033:0x7fe4f88bdb19
[ 2114.932145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2114.933364] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2114.933890] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2114.934381] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2114.934870] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2114.935354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2114.935844] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2114.936359]  </TASK>
04:20:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2114.966374] syz-executor.6: attempt to access beyond end of device
[ 2114.966374] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2114.968191] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2114.985934] syz-executor.6: attempt to access beyond end of device
[ 2114.985934] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2114.987806] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:20:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="ff", 0x292e9)

[ 2115.020490] syz-executor.6: attempt to access beyond end of device
[ 2115.020490] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2115.022328] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:20:45 executing program 7:
r0 = fork()
process_vm_readv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2115.058457] loop2: detected capacity change from 0 to 40
04:20:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
read$char_usb(r1, &(0x7f0000000240)=""/185, 0xb9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0x7}, {0x0, 0x0, 0x2800}], 0xa002, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRESOCT=r2])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r3, r5, 0x0, 0xfffffdef)
signalfd(r5, &(0x7f0000000300)={[0xffffffff]}, 0x8)

[ 2115.067863] syz-executor.6: attempt to access beyond end of device
[ 2115.067863] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2115.069423] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:20:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\n', 0x292e9)

[ 2115.077216] syz-executor.6: attempt to access beyond end of device
[ 2115.077216] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2115.078295] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2115.084512] syz-executor.0: attempt to access beyond end of device
[ 2115.084512] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2115.086038] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2115.121203] syz-executor.2: attempt to access beyond end of device
[ 2115.121203] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2115.122358] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2115.124198] loop4: detected capacity change from 0 to 40
04:20:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
creat(&(0x7f0000000000)='./file0\x00', 0x4)

[ 2115.178508] loop1: detected capacity change from 0 to 40
04:20:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 64)

04:20:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2115.303153] loop6: detected capacity change from 0 to 40
[ 2115.345898] loop0: detected capacity change from 0 to 40
04:20:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\b', 0x292e9)

[ 2115.398544] loop2: detected capacity change from 0 to 40
[ 2115.407419] FAULT_INJECTION: forcing a failure.
[ 2115.407419] name failslab, interval 1, probability 0, space 0, times 0
[ 2115.408547] CPU: 1 PID: 11872 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2115.409119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2115.409688] Call Trace:
[ 2115.409876]  <TASK>
[ 2115.410044]  dump_stack_lvl+0x8f/0xb7
[ 2115.410344]  should_fail_ex.cold+0x5/0xa
[ 2115.410648]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2115.410999]  should_failslab+0x9/0x20
[ 2115.411282]  kmem_cache_alloc+0x5a/0x300
[ 2115.411589]  fat_cache_add.part.0+0x5b4/0xb50
[ 2115.411936]  fat_get_cluster+0x922/0xd40
[ 2115.412250]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2115.412624]  fat_get_mapped_cluster+0x216/0x450
[ 2115.412973]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2115.413369]  fat_bmap+0x1fc/0x460
[ 2115.413642]  fat_get_block+0x33e/0x930
[ 2115.413942]  ? __pfx_fat_get_block+0x10/0x10
[ 2115.414276]  ? do_raw_spin_unlock+0x53/0x220
[ 2115.414624]  __block_write_begin_int+0x380/0x13d0
[ 2115.414982]  ? __pfx_fat_get_block+0x10/0x10
[ 2115.415319]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2115.415699]  ? PageHeadHuge+0x169/0x1b0
[ 2115.415998]  ? __pfx_fat_get_block+0x10/0x10
[ 2115.416338]  block_write_begin+0xb9/0x450
[ 2115.416648]  cont_write_begin+0x4fe/0x700
[ 2115.416965]  ? __pfx_fat_get_block+0x10/0x10
[ 2115.417285]  ? __pfx_cont_write_begin+0x10/0x10
[ 2115.417631]  ? fault_in_readable+0x147/0x250
[ 2115.417959]  ? __pfx_fault_in_readable+0x10/0x10
[ 2115.418313]  fat_write_begin+0x89/0x180
[ 2115.418603]  ? __pfx_fat_get_block+0x10/0x10
[ 2115.418931]  generic_perform_write+0x25a/0x580
[ 2115.419273]  ? __pfx_generic_perform_write+0x10/0x10
[ 2115.419640]  ? __pfx_fat_update_time+0x10/0x10
[ 2115.419972]  ? __pfx_file_update_time+0x10/0x10
[ 2115.420319]  ? generic_write_checks+0x2c0/0x400
[ 2115.420671]  __generic_file_write_iter+0x308/0x4b0
[ 2115.421032]  ? trace_lock_acquire+0x16c/0x1c0
[ 2115.421370]  generic_file_write_iter+0xe7/0x350
[ 2115.421712]  vfs_write+0x9c7/0xdd0
[ 2115.421982]  ? __pfx_vfs_write+0x10/0x10
[ 2115.422275]  ? __pfx___fget_files+0x10/0x10
[ 2115.422601]  ? __fget_files+0x270/0x480
[ 2115.422914]  ksys_write+0x12b/0x260
[ 2115.423180]  ? __pfx_ksys_write+0x10/0x10
[ 2115.423480]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2115.423854]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2115.424236]  do_syscall_64+0x3f/0x90
[ 2115.424521]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2115.424902] RIP: 0033:0x7fe4f88bdb19
[ 2115.425171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2115.426405] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2115.426936] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2115.427436] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2115.427935] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2115.428444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2115.428940] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2115.429459]  </TASK>
[ 2115.437289] loop4: detected capacity change from 0 to 40
04:21:02 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
recvfrom(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x40000000, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

04:21:02 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 65)

04:21:02 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x122)
sendfile(r1, r3, 0x0, 0xfffffdef)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x600102, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x30)
syz_io_uring_setup(0x2b2, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r8, &(0x7f0000000080)="01", 0x292e9)
syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, r8, &(0x7f00000000c0), r0, 0x3, 0x0, 0x1}, 0x749c)

04:21:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\v', 0x292e9)

04:21:02 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:21:03 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:21:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\v', 0x292e9)

04:21:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x2c440, 0xb)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0)
sendto(r3, &(0x7f0000000040)="9946de4c548bb77fe12a338ee4a620a6f5461464856ae9793a5938", 0x1b, 0x4000, &(0x7f0000000180)=@ll={0x11, 0x18, r6, 0x1, 0x5, 0x6, @remote}, 0x80)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2133.030166] loop2: detected capacity change from 0 to 40
[ 2133.037402] loop0: detected capacity change from 0 to 40
[ 2133.039008] loop4: detected capacity change from 0 to 40
[ 2133.062858] loop6: detected capacity change from 0 to 40
[ 2133.068448] loop1: detected capacity change from 0 to 40
[ 2133.200711] bio_check_eod: 8 callbacks suppressed
[ 2133.201070] syz-executor.1: attempt to access beyond end of device
[ 2133.201070] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.203622] buffer_io_error: 7 callbacks suppressed
[ 2133.203683] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2133.224306] syz-executor.6: attempt to access beyond end of device
[ 2133.224306] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.226295] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2133.248403] syz-executor.2: attempt to access beyond end of device
[ 2133.248403] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.250429] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2133.271496] syz-executor.4: attempt to access beyond end of device
[ 2133.271496] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.274164] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2133.294136] syz-executor.6: attempt to access beyond end of device
[ 2133.294136] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.295799] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2133.327506] syz-executor.6: attempt to access beyond end of device
[ 2133.327506] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.329135] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2133.373799] syz-executor.0: attempt to access beyond end of device
[ 2133.373799] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.377027] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:21:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\f', 0x292e9)

04:21:03 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:21:03 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 66)

04:21:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:21:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0xc7c442924b35b253, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141540, 0x124)
write(r1, &(0x7f0000000080)="01", 0x292e9)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)
setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'btrfs.', 'vfat\x00'}, &(0x7f00000000c0)='vfat\x00', 0x5, 0x6)

04:21:03 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
pwrite64(r2, &(0x7f0000000240)="9bf953c62dccb4b039efa2473c7d01a9c731b40a825fbd32cce0524b2257bbfb6b0594e21ba0954b9543ec64fff0d68ef04d27dc9e402813d7a341bcc34d7d9f9aef2ad2b31465fe86ed099e90e63f65e12b14c671b5c8fe6163cc6f9fa0d415ac853bbc51391a300dfd1b173d4e0d8d6c92001c9761c85875542e130aeee081d3b00359c30218d0678c10815a3573864dfe6e032a7f45def284f0c797e81f6adcb5fdc2f1745a235fb19aea4ac2003591f48820302d8c9008b69e91dd51fc53432ae5b89d82393d089f7eda6bebe1a27b679645", 0xd4, 0xa26)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:21:03 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r2 = syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x0, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000b00)="281a71793503a5884e5d0e5bb462efea2bf5197b1f465edc823993ae40c7a551622ec1a8fe72ac24f5e1eb6e22b5025e33731d4739c83cf2dfc91466d042689a3c73bd48b752df22b4e90c9bfbeea65263b0eef483aec04ca286c89837c1a94858d6ae008646f2345f494182e12ca5ac6f38d5daa2364389a6330a7696f887fd3c5694375edbc92020cebb4917152ea34412f0e84d0a9b6d5fa84fde93442beb030eefd263f8ba864faa8e0fece873fb428151f821616c83f7a99dd8aab6f0871ccdc0f643b2966b1a292867aac681e3da67bd1e077499567f7fb3ad82b27ea0ab500d899ad111d778a864b30a399415cc4bdcd1e2b7", 0xf6, 0x3ff}, {&(0x7f0000000c00)="b897b40fb268d9103ce19e850d009cf3223b2bb545c596eebb795423e9dd94c48d466322548285057dd2b7362891f0aa639872602e2b2aa89b30673ee49cec3c2f692a91d390a6ebd8211ca47632ae3b19aa30bcb22c28d391cf4e81ddea35ffb9de673f811391eae4503b7a38b52f3822ad7e27c7dbd100ff66ca429c95f0226446ba0575deef87fb2083338f21e0de220f1a72f8743f257a944ac9340cca15e5bc49d6059e33a1c930f6c15d8090e21ff0a5f61a00e0826b3483d1f20062c8ce541717873237578361a78a4b03268998360685429e0e3cf764369f0cd84909f98bac4c219f93203e5c4f369da2d537a76f6946f0cbc37e", 0xf8, 0x7}], 0x4000, &(0x7f0000000d00)={[{@fat=@nocase}, {@dots}], [{@uid_gt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]})
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000d80)={0xffffffffffffffff, r2, 0x66})
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000240)=0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2133.626301] loop0: detected capacity change from 0 to 40
[ 2133.636998] loop4: detected capacity change from 0 to 40
[ 2133.641984] loop1: detected capacity change from 0 to 40
04:21:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x101042, 0x4)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x4)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r3, {0x2}}, './file0\x00'})
openat(r4, &(0x7f0000000040)='./file0\x00', 0x125000, 0x97)
sendfile(r0, r3, 0x0, 0xfffffdef)

[ 2133.720416] loop6: detected capacity change from 0 to 40
[ 2133.785419] syz-executor.4: attempt to access beyond end of device
[ 2133.785419] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.787392] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2133.788528] loop7: detected capacity change from 0 to 3
[ 2133.807421] syz-executor.6: attempt to access beyond end of device
[ 2133.807421] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.809034] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2133.825062] FAT-fs (loop7): Unrecognized mount option "uid>00000000000000000000" or missing value
[ 2133.835047] FAULT_INJECTION: forcing a failure.
[ 2133.835047] name failslab, interval 1, probability 0, space 0, times 0
[ 2133.836936] CPU: 0 PID: 11920 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2133.837949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2133.838964] Call Trace:
[ 2133.839306]  <TASK>
[ 2133.839602]  dump_stack_lvl+0x8f/0xb7
[ 2133.840122]  should_fail_ex.cold+0x5/0xa
[ 2133.840665]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2133.841278]  should_failslab+0x9/0x20
[ 2133.841800]  kmem_cache_alloc+0x5a/0x300
[ 2133.842343]  fat_cache_add.part.0+0x5b4/0xb50
[ 2133.842962]  fat_get_cluster+0x922/0xd40
[ 2133.843517]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2133.844163]  ? rcu_read_lock_sched_held+0x42/0x80
[ 2133.844824]  ? __mark_inode_dirty+0x249/0xee0
[ 2133.845427]  fat_free.isra.0+0x393/0x940
[ 2133.845954]  ? __pfx_fat_free.isra.0+0x10/0x10
[ 2133.846578]  ? unmap_mapping_range+0x109/0x280
[ 2133.847171]  ? __pfx_unmap_mapping_range+0x10/0x10
[ 2133.847819]  ? __pfx_unmap_mapping_range+0x10/0x10
[ 2133.848475]  fat_truncate_blocks+0x126/0x1a0
[ 2133.849085]  fat_write_begin+0x13b/0x180
[ 2133.849638]  generic_perform_write+0x25a/0x580
[ 2133.850262]  ? __pfx_generic_perform_write+0x10/0x10
[ 2133.850928]  ? __pfx_fat_update_time+0x10/0x10
[ 2133.851554]  ? __pfx_file_update_time+0x10/0x10
[ 2133.852162]  ? generic_write_checks+0x2c0/0x400
[ 2133.852796]  __generic_file_write_iter+0x308/0x4b0
[ 2133.853442]  ? trace_lock_acquire+0x16c/0x1c0
[ 2133.854053]  generic_file_write_iter+0xe7/0x350
[ 2133.854679]  vfs_write+0x9c7/0xdd0
[ 2133.855163]  ? __pfx_vfs_write+0x10/0x10
[ 2133.855702]  ? __pfx___fget_files+0x10/0x10
[ 2133.856300]  ? __fget_files+0x270/0x480
[ 2133.856882]  ksys_write+0x12b/0x260
[ 2133.857365]  ? __pfx_ksys_write+0x10/0x10
[ 2133.857911]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2133.858608]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2133.859290]  do_syscall_64+0x3f/0x90
[ 2133.859800]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2133.860485] RIP: 0033:0x7fe4f88bdb19
[ 2133.860983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2133.863234] RSP: 002b:00007fe4f5e33188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2133.864199] RAX: ffffffffffffffda RBX: 00007fe4f89d0f60 RCX: 00007fe4f88bdb19
[ 2133.865107] RDX: 00000000000292e9 RSI: 0000000020000080 RDI: 0000000000000007
[ 2133.866008] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2133.866909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2133.867813] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2133.868760]  </TASK>
[ 2133.892160] syz-executor.6: attempt to access beyond end of device
[ 2133.892160] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2133.896768] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2134.048866] loop7: detected capacity change from 0 to 3
[ 2134.054909] FAT-fs (loop7): Unrecognized mount option "uid>00000000000000000000" or missing value
[ 2149.345368] loop0: detected capacity change from 0 to 40
04:21:19 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r1, &(0x7f00000000c0)='.\x00', 0x420080, 0x45)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380))

04:21:19 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x40000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000300)=""/174, 0x23)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:21:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:21:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\r', 0x292e9)

04:21:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x5c6, 0x8}, {0x0, 0x8}], 0xee00}, 0x18, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:21:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 67)

04:21:19 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
connect(r2, &(0x7f0000000000)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x1}, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

04:21:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2149.363013] loop4: detected capacity change from 0 to 40
[ 2149.416453] loop2: detected capacity change from 0 to 40
[ 2149.425168] loop1: detected capacity change from 0 to 40
[ 2149.425946] bio_check_eod: 4 callbacks suppressed
[ 2149.425961] syz-executor.0: attempt to access beyond end of device
[ 2149.425961] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2149.425993] buffer_io_error: 4 callbacks suppressed
[ 2149.426004] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2149.432844] loop6: detected capacity change from 0 to 40
04:21:19 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f0000000240)='./file1/../file0\x00', &(0x7f0000000200)={0x0, 0x1, 0x1}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:21:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 68)

[ 2149.511184] syz-executor.6: attempt to access beyond end of device
[ 2149.511184] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2149.513153] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2149.541846] syz-executor.4: attempt to access beyond end of device
[ 2149.541846] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2149.544300] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2149.569965] loop0: detected capacity change from 0 to 40
[ 2149.571184] syz-executor.6: attempt to access beyond end of device
[ 2149.571184] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2149.615072] syz-executor.0: attempt to access beyond end of device
[ 2149.615072] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2149.616324] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2149.619175] syz-executor.6: attempt to access beyond end of device
[ 2149.619175] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2149.620828] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:21:19 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
dup3(r1, r1, 0x80000)
read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000300)={0x1, 0x1000, 0x81, 0x9, 0xffffffff})
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2149.653442] syz-executor.1: attempt to access beyond end of device
[ 2149.653442] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2149.655557] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2149.697047] syz-executor.2: attempt to access beyond end of device
[ 2149.697047] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2149.698325] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:21:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 69)

04:21:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:21:36 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000001c0)='\x00', &(0x7f0000000240)='./file0\x00', r0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond_slave_0\x00'})
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
sendfile(r4, r1, 0x0, 0xfffffdef)

04:21:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000240))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
openat(r0, &(0x7f0000000300)='./file1\x00', 0x40, 0x81)
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)={0x0, 0xc}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:21:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="0e", 0x292e9)

04:21:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'vfat\x00'}], 0xa, "fa8ac58d606bfeee000a4cffb19e9b7710592bc234ffb6200dd2dc139c33302f1830c7b4fb4a7b6c915e6bffea8658399ba77c0e7c359386f6939f5e625a635b593b5afaa0403cd22c1d040ea48611139b9af1273e1b48cad423802456865d1cabac1240ca83cf1075017aa7e0b59929b9cde063a44ede0314e4273dd85469efaa4a6b9ed138a6c82122697e6618e26d60af6d8dc066fb0df2a5f58f0cbbb082f8aab8fe6a77852b39c4cd41df9ad93403c94c59949874d7e9f67bb3b2fd3851173e7617e9456d9f15015fdb1f3fbb65286d23edcc34b72c76a8481c2427775e8b806d0e"}, 0xf5)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:21:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:21:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x24000, 0x2)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2166.473232] loop0: detected capacity change from 0 to 40
[ 2166.479841] loop1: detected capacity change from 0 to 40
[ 2166.514416] syz-executor.0: attempt to access beyond end of device
[ 2166.514416] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2166.515846] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2166.519407] syz-executor.1: attempt to access beyond end of device
[ 2166.519407] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2166.520508] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2166.546495] loop2: detected capacity change from 0 to 40
[ 2166.549200] loop4: detected capacity change from 0 to 40
[ 2166.551450] loop6: detected capacity change from 0 to 40
04:21:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 70)

04:21:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:21:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="0f", 0x292e9)

[ 2166.652471] syz-executor.6: attempt to access beyond end of device
[ 2166.652471] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2166.653364] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2166.684900] syz-executor.6: attempt to access beyond end of device
[ 2166.684900] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2166.728469] loop1: detected capacity change from 0 to 40
04:21:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x48b3af8e}}, './file0\x00'})
openat(r2, &(0x7f0000000040)='./file1\x00', 0x0, 0xc1)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

[ 2166.802506] loop0: detected capacity change from 0 to 40
[ 2166.886626] syz-executor.2: attempt to access beyond end of device
[ 2166.886626] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2166.889037] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2166.947147] syz-executor.4: attempt to access beyond end of device
[ 2166.947147] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2166.949123] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:21:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$TCFLSH(r2, 0x540b, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:21:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x200c02, 0x10)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x60)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x181040, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x200)
sendfile(r1, r2, 0x0, 0x100000fffffdef)

04:21:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2167.100407] syz-executor.0: attempt to access beyond end of device
[ 2167.100407] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2167.103021] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:21:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="10", 0x292e9)

[ 2167.116293] loop4: detected capacity change from 0 to 40
[ 2167.166316] syz-executor.4: attempt to access beyond end of device
[ 2167.166316] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2167.167426] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:21:37 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
write$binfmt_aout(r4, &(0x7f0000000240)={{0xcc, 0x60, 0xff, 0x2e3, 0x2f6, 0x6000, 0x209, 0x7fff}, "5ffe7f682e231dbec48fa13da05dfcf9b59aa77093971a3cd1ee9315dfa712e679feddf96b5499244be02409", ['\x00', '\x00', '\x00']}, 0x34c)

[ 2167.203281] loop6: detected capacity change from 0 to 40
04:21:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000240))
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000f40)={<r5=>0x0, 0x0, 0x0, [0x2, 0xfcf, 0x7fffffff, 0x7ff, 0x1], [0x0, 0x8001, 0xfffe, 0x8, 0x5, 0x80d, 0xd63, 0xfffffffffffffc00, 0x3f, 0x3, 0x7, 0x100, 0x2, 0x2, 0x2, 0x0, 0x10000, 0x5, 0x4, 0x7, 0x5, 0xeb, 0x2, 0xffff, 0x7, 0xfffffffffffff001, 0x6, 0x9, 0x0, 0x0, 0x81, 0x2, 0x5, 0x1, 0x6, 0x3ff, 0x85, 0x88db, 0x2, 0xed, 0x5, 0x1000, 0x7, 0x4, 0x2, 0xff, 0x5, 0xff, 0x1, 0x9, 0x0, 0x3, 0x6, 0x4225cdcb, 0x4, 0x7b43, 0xb28, 0x100000001, 0x2, 0x4, 0x4, 0x7f, 0x2, 0x3, 0x1, 0x4, 0x9, 0x8, 0x401, 0x3, 0xfff, 0xffffffffffffcf00, 0x43, 0x1a6b, 0x3800000000000, 0x7a2f, 0x4, 0x9, 0x1, 0x9, 0x3ff, 0x2, 0x3, 0x5, 0x7, 0x6, 0x0, 0x3b3, 0x6111, 0x7, 0x1, 0x7, 0x1, 0x3, 0x2, 0x3, 0x46, 0x401, 0x2, 0x0, 0x8001, 0x4c, 0x4, 0x5, 0x7, 0x8, 0x8, 0xc50, 0x80000001, 0x1, 0x401, 0x4, 0xffffffff, 0xff, 0x6, 0x10000, 0x6, 0x7, 0x1, 0xfffffffffffffffe, 0x7]})
ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000b00)={r5, 0x7, 0xffffffffffffffc0})

[ 2167.262798] syz-executor.6: attempt to access beyond end of device
[ 2167.262798] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2167.264597] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2167.307978] loop1: detected capacity change from 0 to 40
[ 2167.381348] syz-executor.1: attempt to access beyond end of device
[ 2167.381348] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2167.383241] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:21:53 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 71)

04:21:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:21:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:21:53 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000d00)={0x5, 0x80, 0x59, 0x0, 0x9, 0x9, 0x0, 0xfffffffffffffffc, 0x200, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x904, 0x8, 0xe767, 0x8, 0x100000001, 0x0, 0x2, 0x0, 0x40, 0x0, 0x5}, 0xffffffffffffffff, 0xa, r0, 0xa)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000c40)=""/177, 0xb1)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x80800)
openat(r3, &(0x7f0000000300)='./file1\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000340)=""/184)
preadv(r0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/237, 0xed}], 0x1, 0x1000, 0x3)

04:21:53 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="11", 0x292e9)

04:21:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x1, [0x7d0a, 0x6, 0x2, 0x1, 0x10000, 0x5]})
sendfile(r0, r2, 0x0, 0xfffffdef)

04:21:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/../file0\x00', 0xc100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:21:53 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101442, 0x1)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
openat(r3, &(0x7f0000000180)='./file0\x00', 0x109000, 0x20)
openat(r2, &(0x7f00000000c0)='./file0\x00', 0x210400, 0x18)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2183.818911] loop2: detected capacity change from 0 to 40
[ 2183.844159] syz-executor.2: attempt to access beyond end of device
[ 2183.844159] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2183.845280] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2183.846629] loop1: detected capacity change from 0 to 40
[ 2183.861018] loop4: detected capacity change from 0 to 40
[ 2183.876287] loop0: detected capacity change from 0 to 40
[ 2183.889730] loop6: detected capacity change from 0 to 40
[ 2183.918480] syz-executor.1: attempt to access beyond end of device
[ 2183.918480] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2183.919656] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2183.937501] syz-executor.4: attempt to access beyond end of device
[ 2183.937501] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2183.938636] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:21:53 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2183.960016] syz-executor.1: attempt to access beyond end of device
[ 2183.960016] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2183.961007] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2183.970984] syz-executor.6: attempt to access beyond end of device
[ 2183.970984] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2183.972543] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2183.993540] syz-executor.0: attempt to access beyond end of device
[ 2183.993540] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2183.995170] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2183.998597] syz-executor.6: attempt to access beyond end of device
[ 2183.998597] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2183.999429] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:21:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="12", 0x292e9)

04:21:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="ff", 0x292e9)

[ 2184.077609] loop2: detected capacity change from 0 to 40
04:21:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x8001, 0xa, &(0x7f0000002740)=[{&(0x7f0000000240)="c7b59612926769eb9d13d26846eda2757a0fa78ab172b5e350a30a94b8b597ff5a1e27ae03d3da4edeb248c002e929b2f2305e30e386f0420cf3b3b60193c56cbbf13e1a553fee4036c32149f69603ed73d3a44fa8ae5a4e32989956343120b71836b42491c190fdcae16e51f9f880b19d20fd1b88a8ec1a2f738a55c06739d779a04bea6da04fe05d2ab608c4507e88e7f07344362091dfbe679a031da70a3ce1ce2d436277e799b3390ae44664c2de4bcf12a7e7770598b0ed93e9d04afce39acb8f1ef20cd5c8d86a8dbd1aa7f9498f095985564e7b5aecfe2da9", 0xdc, 0x980}, {&(0x7f0000000340)="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", 0x1000, 0x9}, {&(0x7f0000000140)="8d9fe20f7a23d1f0de2830657e9b4c27b41504b309983dd4dd64617447ee8bf263136c0e6a3f4e224ee28c16791129895cfef2d1", 0x34, 0x80000001}, {&(0x7f0000001340)="6c800ee9f231978ecc1adfec779d91a807c40cb8c3d509f6fe44ddf1bccf9cb17c62eb09afcc040214c0388a425d5d8f7b2010fd039db7ad51d2d2b1698969f11565eb913a3aa4e4711e723acd1c00c03bba71b3ba7129d4f31cc65c27e89fffb92ca19972562aa4e1fe3bd3b804ee2299462e2a80678d55be63293fa249e8c789b1be64e65dde7f0f8e2b83caa97b0666cc976a757bb3ad8fd0edee24259d7c8fd22d7d32239ee51e5086e3b6bda3b4fe3d72c1461caed123051deac742cb73e6889de1dd698c75c7fc123527bc76eab014", 0xd2, 0xfffffffffffffff8}, {&(0x7f0000001440)="09dd4865f7c5d589d0ee743fd065bc6a7e89d8f5dc4bce45243b54ccd3f5d42eec602865315ff1db60ac6a8aaa159e9bb8141e6bb21736cd46d12634477e62b5b1512a6b8de7edb076ee96036bbc0047c35411e04c44225333235be91b3ebd84eea698a9124469db1547fb761257bd28b23b1142b5b8723aa2f2ca22cf044657bac74a6d2d921a31b982b996a13d52763325fc5419123a0b9e81c5cf83a3450da9f5dd8590ee691f998c2fe3648be17ac3a1ab1e4abc578e5d21dafde79f201f", 0xc0, 0x4}, {&(0x7f0000000180)="2d85466cd27e8bb432dd64a87ff324f043e792b11284c54e76aaeff6484d7370b8e46ee3970e4daf71c7df4e9fab88888700383f944d7546683bbe2035", 0x3d, 0xe00}, {&(0x7f0000001500)="565be9918dcebb2980f63704999d920452aafff45e4e588f8c82b5d2e13a68a31987fa12734e9785bf2b38860ef6ab81542be0e23084463e6b5be6b435ae6a4f5394d9818fea293414658bf3490c03f9d42527b585283ad014b7469069545b8ce0d2d033af22236ef237143acd7a95f6054706f7a61522398023952361b19b1e25433265dc15355627e97d58", 0x8c, 0x3}, {&(0x7f00000015c0)="f59805967426144e4ec9d298637e97eb523b150c0e7a1d9d2ae690b65db42c2c2a150f6021431f975b7ee159bd925a84c6a264b384afe03fb895a771a77a8e044c487fac5191dd59e9dcb766c38a4a63f4e56ae6b99fe264d570ecccb0d9b169293766343947ece7961e145c0471eb05689b3bd5d48b5ca461fc4143c07944800f2e0a5d8d56fd285aa37ebbe38b3661bd98134d96024dc8d281b25e6dc0044e3ddde6352023a108a21283bea7948a539c591a355bdee6198e8c356c2a5931dc3f7954bfb20402dacac3aec96d785dfe1c91d1f77ff44f0b13645e298a7940fb36640e13ffce9fa19ee4e21831af1a", 0xef, 0x100000001}, {&(0x7f00000016c0)="c96adf1351cf766d9ef2c402e6cd158080c37f8ce8448379cf41dd27e9a74a70386a07901c51252f94657f7ee724c119143c3e4dde0fef3d6fe0cd819bc436eaba2a8227b0785aa5f2f4", 0x4a, 0xb6d}, {&(0x7f0000001740)="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", 0x1000, 0x44460e82}], 0x20, &(0x7f0000002840)={[{@data_ordered}, {@nodiscard}, {@journal_checksum}, {@norecovery}, {@resgid={'resgid', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@subj_user={'subj_user', 0x3d, '!+\'\xf4-(^,]*'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x30, 0x36, 0x61, 0x66, 0x39, 0x35, 0x35], 0x2d, [0x33, 0x62, 0x30, 0x36], 0x2d, [0x34, 0x30, 0x32, 0x62], 0x2d, [0x62, 0x38, 0x32, 0x63], 0x2d, [0x33, 0x36, 0x53, 0x62, 0x64, 0x63, 0x66, 0x38]}}}, {@subj_user={'subj_user', 0x3d, '('}}]})
openat(r0, &(0x7f00000001c0)='./file1\x00', 0x143342, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x248143, 0x198)
write(r2, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r1, r3, 0x0, 0xfffffd6f)

[ 2184.140978] loop1: detected capacity change from 0 to 40
04:21:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 72)

04:21:54 executing program 7:
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
fcntl$getown(r0, 0x9)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write(r2, &(0x7f00000003c0)="01", 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000d00)={<r3=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000f40)={0x0, r3, "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", "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"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2184.180138] loop6: detected capacity change from 0 to 40
[ 2184.191506] syz-executor.2: attempt to access beyond end of device
[ 2184.191506] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2184.192953] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:21:54 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r2, 0x0, 0xfffffdef)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x7, 0x3f, 0x7})

[ 2184.211301] loop4: detected capacity change from 0 to 40
[ 2184.249341] syz-executor.1: attempt to access beyond end of device
[ 2184.249341] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2184.250518] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2184.254078] loop0: detected capacity change from 0 to 40
04:21:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=@md5={0x1, "9b66f2384779e3514128ba2352214c8f"}, 0x11, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc242, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:21:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2184.324138] syz-executor.4: attempt to access beyond end of device
[ 2184.324138] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2184.326039] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2184.355975] loop6: detected capacity change from 0 to 40
04:21:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="13", 0x292e9)

04:21:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
syz_io_uring_setup(0x2502, &(0x7f0000000000)={0x0, 0x3ac0, 0xc, 0x3, 0x12d}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r0, &(0x7f00000001c0)={0x80, 0xde, 0x10}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}, 0x10001)

04:21:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000f40)={{r1}, "ea1d15f60910f3855002407f6a24bfba5b913085a5a89258474708f455293090dac034c8acf40291c34a65634e430b05ab7788c36198276d0d37555cf3c939fdf4a8c6d4537ad6b5199985ed88eed9f49c5a6b6d4d70245119798ce8fc808352d5a22b06c453f73b9fd7c015ea8e42d83d67ed4529c21ab8f0977cde5c1945728ceddfe464eac5bbfd8c972cbc9411f05b11795e1956ad0bcc2b4c91723e18950a881958807cc25edd5885346d210ff862f558152db61dba568ceac18e3c5563d6918a5d48209986815092ee338cc708886316ab34ab13fa49ef1227f57f3382ee699bbe6f1cce1508a9e4e9b10c1a0340a778d443261601e2f96f26442bbb606de6b31f5b60e101fe190c3d8db35e68e082a6a2cd1587abf11fc9a00ffe38bfcb1834f0a06523589e438e00f409f48eb49fefad1509f06ddfa16f16a882050bd087a76e5ad6f9e52131bec8144e869fac88ce42138411eb96d77e1262859ab09e2da440bf90f278ae8a716dde8a1622759ad4e1c4b8dff3c250a95b7317cf9e0efb18b3f3c17fa6edb29ab330336720a66eb4b6b5fb0d11736f9a9e25fe28a16d522795c1bef0ced66f006a294d8f8bde4131c9e5df7ac1c91354756ac3e10ebf944e966ffa3349840a2d85bc104158af69d577df737d4c5a1ecb3c87945269ff3a409a499067458b3587fdad1372f734f4bab786891aecccff3c5476fe79f1940d7710c7548daee81ec9cde0efc6320bbdb825f655d07badccad7764c5fa582e1bb067db21e3b816332b75e9a0b0bfde62b11193ab68fe2a3ccfceb2a77bdeb3d4cb08145a07f88a5ff642c02911e6dde65c327d38125d9ffa55d85ceca371bdc27fd752070961edd756e8362240f541ceb349e951e939bfb67fc7970e1bf1e3aa6281d5c649a33d28b4f89e7e1d7a1696bf794c1a2f8ddd430f8d7c6a315bc86c4208318bb126abf95c238dfff2c4fbd9bf7506e51009486258fdebaca0642e0948f51cdc1a199989293f03ad9c1f76acda785889b323e001e8899f0282cd458e4d3961a42e7bd8f14a88d19985ad7a799859f0f79b3371d8c7fa3bc6a87d804e4d3b3449e7f8455134aa7685f6dce6ec23a4c7e40fe43bd2e0570a36539dc3961b014690db51cc40bae0042cce82bb44c7e413ef1b2ca8285b20f51c239e297921212d62c071a70e2681daccabbb852ca80e2f2b5be9f1fa853b6d7b8a7ecc9105b8925f3a1077ab38e28cba5483f464644ceddab3fb80b77765e76fe10b0e76bf53af0daa877c4eb774d18b9ccf90d258788ac6342845ac3e5d7ba489ed01bd051a50460051bf9c0c24dc030adde496ae568c427748fd290bbfa927af90f2a01a7f05f85ebe94b9d0368702cf16ff02ea0dadfcd0dd6942e59c57d34baa1b8e5fcd3ad830a0d67bb419bc0622293bfa4403346fb6a2ea73907086f93af3ffa10f5a17e0c672a37142f148cb5186bfb117321aae0ab00b99c79f6d5794b6703483929efa2d93ee69589d674b8e0207980dfa74c4dc366f987c42745695cdbcfcdf11757a34a6622f25083468145893e331a8aa484e8d71e3639c7f54bd3fc9fd3d6f63bdd94408bac8652b34ae953c84b6fb0d62dbe8dd24239ca88712839fa5cc406ed093c92eac2d6006972ebf6ebf8852ff170bd4c44c1c691b4d6950a45cdb6cd292bebe873befff868c8a66d35ef0825262a39f4c147568108075c79f636d015e96a3651f541242e1e91df15fa5ea04d1ee321e7513816745a3f3b2c06183c0d3f7a00d051e3a841a744e6141da08abe869660ee4e5093083ed62ea957d02758ee696619b46961d6f78bd35ccbf17154027ea0ed4fb6f2d9de8307f9008a6340f35c7a33a34d9ca4d0a760a624baddc1c511e0e95d7f3f89fea19d49154d26f9fa23fb427ba204edbf90410465555cf0810aea57f2a2a61cfdce594a7e11f65f1914093dea58dd9227631a32ceda1045472a11517e912d39c7fd2722c5786fd8be8b3a828970427c97609cec7668adf2f89fd3bf289cd227d2a3658398fe0b5b4c089b3e3eacdf735c708ef7d4c6a0a972d7bafb90d775d7b110a57f7d81682e28c731a4b84f701236503692b04b05adb1191241d96bafab1c2f52c681ef999117b76ae6c2c8752f2e273848518da0d870820e5ba447bb528a361501f46f458f1e9ba25aaf009e5348dcb468044d38fb8062e948ba70540451f09afd6e73e1c0d9ee67fc8a432f72f6cfe2f827b155431df1331e61fd0309e98b59198c218e7b44df2f48949f0b0fec11354ced65706de55442927b72aa74715ec03b255af6db0ce825117c11b722d2063a545bf143a14fb414c2da545fb30b62ca2d8b08040ff8106907e6f86791e2b82d90b3952fac1671e2340a5d9797e5e43c6caa678ff5a6330606b1792018a9183ca3c6a378bfe024dfa9646874d4cf307d2ecbabccec87172846a8173a39129a746dcaed424e5be74503f6e21a08836e8a30ef8441e2b6fdbbfd04af7c192e08163ecf071f8b11c4f3bfb8996a39f5c3217e06085ac9f45c6a820aa430241b30a34af10c946ba9589063a1f591a66a9556baaee4632255b6b4de89de9e72a62106955c0eb0f0b3fbc5b92490b779a231fbf91053be94bd1ed184f21a4eba4edfaf66ca16e01501b5bd7da927a739e61aca9d2d14be6ed74b7e070bed59a1f044bb9c3c96aef959bdd574d86efb85b5da0f3adecf4236fdb9f7c8106709205a7c18fed858c9c911e8f9b677167266437ff132edda8f19d011b46dd61f3b573826f8a1c2076800f0809af8a957961dd70262aab5bd0281c3e962c9f241fa9c47d9633c08ebf10406986896d7c540f22649bd39e62ab5f0c99669de74396ea169204b00a98d773a829aacd499e6d74ebc838baf3cda625b83acf3325c880cc6aa84caf634b6b1cda1bf580b59807be134c0a010dc693acd32db0d48a32217d7f6913816f5a492243b68088e4a3989aa91f8e78874e59fc8b82ee29881a9cfe5a0da8a4d86b13c3f16cb6a75ccbd7cc8e063d1a3d60f960ea0b4006c8e378ae0169a82deea66003ec1b08428776fe1aba29b421a101e6788e7b1aa5fc7f7e1f255a8d226fc2402503820c869c52360f2bba395951066c41ea841219e5572166e8788ccee985e48647e12b43fe08083acb608621e0cb8e274f92592070a508a68141156ce9bf95e4245e8bc3d2e5205060f01f6fe440cebe9247fa04f9f4f6733aa43da60cf05c6dc72bbca743c1bd14495a59cf57829731d7d88915e5db9ff8066e9375252a58a42805346679ad16cdbf727b396a1f1a338d4ca05f01283b99e7ba92e7b0e1ea786b487def43abd2a9b3680d2179b37975911f7651d3db642a7b2b827a69f8460a19dbbde9b21fbd3c5b8c2489055d18b308b814d751a0cd1980983aed2b07a7b4f574117b2622fede5856d4521c34d8855f5869f1e0705d287ccb9209e28d11f1b84ad7acef07f7184244191f28abab8cf7f09b5ca7403ddbfc26b1a5fbc007bd5c455cecac5fcbbfc794215e9f356cd1fbfec29c01d4a3283f171949ea4bbb23c22ceaa7a7605e63042235c358dde305c0c4da0cc9437726f821800cf470dc60dc21e26176611a5aab3ab76b84b4e2f96ee3729a0936773097b8e575f0ce03a739e08713ab5e3d7d682d993ed0f65374e3bf31d48b9957da4a56a53bc729305a9d13d50ddb55385dfd838d31495c41f612d1e66533da96e83cb81917ba5026219e3becbfef405050f3b4e675470f1eff44e90ee3b233eb28e5a73c88d4717af2cffe38c96f595ee1658a9a48b3beb47be1a5489cad479f7d486bd743ad65561c3bdfe04d94780b07470b441a573b899d73a67360c68b065126eae9f28b3b6e9cf8ad98f8277e0ccce13a41ef06f420f2c89c4c24d0250ecc296fc10f04ff3959ec0341491200ee5d51f438bb4ad0c3499fdcd2e626257f83bd9144a4859803e688cd4b765f0052a2e1317bd21361b1c6e5ef3bc7b997c702d23708a1f1683b2adb992671a3117142901dd9c5407ef5533a9301f8b9b305bfbe7e9982fe66db78d26f8204b9abeab7ca6ac5897b95e7c2a29718ce02d1c872013a2a9a21a6c90922cf792927f0efdf43958870995282fef92751d29b8f3957be86290ca0a0b44704794f8890c800aa9a60e1a7a8efa5073f6f5d39f2abf2469cf8724a299d371fc45f948c487ff153e6558d50f726dae83bb131b429f8a28732ca86ad139e46a3783090257f84c861de4b74ef4fa3ef77550d85ea98f5978d641c276cf7ada81566da187246ce036623fdc2dd44dd8599b156f422ba70286b28e4fd1b485cc27c937789c1ee1e3ec1c8d6b16c4f3125fad7232af2b69cdc4fc993d776921a1f0d0c41dce72784578f96f496a7d65d3936289d352845463ab159aa66c310fca1b77f243aa858171609e1f441f160e16b9c3cad7b4c4730d2e2d94b77bafa58f5c4e484f98f301c2c73adb9a6ae4f04a038ec946982609f218697280a783e9df9bcde813bfc30d80ca18458c5f902f3149706364ddb21e7a24b01409ca8d0d849421b147d398f2a08f0ca2a29bba66b9449f1aac5c766de682d0cff6c47a11e477924287120f57a48953b1940cebc319d8b8c861342596aacad091bd44860c996be758dd7f543f7d7fd18ff64da2aac288abbaf77c5bae64c4cd2fa416f439bf9c17992a4899ac67870766cfe5556d2f9352307d7504df56f65acb2c83ca8bece1da8701c5271c368bd8a0a82dd6bb20de7aa5866ad0d355080ff58039aa710b7263a6ae7482833a38ca59266b194d4454193510b61ced89bd39b2598c78a63c8f4698723db4d99d3b313541d8a1cab1fdab31f4cb226f71efeabb55b97168b2e7cd113050c93d2e1b2a370ed4bf633f0344fdf7af4af3697cb201edac360de6be706893a06870c9f6db5c6ca173db89becda34e37f0b579d0a2bf4c44b627074b6186ad4edb855bdacc3946f069a231c41a075fa0caf2ed2071c6425e06e7179a204dc0fa40a5915470eeac27c3705d1d52ed3c6c9a0363d73f58a4a8d7861ccecea503bbf45ab3933a15f4b38961e833573aa46cd823d4dab3bfd1912f39c757266b32d56d415564eb020a118df9835232b2d5ab5470950cddab2767a8a13c874c2c2cbac7b119b737ec13648772ca9687c2f8ca1b9519ecb70a3adae0e5650d9b81d13f97f0c9a64aa4c92e8f9af5ea017937ada7729e99c46eacbafa53bb82b1b900773367e87b5f2415d32f550c25719073c4a52cd833b5d0a34fe4798eb70598a88d30cc53f78bf61103ba5cb7aa89482d5823759ee78b82d81c470337c7f71d3c3139c37cb4ac4d1a3144f02a8604b82ec348cd9db54d4ce0daea494dffbc3db712be4bccf575fe15e28d483097fd951b7318cada41687aa9392558148edeaac0c55f3a926079d1f45f1f90cabbd97af18a19eadd946320ea7ed57dd97a75de4ca3b48cbd388c47ccbd644912702f87af686c181c36069856902e27657abb002239eac1f0768cc3e8da027b39e832439878593c85d6d6ec03179e371ed22fa20b8276732c215386ff90480078c73e08f6d60eeef72461673883ba7c7cd061034e6ec9ee0e773a6c9c83661b3236284823d14a986ff860ef6dc0442ac76fcc10150657ef65929cec3bbc8d28dd97fc264ec56aba899db9e58299a9f6ebfe430b85d221b0b0c02cdd5b89d6f8f0e309fbd85ea0bba3577ff1f69ba9f7e7e7a74518f80066e8b7fc5c21904e294c82fda3dd021617b88f0753aa4be07406a100814583e"})
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
flistxattr(r3, &(0x7f0000000300)=""/139, 0x8b)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:21:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="ff", 0x292e9)

[ 2184.529711] loop1: detected capacity change from 0 to 40
[ 2184.542150] loop4: detected capacity change from 0 to 40
04:22:08 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = accept4$inet6(r0, 0x0, &(0x7f0000000240), 0x81000)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000b00)={0x0, 0x0, 0x5, 0x0, '\x00', [{0xffff54fa, 0x8, 0x9, 0x4, 0x300, 0x40}, {0x33a, 0x1ff, 0xdaf0, 0x66b, 0x6, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00']})
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2198.325143] loop4: detected capacity change from 0 to 40
04:22:08 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 73)

04:22:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="14", 0x292e9)

04:22:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0}, './file0\x00'})
r4 = accept$inet6(r2, &(0x7f00000000c0), &(0x7f0000000180)=0x1c)
recvmmsg(r4, &(0x7f0000007e40)=[{{&(0x7f0000001280)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/116, 0x74}], 0x1, &(0x7f0000001380)=""/204, 0xcc}, 0x1}, {{&(0x7f0000001480)=@pppol2tp, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/144, 0x90}], 0x1, &(0x7f0000001600)=""/53, 0x35}}, {{&(0x7f0000001640)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001700)=[{&(0x7f00000016c0)=""/11, 0xb}], 0x1, &(0x7f0000001740)=""/25, 0x19}, 0x592}, {{&(0x7f0000001780)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001800)=""/222, 0xde}, {&(0x7f0000001900)=""/163, 0xa3}, {&(0x7f00000019c0)=""/24, 0x18}, {&(0x7f0000001a00)=""/132, 0x84}, {&(0x7f0000001ac0)=""/157, 0x9d}, {&(0x7f0000001b80)=""/23, 0x17}, {&(0x7f0000001bc0)=""/151, 0x97}], 0x7, &(0x7f0000001d00)=""/85, 0x55}, 0xfffffff7}, {{&(0x7f0000001d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000004080)=[{&(0x7f0000001e00)=""/109, 0x6d}, {&(0x7f0000001e80)=""/202, 0xca}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/155, 0x9b}, {&(0x7f0000004040)}], 0x6, &(0x7f0000004100)=""/244, 0xf4}, 0xfffffffc}, {{&(0x7f0000004200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004280)=""/11, 0xb}, {&(0x7f00000042c0)=""/243, 0xf3}], 0x2, &(0x7f0000004400)=""/237, 0xed}, 0x3ff}, {{&(0x7f0000004500), 0x80, &(0x7f0000005800)=[{&(0x7f0000004580)=""/49, 0x31}, {&(0x7f00000045c0)=""/181, 0xb5}, {&(0x7f0000004680)=""/21, 0x15}, {&(0x7f00000046c0)}, {&(0x7f0000004700)=""/129, 0x81}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)}], 0x7, &(0x7f0000005880)=""/244, 0xf4}, 0x4}, {{0x0, 0x0, &(0x7f0000007d40)=[{&(0x7f0000005980)=""/127, 0x7f}, {&(0x7f0000005a00)=""/85, 0x55}, {&(0x7f0000005a80)=""/175, 0xaf}, {&(0x7f0000005b40)=""/143, 0x8f}, {&(0x7f0000005c00)=""/190, 0xbe}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/4096, 0x1000}, {&(0x7f0000007cc0)=""/89, 0x59}], 0x8, &(0x7f0000007dc0)=""/81, 0x51}, 0x2}], 0x8, 0x1, 0x0)
openat(r3, &(0x7f0000000040)='./file0\x00', 0x80, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)={{0x10b, 0x40, 0x7, 0x1b9, 0x2a1, 0x9, 0x59}, "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"}, 0x1020)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:22:08 executing program 6:
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:22:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:22:08 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x6004000, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
write$binfmt_aout(r0, &(0x7f0000000380)={{0x107, 0x1, 0x7, 0x248, 0xff, 0x2cf0, 0xb, 0x1}, "d2a9ce62395160848a91857968d18d93b295cd3f0a44e8379827f61d727b8b7fc851f618606b16fdec87d2f961d63e6de2338d3f7963386e65e7238a09f12c872990cd63f60a7801cb0c5e3d4c28e164f339414ba553dfe7b3397006a5bed1790d56901cbd407dfc12f16b793ba321c42fbd4b7332171e3b8f2e0c435fda9180debdda977b751efd67b315c28d57cd8ffc90f510583bcf1792144d4621902d25a9b6d6f9272abff83edf73ffca236fcd31cfb63134bf94e61f", ['\x00', '\x00', '\x00']}, 0x3d9)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
sendfile(r3, r1, 0x0, 0xfffffdef)

04:22:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x7ffffffff000)

[ 2198.330307] loop1: detected capacity change from 0 to 40
[ 2198.331229] loop2: detected capacity change from 0 to 40
[ 2198.336987] loop6: detected capacity change from 0 to 40
[ 2198.338256] loop0: detected capacity change from 0 to 40
[ 2198.365543] bio_check_eod: 5 callbacks suppressed
[ 2198.365555] syz-executor.6: attempt to access beyond end of device
[ 2198.365555] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2198.366842] buffer_io_error: 5 callbacks suppressed
[ 2198.366852] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2198.380281] syz-executor.2: attempt to access beyond end of device
[ 2198.380281] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2198.381442] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2198.385337] syz-executor.1: attempt to access beyond end of device
[ 2198.385337] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2198.386522] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2198.389857] syz-executor.6: attempt to access beyond end of device
[ 2198.389857] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2198.431510] syz-executor.6: attempt to access beyond end of device
[ 2198.431510] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2198.432483] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2198.465150] syz-executor.0: attempt to access beyond end of device
[ 2198.465150] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2198.466397] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:22:08 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:22:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="15", 0x292e9)

[ 2198.595133] loop2: detected capacity change from 0 to 40
[ 2198.615255] loop1: detected capacity change from 0 to 40
[ 2198.647520] syz-executor.2: attempt to access beyond end of device
[ 2198.647520] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2198.649966] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2198.658081] syz-executor.1: attempt to access beyond end of device
[ 2198.658081] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2198.659407] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:22:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="16", 0x292e9)

04:22:23 executing program 4:
syz_io_uring_setup(0x2b2, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r0=>0x0, &(0x7f0000000000)=<r1=>0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0x7)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:22:23 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x6fd9b56eb8e89766, 0x188)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x2, 0x3, &(0x7f0000001240)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x1}, {&(0x7f0000000240)="e12eaa289d9831a1de5dd693c421fcc6f4021413d67a85f1c62c6d5c96e55aa6a74403e2436364acc26bc173143552c34c552be224e40a9e898dc0abeaab8cb2f64e8f9c7e75c851f80c334ba855b6fc66c8ff473a3e7db6a92768b587b1e36d295a3ea8a1f9b00810ebd0897158461caf7adda3cad563c30dabeca3e6a59d8cb806cfb494dc3fef647202076bb1d7b9c208f735f78e5093b5d92e6c05f4ae027a9b5b380120aad19450133b64b594dc3934dd871ebbe2bd13def1aa83fc001927ef7c4613be2c089540b5849e7e5b9c74c32496ecc876a395ab4e97b98249d2bb782b72946083f1a5e7ae5d6ce3bfb621749b9ea6cdfc1000aa6ecd2a268cbf9c8820a8b7855c4551c8002d8f0cf231a49eb039ffc4fbbfe78ea9cb2bd6c92c9b108124cda1490d2cc39493fa3c159d3fec841d07405af36801a0fc8e48181a2f0e2d79e03aec931ef2ad4d7f33b60e57644018623a0df2691d9bcf42fd81dea95cca2544d067266d26172fd2b4eb9d7386e2a855b94672d6b5d243ac5d0392b72487785a5fd8182240a6e5cb53c11a0ca478428948fe22569317b3f770544bfb535fdb42b06a198ef7f8128415257895189c46998067035606ae229af8460612865b25e58aa271d28756003e6eb938c4f9a9c196537745333b155fac3aaaeb554f84424e01822d55bf52043cff41ea3f859c13d397db2f9e707a9334ba55c398e5f0eec13f392368cc742b4deb0e807582e19f5afa5a0fb3f6dde62e515f18844048104b9a031c4dd56e3b09daacecfbe96cd4d3a471a03d6d7984fc6c9ca9584796c6c800a96c5256ad47672925912a497d2707b96a962f288a6c8bb56b973c018cddb193dbeb4f40b060f13ec476e1bd70a09fcac22d52db82ad152d5b92e17768250bba6508de9729e679ff2150e8e206ac5d65fe62a5e2eb90905806b7689c41f7b7529af72e89dfc009ae6dba14fa9b9a19c0671441f6ac7fc468824ed2d4c13d40498878ef2690207ae114f680ef2926fb494eaf1dbf2b3ca5dcfa713e94ae3e9ed642dcb83543811183f36df44d857bd09e953806842b58f8eb01bb859abd9d337d69707fb2acdf48c8978ef7766d0fa9a4fd4d015976f7284d04356ff2c8f45e8703f050697b7c648aeed4dca9d735d8c13e98c79b6c28be53ac6764265b013557961687ebcbe567bc23bd1ef4e53d93c411aa16c024d76ef3e9c1194bf134ad64ffbc5f30561a797de70f36ed3a8ba1ac53c279f80cdc36ba6a5f8763e23d42e9d8eef1e66e7cea2bca9b7f6694706566aecd0a7f94b72f9119505f155be7e64af91c5452306bc446665d1ba9b4a331c4440314ca5921be8a8c1617de20e06b80e6d43a58267e34af05f6d5b47c16f686bc5f2dc16a3c7e7d74cb1b07688486d46170efc4a4f69066f60616b7d638869cf8986fd0e93af166cfefc15329c82b3bb8232fff96b06e1e6397d422e0561e9a81bf772ed446d88fcea914539b52994b16d0d45859b465e186c82f18b35f48d6cc362b65c927b60f75442360eb25375bef93581aa0a927ff3deced013a2e9810863587027fffa0bd7fbca30ee2a77ccde779768aec71c27d735f43fbea4c2f0774b2b23d16846cd8966c507efd8626a5c9a198e83415b6e2a66549f337b6e2b389155c6a6b6ae987d423e2162c5c700fd20024b7c6fbe15422449adc3c63a150e02845dfbfbb212fdea35fa88665370db09344c52a4a5f82006ed4887fc0aa2dae39afbd063bac9041e76d3dda87d15c8e9bf757a8e33b9fce5cae22b3c5ea84360753db54354e961e5fa358ae8d8a209427224f90f2e95f20e3e95ded4288924ff91adb7f5a18f16d366b955f20a0a71370e5074e4e28ed864e983e7a979be7fb348f0095fe906053c45cde5651358ab2856c6fe6daabaa7d6a92a9dbbbc4cc93f5188372989429bac386aa9f6dac028106e833e2c8c7374b7732101d8c4c791ae9d2ec8214bfc7b2e2510cf048d333f8c41b2db97a0e5bac721527b3d648643e903c0410f268634a0b8ca4f56d0d79ca11012750d2260d44f317c753c02082bae9c1488f35eeca163c8f8b11eac7a00c40589bf93838083f14909a3427128bcf2a8c50a16105cae287d1b7c6c1aa831ca0201d39f067772bc14d02ad40ed7f29991a8b0fd87455ef2d7209099a0fe3a08a598346197cb5f43a0857fcdf52ce24a9f27b704f7d757538c1093d59c36e678951415ab30a1ee742ebe7ac56a65c0741324f44cccc9cb9a25600c2006bfd58eaf834f625658767697b3316ddee2e23225555aad8407a993fbdbb7107f67cf0c3f4ae34e0b6f8c08fe66600bd082dc1f834bc7aba5796e060cbce63b7d86249ef412ca1e7f54590e2fb046b381ea0692429e455708a84a0d0d3014dea3137f896aadcae37f1a64f370cc6d38d7d94af52138126f090a6cae702fa6fd08d08fc3073adba52b261295a377ad841f23b52bf7d6e206611cf748f928e205acddb2c6812c0665844ac302c7b086da8753398780a8b8823773c9a0ed77a5f1e50c0804e50e186f02c97998a0aaf6caaeaf00ce569193f67495a5954e38ebd34ed0362686e1dc6d0d27ee34ac040cae88672a71646577d06434c05557fc66f7eb335f8ff98db33806b9bf867c40ac6ac84a104acc54d6945bc83e70ac22ac1a1fd82564571e6489337615d829cabfdf99a46750b9e74094cd1232e2c244687a1651b9ea700820ba2a7dee4799e4565ff9fd397d9efd72a32484809edc05256a1c2d125d59310bf001a07ee3279afbd11b7c52c101a1d754260ab6ad6e1ab34808fff9a9785f549ee28dc1efcf72086bb49a7f2cf1df5c1791964447a6727c3ab74ea006eed37e92ec2be418ab6466468bf0b6c696c22b3cebc8fb8bdd070767b223f459aa05a5eae31bc2fb1d62a3a7fa10aa94296e01675bb43d329161c99344bf73064806352786f886eeaee17b6cfbfbc2defb9107ecc9bb505b5018602746ba212c7348048e47d6f0d53582d075cfdddcf128ba7b3a8d55bc86b70cda4d590252b5e300c67e5fbb1beef62be0a1370222c49c1e236c509ad9a1f8cda04c16701cfc74cf927136bb9651a13d19c2efe6d5cd0f7444fd83e60803b7a6145d0fcf8be8f0de6fc90b9afb28520d62f45d0e6f37b2b3ee8007bb346acedebb6b48da78821bf4efd2c3a203a503de2693cae51f7ce54ffb0a184083ce9ca5bd75f1d939734fbbfddb7bea9463f7fd25fe24cde0e295242a773b3628f148b0331969fb7a117461a5aa4750cc6c584a4fef40fd192581bc64bee55fba432ab45fac8889d3b1def5032c8d7e49d0ba3ee5d8b709db7aed3a1c96347e41801780e7284abec253fb01f69c278cbe181be6f2f77a8041b1c52bca4c020187de4ceb74c571d7e2b1ff31298e03f6fe6d31add788fc69c0a95786f73b0405405a17e1ff2f717d28b9a6688b20843edf85a6057c28b330f18161fc9ff6b5f700ee5e0824f5064f66cf5ab2ac5bb7337c74445400eca7201a484dd772bb914a1ba74afe1782dc8272c656274d22061d936e258eae450fa03b32795c99bcf4f694d5f96c483cf584cf8f85160a2577f6982da2f305a7732b56d860b26f126ffc8960792d67422b372b4a2391143c17ba29409c44815e85cccc8bb34bb5dba50e0e2a871b8248ef3aa69174e64b573ca73f79c523200446f7a6c5813b1c94c2d1b5f0532669ad276700ca4e6bdcf8b22896ece48dd77318f1755916263ee26513189b2f234ea51b7ed9ebb77b06bd57d50ca530e0937ee62c7c0c100098753231398fcefb312c387f6018bf8cae8e339af3ff3b935eeb2b444c244abe4544ebe49a2f9e162cb2e2e45d74c9668ad7ddb6cc46613e8df4d2d3308f79c5fd29b173ca23812ea169eef9d60d490445d276bd2901c33b9f5e84ff470ed47983adbcdfcf8c3bd5dac4c51c9cbff20bddc0688b583603133f3813cb41def3da138e0b800a4fc3c7400566ff1447b6c08b6abd6b14db7dec11b4509a7eee0e02212be75c14e81f47afca390e4ee870932e797db8b311f8bdaf5d2dfeb79bd17fe05397c065dc2f72a911ed807ae6817f16888f6745adfd79248e6b0859a5ee78d3183eeb19efad2797317e9312f9bacbc08643218f60d56f128fa234946ba82c39fc1d12182759909d1bf8b9de4b01232d15e38c11f3cea4d3f82613ea5d52cc22e2fc851b0b7022bb9999ed984726415a7cd1a9fcb606810d97332496229093b28ce955951931d6040fdcc5853fc09353f120afd0fbc168a79dc3bfa32d84404f49d7c70740f3b25b00cbbdb8fd675faa17dc8c556581a7fe8df5b69e0ebc920293c77969b64e380835778a9aac819025dac188045ea3c4a3e7258137522f398c2cb4c9026fd9856efe36c350c5054b2427497aba4a76cd8caf6a7430c8350a501370128ebc7e40faa4e1ed8e3ca1eb95685a2fee18cf251a1c4d3458dba8e091768508d7becb54cb5fc596427d3702b4fac2582ba6242e862cfe3b1ec64570a77584415c167c67a7f1ba48d61951e37366935c9bdd4a8994d413af8f6f862dc7fff7997c651a2851fb5f26de38c92fc4e50b83620f9947a5d48b1f46ae6d6523bf9fea352be9552629161d005d9da7511a61e60ad5f9c544ea2c48d1a530691886326a3f9ff70284e00d33c852ba32ce82e4cbb642d442ad864507d1f3abbca485fc76bbf38bae5ad172433b67753779e04a93bfdaf4cc3ceb08a81a04628ec9d74e8bbb957d453e92d10b8e8066650c02d9dddac59b78d3e3fd8dc2253e98e8e1070906e610418251cc072432d412dab8aed84891cfbd790e7033bc7206c569a0e8647fa1d00f3a711b618c1fac245b4ed1a9e4459aed191bea3474408f682e9c46d7403aedc3f8bf3b4d138f6963fa252e375354c42bc4d5f071d4b78942471b270928bb4ff3ab82548e9610eeacb657573d4779ee4eb6ccf3a8dccca19c3803c015631f37208914679e09017a3deb76e12f4b0a8afbd4d86daa78a879c7a37e2c7a0d546686d14da40a93d2c86d8efc02545dfe44cafabb03f7811b2edd15cb07ffd726759fec4763dd5f0844f629762fe92cc28489459df61865cc0b27c45345dfacf1b0f8dc19a09dd7daa7b68fea772f877cfe24e2f242743912d0b5bee3c9e12ece87f689afa1a67b2984e8a0c57d6c7e888e1edf78186a15d0c4d6a6a222189e96d9d7f2f0990ad04e123c902b38fcb3237683f66ff242c3bb4938410007e409cdcaf9eb5fdf3af9899bb38f78170121b7087a7363236c155899b9877a37bcf3d1a5bec0a6c37eae86932eaaa13b1511e7e05a0ff8c6bd6a3ef170133b502eec12ceb9ae8c53462613cf56970a5bebcb873dbd5d774f76644e7221a36fb83d45b77232fd9f1133b3da9bfd3e36cab84757ee0b6ae4fd236a2a00905d76957ec97826a6b659e1d2205a4af3b2214e79ff607e1b647756aa8bbc6d68a5c95055051617bab25bab066603736c32263940b5a6b705e2f85272331833b04cc244a6cf7e8f7314e0260ad6e3459f4893af70340301257cceb773aa16d6296e9d3c295ffa36e8e041cb43d18b083eb6f135e1e3836316b30b98a31f32dcdc03deb6e4822068a516d77b80d33a10453b1aedd2a99536aeedd8dda1603812849486711df731f89acc3f7a57aee96b64722652805eb39f1ecd30da8ff0b54bfcdf9305bac6f1f72adb1b5a52dd06535cbef4d54464770fe7c588b0d796a57bfdf2ede19c26a95b366c88c46305ddb27c46d1a71b9209e33708fe00f5eb4d1ce308654ff373974", 0x1000, 0x9}], 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r0])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10000, 0x150)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r4, 0x0, 0xfffffdef)

04:22:23 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x220100, 0x86)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat(r1, &(0x7f00000000c0)='./file1\x00', 0xa000, 0x20)
openat(r2, &(0x7f0000000180)='./file0\x00', 0x800, 0x124)

04:22:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000b00)={0x3, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = mq_open(&(0x7f00000004c0)='\x00\'\x1b\xc81\xf5\t\xa0;\x8a^\xfe\x96\x82R%\xce\xc2\xa4\x7f\xf7\xe8\xfbx\xfe\x05\x03g\x9bg\x91\x83\xad\x92I\xdcE\xef\n\xd7\x1f\x04\x00\x00\x00\xfe\xdc\x91^\xa302\xaeq%\vqU', 0x800, 0x17, &(0x7f0000000300)={0x6, 0x0, 0x1000, 0x1f})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000340))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000)=<r3=>0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r5 = fork()
process_vm_readv(r5, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x7b, 0xfa, 0x1e, 0x40, 0x0, 0x81, 0x35500, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x1, 0x7fffffff}, 0x8005, 0x9, 0x6, 0x9, 0x10001, 0xffffffff, 0x6, 0x0, 0x2, 0x0, 0x4b}, r5, 0x2, r0, 0x6)
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c, 0x10}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[@ANYRESOCT=r3], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:22:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:22:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000000340)="601c6d6b646f9466d8a02b050801010004851c439ff8018a9f539cbab9c0263c70fe1c9cb322efdd2aaf20589a96f8c0cd1077bd196232f1588cef7608b4542532d4df4b3484fed8bd089ec5e2649ec4a8b5ecab51e629167131477002bdc4c3ba278d0e8ae4a0d7042255a517c5a00c2ef519490339e6b189066be48e46b268191874fd9117c649220e89fada5ecf1b864186323634dc627d491787a9a7670147cc8cefb8c676d95a58919334420c3c317772e1f3fd407a0559a85f4183ee6e52c0502e3cb96624b4e1fd6d180bf89ae379e4d378fef31adaa3550103fdeb797ec604315ba7480ba72e248fac6d2e4c63da65", 0xf3, 0x3}, {0x0, 0x0, 0x10000}, {&(0x7f00000000c0)="538af4b18162262ea88b76b04961d1ad9a839eb6223559a73e2680cf9a66a7a5f42fab8e2de66f8ac01e43531069c23faaaef298a79fc89abfa093", 0x3b, 0x3}], 0x280c00, &(0x7f0000000200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:22:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 74)

[ 2213.040342] loop4: detected capacity change from 0 to 40
[ 2213.050111] loop1: detected capacity change from 0 to 40
[ 2213.060376] loop2: detected capacity change from 0 to 40
[ 2213.065000] loop0: detected capacity change from 0 to 40
[ 2213.138276] syz-executor.1: attempt to access beyond end of device
[ 2213.138276] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.139923] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2213.145165] syz-executor.4: attempt to access beyond end of device
[ 2213.145165] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.146324] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2213.169251] loop6: detected capacity change from 0 to 8
[ 2213.183166] syz-executor.2: attempt to access beyond end of device
[ 2213.183166] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.184956] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2213.187065] FAT-fs (loop6): Unrecognized mount option "" or missing value
[ 2213.213176] syz-executor.0: attempt to access beyond end of device
[ 2213.213176] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.214852] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:22:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x80800, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:22:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0xc36}, {0x0, 0xffffffffffffffd4, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

04:22:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0xfffffffffffffffd, 0x24, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
dup2(0xffffffffffffffff, r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x34182, 0x108}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
fcntl$getown(r4, 0x9)

[ 2213.386292] loop6: detected capacity change from 0 to 8
[ 2213.391939] FAT-fs (loop6): Unrecognized mount option "" or missing value
[ 2213.434075] loop4: detected capacity change from 0 to 12
04:22:23 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 75)

[ 2213.440974] FAT-fs (loop4): bogus number of reserved sectors
[ 2213.441815] FAT-fs (loop4): Can't find a valid FAT filesystem
04:22:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:22:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="17", 0x292e9)

[ 2213.501894] loop2: detected capacity change from 0 to 40
[ 2213.543032] loop0: detected capacity change from 0 to 40
[ 2213.548552] loop4: detected capacity change from 0 to 12
[ 2213.550521] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value
[ 2213.595111] loop1: detected capacity change from 0 to 40
[ 2213.641380] syz-executor.2: attempt to access beyond end of device
[ 2213.641380] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.642861] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:22:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 2213.662455] syz-executor.1: attempt to access beyond end of device
[ 2213.662455] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.666390] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:22:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="601c6d6b64597366d8a02b00080101000440002000f80110b34e92ae11c0ab7381ee263848ef17190c6cea7c45a161cb5c8f9966e851239c0752b67f6bee1e62e5c52a08c9e7e2b3ae504458dc4623744a379fbcc12648f29f0e77176b4c43679b80481320d4efacd11c8c935a4015cc7c9ecbd638dab0d4861aabaf11e715ddceddb01a546fdaec78d0a302ba7c81fa4d2d2de0c84d8973700615efe9d623da7cdff0ba72e195e885", 0xa9}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x80, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)
flistxattr(r3, &(0x7f0000000180)=""/76, 0x4c)
r4 = dup(r0)
openat(r4, &(0x7f0000000300)='./file1\x00', 0x16742, 0x148)

[ 2213.697465] syz-executor.0: attempt to access beyond end of device
[ 2213.697465] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.698847] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:22:23 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300))

[ 2213.764863] loop4: detected capacity change from 0 to 40
[ 2213.904540] syz-executor.4: attempt to access beyond end of device
[ 2213.904540] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2213.906373] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:22:41 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x5, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

04:22:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="18", 0x292e9)

04:22:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x38000000, 0x6, 0xff, 0xffffff1c, 0x1, 0x80000001})

04:22:41 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x4e100, 0x8)
recvmmsg(r1, &(0x7f00000030c0)=[{{&(0x7f0000000180)=@vsock, 0x80, &(0x7f0000001500)=[{&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/224, 0xe0}, {&(0x7f0000001400)=""/99, 0x63}, {&(0x7f0000001480)=""/122, 0x7a}], 0x5}, 0xe0e2}, {{&(0x7f0000001580)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001600)=""/204, 0xcc}, {&(0x7f0000001700)=""/140, 0x8c}, {&(0x7f00000017c0)=""/154, 0x9a}, {&(0x7f0000001880)=""/37, 0x25}, {&(0x7f00000018c0)=""/104, 0x68}, {&(0x7f0000001940)=""/160, 0xa0}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/102, 0x66}], 0x8, &(0x7f0000001b80)=""/90, 0x5a}, 0xffffffff}, {{&(0x7f0000001c00)=@caif, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/7, 0x7}, {&(0x7f0000001cc0)=""/144, 0x90}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/31, 0x1f}], 0x4, &(0x7f0000001e40)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002e40)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)=""/211, 0xd3}], 0x1, &(0x7f0000003000)=""/186, 0xba}, 0x8}], 0x4, 0x10162, &(0x7f00000031c0))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = mq_open(&(0x7f0000001680)='A\x10Q}\x1b\x9e\xfcF\xd6\xb9\xbb\x93~\x01\xdd\xd3\x058x9\xb2io\x88\xe4\xba\x8a;\x9a\x1d:C\v(\xc3v\xb7\x1f\x95rE\xd7\x9d\x9bR\xb9\xc8n\xa0\xeb[\x9bqx\xcf\xcb\x97\x13L\xbe\xe3\xd4r\x90\xab?\x1b\x89\xfcJ\x86\x0e\xb5K;\xad\xab\xd8\xdf\\\x8cF\xcf\xa4\xa7p0\x0f\xce\x15\x03p)\xc0C\xba\xb0&0\xf2\xfb\xf6\'\xe1M\x0ery_vzZ\x88\x15\xf5K\xda\x94q\x98\xa3\xc9@\xa7y\xc2C~\xfcS\x98\xb9\xa4\xda\x1f\f\xff\xb7\xdc,?\x0ez\xf6!\xf7\x14d\xaa\x93\\N!\\]ma\x00%\xd2ehdk4\xc7\xff\xc8^\xa5\xc6\xce\x9b\xb5\x1f|\xd0\xab\xc3^\xb40\xc0\xa6G\f\x0f+\xe1\xbd\xbeq\xe3', 0x882, 0x100, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000500)={{}, r5, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r5)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003280)={{r3}, r5, 0xc, @inherit={0x58, &(0x7f0000003200)={0x1, 0x2, 0x9, 0xfffffffffffffff7, {0x4494a4f4f9af67a9, 0xffff, 0xfff, 0x4, 0x4}, [0x6, 0x400]}}, @name="ea82a2e828c9135ed2b311923b3a00079e6886a8c6bbf06b8f916e319255327367864a2f47b4e8a11ccd7f10c66c87d1231e0f14e273404ffb49b23b9b460844dd1825516ff7aba6a89313db2b0a248feb626547daa38ad3c637b0620bd7b8cda2ec2ee09888ee719e4e44ab10e7f7f96826923dc901fbea5d88b41b374959a79f804781ca5bbd4c3d5e50542578db4f00c362269b3573c6bf13ac16901f9620d5098a0eca986b14410574e76794fbff65efd64dabeabf596131ae0b9c8c9408e8cb0c79faba0aac857a79c6c2631cdb30cf8c32798e2dfa5d0aef70cecc96e56a4786e54d587b25f5bd685e0fab66e050e959be7960324117a1f8dad79c99d2368bc221cdb5ac45ac8441e1c92d5acc5caf6098ae6d1e2ce5e22a581a9b0330011d8026456064d95cbb1c3db12dc2aceb5c5ea946e0667131d36d4a515ef710c85d089b2f74e123590cabfe07ab94c8dc68422032b5ff31214a7035fc61ec19c01b290c0d2d9660d4f76f8d74eb11b1ce432cc99c8b89795137d633a24b5126a2eb64336f867dc64073d63619afe52c105005db56dc4e88b336ece57f962066f1ba526e9c30b67c23962a76ee707012a9eab866a9c832c1660fecadbeb1029a8d8e350809fde9434d5bef7c7034ea97bd2ea2c8ebeea49d2776eaf940e0bb841ce1c05e1187f3de76f6cea295a83735bd16fe6d073af533fa0f1cd42eab5f5599d4dbd3395e05608578b7d5f7586ab29c07b65f6eb2b857223f225078c9f60ee1896fc83680e7e01c6850cc944fd9594cb785098dd5b45ac849b0854b7c5fb7dd27d4a5d1de9107a32adec1a1620db4dfce8b186a6c7a854353912578c6407f4a7f506ae94613d2e433dcab6ffc688a8246c3f0c7fe9926f1432901e3a75e79371972747e842da547d1479d9f291c7444b2ff47a6afd67910f3af727c22f3c24535a174d30282f71bc71118f0a4260bc957012d1127037cb4d4f8354ea63d13ffd8cb50ee973ad00fabbafd95b6aa6bc120cbfe0904e746cb027627c5cadc891805b06d23a83be1fb77ca10721c30bc477f085b93854eb3f1220c5ec12bc80d3e4724c905724e36396ef7846829abc445702186bdf8b76692338354628b60527da981b019795f3dd19c05e4b395a527de6ebbe957637a44eb0cd91f992b3444a0d29dd36109faaa1831a7c031b15db0a037e54d050420a8a89c04b65d3b354340a1f058ce16b2260985345b52d2929c2eab17fed70872f9b50e8bf747732c6aa7036d08502cd7f5e10d80da2ea5534ad596c2b954e4f65f79b41b98fc9739e5d24d4d2fbc88d33085bcf2b61d11ebd02a8755d429d234a4428cfc0e7adcbde726f3640e5aa787d87424626d2160580c562ca167dc78118c07e6de5c49e6dc4d5626533b8587cb27b9a23990d6abf7ecda1de1064a7230ee18e85c4aa79382217699eda48c490172491b99facf313e72f7f7adcd923734b445261cb6356bc439537b782b83a63c04c281aff4894d231e8120716c9fbe1686b4bc9545c46e1ac2099ecccd704a41f03abaae6ec8d061f15a9f3fa50d563df5ba3405d56b9007f6847b0a1eac0b64a5206072fc0ec7eed14af6005f0b866ed4662bd5ad2549e173269e734d7fbfe98e6105db204620cd78222d0cfbde0587a03e9293cc578e5c3071a93c9497e5ec998a5876bdfa094c19b35d65b89c360e178317e16a7c5e90364f7bf13f1a3da419d81f376c0ae367402deae32c0df3ce781b9d2645147fd98f25c9a020ec0a1d585d4f847e86665b21ff566dfaeb5b00db1b6815b6b3ca6e3c217c92b509cd6a4cb62a014deecd9e4b7977c7fecb90c6b6464251e7a10d443d4ac2489c64cd084360ff23b16ce0d685591e7a822f6aed080739a975be65d63b23318d9515daa012fd7ecd0862f42a614111fa6052befd331247196f9a91dea0397e6945175c8d7663b1b86efe17544d67a601c8176372f7d8a4b4d4886f1a6b7acca71ad86ac440716b108942ca71bfe2e187cab1f903d59a3a24754c7a656e4bbf006e04d9af9fd1e652c47eb43ffd6757f74198b78e94368f0ed3f92f4c8cbaa4b533ce4f5d189cb873343c0efbbee2667ac9488d375a2864167ee0364d0f449bf33458e5e9af859c7854eb68c9ae26e882f405e269970d79e78015c04b2e6f4d862a82be8b86970d1f32c79e9a99c37751bc873d72acd9b3387b2aacb4c53fde8621a652683adba8af7247f9199b69ec2925147659102a3e5c6d98492d2dacad5aff09fb92a6aa40ca7f21b551b1590538d80746c9b8fb5ac9749be516a1fb2eb686a95430474fac41e8a1d803d598e64bfb7d4b11d29c7f67edd9c350a7c8dfd1856f5468347888983e21ab8d9b8bec3846d8eff078fc06b1d4f75c8c7b5eaeaff815f2ea3e8f49a9ed45ad6cbf0d8b650ec542ce69d3d6bbbe5486aac3797276a34dfd5caef4a88b1d9be7019783bb03c1ba3c24c3437265987e1e82215c56b3f988311b985f03845c9fadaf6f3d5097d239e08528421968cfe348983b58627c19daf17cf3f08337e28962d9ff8bd405236090d50f9d79779b9057d4e914b5b76bfa2c564acb111f425e91ede2b0220a931474cb83d801eec3f220893f64090c152f32cfb75faebce2d3f46b2c8419a7455b09d7ad0fc0f67d4990f1732decba41a5729380e2fca7b8413a319018c22d81166f0b7789a093e2f5e6154e97e083b0c9868f71d2c031d4cdb049aac6426101f05c5c706d21fe57a3f8e7b1cd19814e217802eef7c90f14c922bece8c580f01b61326fd85a8b9437e234ea53d77d17c6a52b8321a8c44bad5a9d3116a7a3a8e07bff43552a97c148cb6537b632ad5db2b7f7d952f54fba863efdd6402e32064f28c06b6d38478d1d7041bfb2f3dbf9cabe87f560e94dde784224500924fa415d06986b283fe573112d5ef93a34108d472bea972c711adb4aa8b16b6508e7ffff831867eaee2900079aca1317ea4566379fe24501f5056d92bbccfaf28e6fe11f899cadc31472ed1a21e22da7a0b432a04e7906fbb2ef2be1be429b5ea7ea9427f181f6c331b77d165f6ff706e9fe4d3d47eaae6203812dbdc0f817e3ac10598272396baaf2e2dc91efbddf55721426afc830307b037a11f0df4a941b605f28994eb31fd49c13eaaf9e0c4bafc43deb856e75a75a9c6905a1b81f9e68c89724ec87c2555b1827a1e7d25519cf13c00a9e270f36dbdebe79ec01951de679c71aecb1cf77a9ce128f305f06a3c13b2db3657dcca95007c71be7f43c42987944b84de7a52532cc953326d2fe6be7209f3f1122d177b5b0e1cf318136d724fa602c3109682ece42da92bd22dac720c0487083014cae682333e2fad291cde8216769043fe26676a88203922c4f72811a400d902748cba606929b7347b1eadaf7f2ea4bbdaf62de832ca8315f0ce3e6ba2eaa36ed562eb7d525dd66352d9b0927933f8489f0282e70efc05fb654fe68847d735caf6daf6686b1101bd8a27610fff679d74d33012c7a7b5ebafff68d72d704798fb276b14faf07980e42a70dc7d29c4f428615fe4153da9864131d090c60f3a3bd458edf716e25747cec7cf18df523df0053fe0618fbc428b96a7ca1ff8e9ea9227ce0bef43abf5f216c4bef79422b3924a7ed9503eb9bfefe2cde902a05811b6d797ac6de0718428db40415139ad97fbb007626a24d723a8a96b8ed09c25822e428e2cb241e0d60c1bb092af562d697a9436cb9d6bfb041534c9244c1c41b22278c35434fc476fa55c67c58a77b6b9d042892710b9b89a3b8d230fc2efb853a163644dbd3f96e6750f2ca71ecdeaa1e3d5f55410cd0e53d78305845854e9dcacf76df022d33de827c1cb1477cd8758cfce94d30c3d963db420e064a16c53296b840443ec41ba65d1cfd9b45256d7b2c6b01b949e2f72c2de77e49adf7b61fd9973d3477f1c28188596c3af0a52cca7615e6b129d2644ac7543abbc273921bd3a730947919930db4f8040e88124eb727f7e59cc54b08255eed2da7eba3a72db097aa5f38317cf13db71dbb3758b13a7da32fcec5ef05a8f024e2ddd328d3956796ba47420560c76e3c2fb4af66c0dd34e4b3a08c89369d3dcfd86eca6613264c0575fcccb1addb98359f9f3abe167c6909ccb1681fe4f7adcd4432637936ba7ccfe5a04821ed5abb34efa955f68f27b6438e55132ebe8c1b9a2bc9eb42255f2d2f89fdcd6440c3e0100a0e4066ecb7920aa1dd45aaaf4770aecb8f3261ccd605b445b4e3476664e712f3e8d14219bf7e5467b322b1e0c3e7bc29e181ff4417a219b120612f18d48263150942d58af5a463976562f8d192e14eae5a938522901725739617b0937456a006a0dcc26a1be320ea41b0f384e1c8b4ee81816f16b836ea6e96dc6442a023a1942b7fbe4ff67046bd98909c0c055540c416c7a85c64f7b331ff3024147a25ec91e45bc85cb2a5cb94c0603dc98980d8b8d1a43df57a0fb1c562a4c74885beaa0bb7d80c915c4ae3e31af0a84dacd9c5142fb9304f31e9d274939f6f38278551d159460e52a6758d360c4295a417d551fddca3284eb20bef264989212c1f5dd6a356cf5e28bcf8708c33d48d1492172ca25ec004821edf2e3ff51d0a21999d472b1436bdcd69ea3e56b6b07ec10a1db953f007dcd753c5b49933871c105814ea76abde50a96245017ef23d3204465cc2cb5a9e917355b51b32998296d7640efdfff5d76bfaaf9d0062b469e1246eb654a640c7a1f500d433751905dca9e1fec65033b6eeda43133893b889d380709791eb421335ce299dbd7b359a632d846ec17bc4cbf462c28aee746bd1a46edbde50986467fdd43059d6500dd9f34b8e8184d740e3f2e51d61e54e8aadbceca772ec41f76b8f3a41f3f5332b4c6d998b53e7804b787a7abce509a14a729518384c783fa4722993ba4d3fd48811a35d0253f5069d3373f58396bf8fa2d2bfce69df26356dbce27474c26e6d58f58258bcd7b6cbed0ce680eb18abdfa81501f1cf66e1799e9d6d784a29cfde9ed8add98c4f0d62a9f696f48d975419bc5245a83be240a461ee03afc681cf0f3c668e05e46656c10bb17b59055066e8784421ee5812da8d326794420063d2b555fbc0560b81ba4d8792e15173553be6a7cae690819e18a7d232faf68c6cd468f4e7a2b812e3acab3e27ae2b728d2512de2e7bf60ec31d2c1f49ee9489f7fe848c1c6518c57bd5017526c219c751341811016ed50433700658a00abb2bf7d08c2aeef05d00491707b1b5ab85ba88a19dc3c75872fedc280e57e3c4df62601708e17e871f3e14ee6c9b7cdedc4985d1f034c5db3cedeb0cc6badb28ee05455c12346a1b458d03eaee1d7a4e4ecf58b5896df1332f2281ebd6752d4c186acd9d3f6f175d397721383acf9ce013edd76fdc21248cc5aede3cda05d23549007ccd9d92dd8e65060285a773b016c0a8371e02e3b98b102d1108b59100438a2833806c058265cb8b9f3deeb3e034fe2c3eba9965d4bcda73c4e5ba45546a352727fe7f7db3eb4eb56c14b47632dc6d4b9ddbd6a636ebf904d5af0739df9af3d08dcfbea57505d004fcc302f38b449e218a6ab2ee7d30d3df1a2225c9171bd2ee0ad65d2dfdab40d3ca93a3cd478a4dde649b89060e6f60f4a234592ae783c5236803d72836e4ecd1b047ecda4c46975a40d472da85ed52ed8ebd42c499410f261fe5efda280"})
syz_emit_ethernet(0x66, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}}}}}, 0x0)
r6 = signalfd(r0, &(0x7f0000000000), 0x8)
r7 = signalfd(r2, &(0x7f0000001d80)={[0x80]}, 0x8)
io_cancel(0x0, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000004280)="4818f19a3e4da0d89c7c8efcffc607042abe8342c47f35456349b8316a466f8661237e7d3dcf5b277812ea2d4133881077425226d18cc7c11587f27ec0d597203ae491971279fa0ec58f7dc7b31aac1b36c2731061086a279e2a2ef1a9d183d244cd05f6ba6aab8b528905447663802d7535de2df79f57a87cd4502043fb0aeaec34c559957a9c8ba788f2819e17e18149e2ceefc6275e6b84e16baa2dd9060a8b68244914d7270d902f652487ad205942ce3afeedc6736b8d0d09f58d5609f3faea2dec280327996a318606a37f6e1490d059d3e791afdb568ec3e206", 0xdd, 0x9, 0x0, 0x2, r7}, &(0x7f00000043c0))
openat(r6, &(0x7f0000000040)='./file0\x00', 0x430042, 0xb)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
write(r8, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)

04:22:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:22:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 76)

[ 2231.341394] loop4: detected capacity change from 0 to 40
04:22:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000001700), &(0x7f0000001740)='./file1/file0\x00', 0x4, 0x2, &(0x7f00000018c0)=[{&(0x7f0000001780)="36be5171b75cd3f413d3e7a678848df8e3e3e0d87b80891e4beb132aeaefc1ff9b6a80350360438a6b06a5465f9887d0431c8a363c2840b9c62282174befb43c398d992291d9e2cf7daeea0acfa98b2e0a3b2afa7178bfa755527b5db236e9c317e136e5", 0x64, 0x6ce}, {&(0x7f0000001800)="34453edbf670ef144b7705d72a3f31cd53c1a08146c6848aa1dec1f41b6ada5788088e1f2d0104962931072d95d5915bac20f95aca824cd7617e4e31da7e1fb71c5c5007628f5338b4a4c99f28413add2f2de6cef0028569dfa6fb8439b17792de1cf372717912b10a7223ace6e19ebad6221b52329cecc7800eb3f4f09e5baec5eba8f21b78373091d08ae6086877d83a6fb5bb2d552c5565e35d0c2089c7c2b67e0e", 0xa3, 0x5c9}], 0x2109480, &(0x7f0000001900)={[{@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x31, 0x31, 0x74]}}], [{@fowner_lt={'fowner<', r0}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@pcr}, {@uid_gt}, {@fsname={'fsname', 0x3d, '[{'}}]})
sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000180)="d24ac5ccac0077b8bb2a69b6a08cdb613527b5df4137fad803d8848cc1d4c97a98f9cb025ef322f88fa6d857d6bb38c92ade20926dff7c84ba11b13f77c3702990a56a04989775cf4fe814cf8a55f1c3b652ce414309f0", 0x57}, {&(0x7f00000000c0)="7f0838336defcf8855f8907e2388ad059cba8380f6db77f14eab6e1de5695a7a2c5a9d289275287107a706f08d5e63b889bf9f99594fa6b7c78459c1d962", 0x3e}, {&(0x7f0000000240)}, {&(0x7f0000000280)="765d92024d96fa855995f6f02f3436e481d0256a124e4debad8bb15ccbe21b3d6c3ee28e0e6736d15dfe6dc287909e50ee82617caf8a3c45374759e4ef7f462d208995000b885c85182d663d8864f87d5abfff918796d592af0771d7e817ccdf", 0x60}, {&(0x7f0000000300)="479478ebde300a0874a95a2806d244c2955faf43e1e5755252a0e7c991194fce692410533eff49ebb56ae1f9a75a17178882a85c674ba1eec5906f4e96348f593e8c6045df0add12cbe9a4b821a6e2e59b30", 0x52}, {&(0x7f0000000380)="a5df663a901eabe36a33201cd5e2587ad0bb01cd9cf6042c747955ebfcc1", 0x1e}, {&(0x7f00000003c0)="50b751003690e9452a854a7ced3e45c7fe9c1736d73622f56ca365bd818be8ff94aaa188a79379b860f465863c8b89d34969fdbe4d7ed311128960c91fb78e7d165bde19f7cac7548ba8bc627d4261939d9605", 0x53}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="c737798ea2b6669a0b13c9c8cb8bd7fb45a8651e7b0b8ea41a2acd139b73a9fa50c9e3fa3e352f49b6a7eb8a91506e4f8f08389776fdf573912ac483fa6d61", 0x3f}, {&(0x7f0000001480)="035655d63af88413bbc4c35b57106c08ec64e2c8aea2c2f367f17183726ec87f652471fd94f52bc175b0e6f7e6650c489e7886228b5e837b1e691eaa5fc6997df46a202bcf6872e4d55884d7c32c66b5e3a8b21aad64409e921c4eb6bc8e9b4d507d6e2f23aa7beeacd6624b2ac67982dbd00fa887fc3132c9dc2ead18148ef5b381f3997681c867c2e7af9ee3704dc1e92b08", 0x93}], 0xa, &(0x7f0000001600)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xa6}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xc0}, 0xc080)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)
r4 = getuid()
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
write$P9_RSTATu(r3, &(0x7f0000002700)={0x55, 0x7d, 0x1, {{0x0, 0x40, 0x8, 0x296, {0x0, 0x1, 0x1}, 0x94200000, 0x9, 0x400, 0x8, 0x5, '-%$+(', 0x3, '$:)', 0x3, '\'>^', 0x2, '*-'}, 0x0, '', r4, 0xee00, r5}}, 0x55)

04:22:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
write$binfmt_aout(r0, &(0x7f0000000f40)={{0xcc, 0x0, 0xff, 0x12d, 0x277, 0x4, 0x27c, 0x8}, "0640c53fac79f9213c0624d62b7a53f08ffb4f258664099f060291dbbc38cdf321919fb7", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x844)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2231.411003] loop1: detected capacity change from 0 to 40
[ 2231.415396] loop0: detected capacity change from 0 to 40
[ 2231.428208] loop2: detected capacity change from 0 to 40
[ 2231.429536] loop6: detected capacity change from 0 to 40
[ 2231.479287] syz-executor.4: attempt to access beyond end of device
[ 2231.479287] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2231.484334] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2231.538867] syz-executor.6: attempt to access beyond end of device
[ 2231.538867] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2231.540748] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2231.551162] syz-executor.1: attempt to access beyond end of device
[ 2231.551162] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2231.553084] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2231.571418] syz-executor.0: attempt to access beyond end of device
[ 2231.571418] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2231.573254] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2231.595896] syz-executor.6: attempt to access beyond end of device
[ 2231.595896] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
04:22:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="19", 0x292e9)

04:22:41 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9) (fail_nth: 77)

04:22:41 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r0, 0x310, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8001}]}, 0x2c}}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

[ 2231.693107] syz-executor.6: attempt to access beyond end of device
[ 2231.693107] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2231.694793] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2231.699047] loop1: detected capacity change from 0 to 40
[ 2231.754252] syz-executor.2: attempt to access beyond end of device
[ 2231.754252] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2231.756272] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2231.766464] syz-executor.1: attempt to access beyond end of device
[ 2231.766464] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2231.768094] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:22:41 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='%', 0x292e9)

04:22:41 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f787675017b83e31ac285b06eb5ec0e9fa68975111da92e223e33134dbc363e011bd8e4ba5865e6a553d99722d24850f79b0ae0148d1ea338067ffdf", 0x3c}, {&(0x7f0000000300)="4648fa9cbc043502a4ed7734d69277cca20f8663cc7722734951075da4b2da4f131505a5ed4a35d076d324e09694e4ad076b78ad1426395a8ab5444066ad9f3b4b5d89998b09dfd4cdcdd694c4a470e9e609542ac5b5f17826c90b2e8a10b9759eea47cb6153b31fc7350b778d93f63c", 0x70}, {&(0x7f0000000380)="908045a7ab1cb3ddbcd8ffc236ffbd761abcb89f4d0e3e9987a77f5e7eef1f4c3b38d22c282a9a6697e593ff960499b11ce0548b096454da010488c7621260235735a435a7dae57097834c0e46dde9482ce251bd270cd6e2a744bf2c2e85143b342f56a3ff3279a586b2f6bd776a66ffd2ab700770a6be5547330659ecc9aa1fda711ce0e681100a5eb997c6a755b7c57011e905d3dfc36e6f4d411bed6aa0c682c6f915da05ed8d07cebf34f4e31fe74d24518b50011ec8f54dc1ebe781b0132257bc6fa70aba8349baf8be9ea5a6c9d5e78a76c4d4d07a673dc55a207f6d86322e4ffd2485", 0xe6}, {&(0x7f0000000240)="c0f882aa2921c0698f18eb09726ee2fe96bc2fddeecdab0ef20fbf93acdb21bff44770026392601c695c69d5f4988338f2cd", 0x32}], 0x1, 0x2, 0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x5, 0x1f, 0x4, 0xf7, 0x0, 0xfffffffffffffdb8, 0x60024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x40970, 0x8001, 0x8, 0x9, 0xa0d, 0x10000, 0x2, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)

04:22:41 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x6, 0xa, &(0x7f0000002600)=[{&(0x7f0000000240)="0834c2bfe1a4b42a26dc4235f97d7970bab66e5dad195d2aeb3db2047683663ef1cb07bb019d7b7abb44b254be72fbdf78012d752f3d5f61bda57d2116cfe50028625b7ed1d029e8fd64fc30341b471ad7fa8a60368fec0ef502c2453ef528ed4bc6ea34bfb7a716a26bad13d264b7a12f546d529c367f8601f4d18cd9de0d68c75aa9756d76a9f71269302b4945072465887f4c8757db159a21a103285101dc2ad354ef6720f78b235d", 0xaa, 0x7}, {&(0x7f0000000300)="264c54034c4405e6d6cdb720761b43ca19cc8f983c8c11b9398d12eb10f103ec9e2b5d1faeb2b4c4a0caf962f8a36fe447c3a9a823b1abd0d0f3e92a39e58c2d472109cf1fcf47ff827a348082a98308779b31930b6750c0238ccfa9d00d4bcf69c189e42da81b8361cc49fab16fcf0bcbf144c90edf65cb42394f3e69edfc1b538ec999b2e9b2cb98dab02817112c5c4aae61107fab07c739c23a27c52d8f030644f4ea6e0588bc30df6c183b4fbbbcd990e2273607863a083e770bd8c2c8a49bba7262f0e0d54824c2c1fc6f70b59e7dae83142785b9cae05c38", 0xdb}, {&(0x7f00000000c0), 0x0, 0x60000000000000}, {&(0x7f0000000180)="a45cf300606dab5caa056732", 0xc, 0x1f}, {&(0x7f0000000400)="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", 0x1000, 0x400}, {&(0x7f00000001c0)="92d5e01cca815f5e1b", 0x9}, {&(0x7f0000001400)="165a07731088686ee26b175e1d255a95b1c360bed95ff2e88a85d5fc0559753fe5775574571332bb98be95713acfeece373da746122513a50d203bae0611ddd7a96e20167ea93e89b0c24e94c8a9ac2e1b0c1c1b831bc61fcc0379ce12d4c11c9b940980defdf6e8b69cdcb34f28d5b82645738a9493e3e354de9a408f24d04bb1eb5e15075fedf50f49d4290960b775d20283f23c8e1775a583bd0884058ea05c2dd74f3bfa99b80ac82df8f710c0f096b6c28122", 0xb5, 0x1abf}, {&(0x7f00000014c0)="03e34e48e4a9242210f8788eece6472c26d41b899955a910af24297bf22e9cab13499f7d610600e108c205c77c7861fd26a48277e3320bf350487136817fd8b578223fc3812c38ecfbada2ff93d829069bf10bb105ffea2ea59794f29080edc33274137760cda9d198c1c800bf7e1f14d1d71c151bb386c4d37ec5c1d81d1e2fa96a73aea2f915c6a7622cb1eeb9d3e991d97427ec01d0987f", 0x99, 0xbd01}, {&(0x7f0000001580)="cf3701f2388813f11913af7f5a1d50510f46325a3402390448afff7afd304288201979b8ae8d45f1daad6f237935f447698c0f740611138178570879ec1145383957780a8e329ada708596100a574383e2652ddbab8a832015", 0x59, 0x6}, {&(0x7f0000001600)="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", 0x1000, 0x1}], 0x800001, &(0x7f0000002700)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x39]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30]}}], [{@subj_user={'subj_user', 0x3d, '\\-'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@subj_role={'subj_role', 0x3d, '^-*](\\'}}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
write(r1, &(0x7f0000000080)="01", 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:22:41 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2231.929803] loop1: detected capacity change from 0 to 40
[ 2231.934226] loop0: detected capacity change from 0 to 40
04:22:41 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2231.989416] loop2: detected capacity change from 0 to 40
[ 2232.001933] loop6: detected capacity change from 0 to 40
[ 2232.051961] syz-executor.2: attempt to access beyond end of device
[ 2232.051961] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2232.053432] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2232.112341] loop4: detected capacity change from 0 to 40
[ 2232.124539] syz-executor.0: attempt to access beyond end of device
[ 2232.124539] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2232.126058] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2232.129379] FAULT_INJECTION: forcing a failure.
[ 2232.129379] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2232.130911] CPU: 1 PID: 12288 Comm: syz-executor.0 Not tainted 6.2.0-rc2-next-20230105 #1
[ 2232.131704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2232.132310] Call Trace:
[ 2232.132511]  <TASK>
[ 2232.132688]  dump_stack_lvl+0x8f/0xb7
[ 2232.132995]  should_fail_ex.cold+0x5/0xa
[ 2232.133313]  _copy_from_user+0x2e/0x180
[ 2232.133626]  kstrtouint_from_user+0xb0/0x170
[ 2232.133984]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2232.134379]  ? lock_acquire.part.0+0x12e/0x340
[ 2232.134538] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2232.134742]  proc_fail_nth_write+0x7c/0x220
[ 2232.134772]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2232.134802]  ? lock_is_held_type+0xdb/0x130
[ 2232.134832]  vfs_write+0x2cf/0xdd0
[ 2232.134850]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2232.134880]  ? __pfx_vfs_write+0x10/0x10
[ 2232.134896]  ? __pfx___fget_files+0x10/0x10
[ 2232.134927]  ? __fget_files+0x270/0x480
[ 2232.134969]  ksys_write+0x12b/0x260
[ 2232.134987]  ? __pfx_ksys_write+0x10/0x10
[ 2232.135006]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2232.139263]  ? syscall_enter_from_user_mode+0x21/0x50
[ 2232.139649]  do_syscall_64+0x3f/0x90
[ 2232.139932]  entry_SYSCALL_64_after_hwframe+0x72/0xdc
[ 2232.140328] RIP: 0033:0x7fe4f88705ff
[ 2232.140599] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
[ 2232.141922] RSP: 002b:00007fe4f5e33170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2232.142453] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4f88705ff
[ 2232.142950] RDX: 0000000000000001 RSI: 00007fe4f5e331e0 RDI: 0000000000000008
[ 2232.143445] RBP: 00007fe4f5e331d0 R08: 0000000000000000 R09: 0000000000000000
[ 2232.143963] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2232.144486] R13: 00007ffdf4e5f4af R14: 00007fe4f5e33300 R15: 0000000000022000
[ 2232.145038]  </TASK>
04:22:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
bind(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000180)=0xc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/2517], 0x9d5)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:22:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

04:22:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:22:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='c', 0x292e9)

04:22:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x18, 0x9, 0x5, 0xb8, 0x0, 0x66b4531d, 0x2002, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xd0, 0x4}, 0x41a00, 0x7fffffff, 0x200, 0x0, 0x7, 0x81, 0xf86d, 0x0, 0xffff, 0x0, 0x7ff}, 0x0, 0x2, r0, 0xc)

04:22:56 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x51567e53}}, './file0/file0\x00'})
syz_io_uring_setup(0x842, &(0x7f0000000380)={0x0, 0x7ad2, 0x0, 0x2, 0x53, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000300))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000500)=ANY=[@ANYBLOB="ca833ce35361efdcc0f6559c24d1c00d1c7d1d1212316b7351c36d6e9b9fe6", @ANYRES64=0x0, @ANYBLOB="721ee3a27a5508f6ec8912efc7daf054846c0e015a", @ANYBLOB="77b5f344246676681d30833a836523c41704365be55642ac74a8b13b4f770ea8d6497294ebb092d745d82fde94c159df9175a890a6832f042e6689a3e16b915ea42239c7c92f2783b6231326da920a6303ed41240be3b18531778514d4e5c964e35b18aabcf48be20c145b72878b06ecf90dd5c2fa2663f2a86fd808dd89d59659b2647eb82724263ef0c6183bb27cad26faab077f01d349702591f1e0e5e45c413ecbfe8f6f5b97ebf4e587962927ee062277ba34c1ff693a0fab051e918a5df78f9cdbb2d17bdd0b82effaab25c2a2f735336a619432547cee62874cf62bc36bcd81df691ba6cfa5b3084abb828bc1bb0edca173cbd7058428e728", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
fcntl$setlease(r2, 0x400, 0x2)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
fadvise64(r2, 0x6, 0x9, 0x5)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x210000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000003000000002e2f66696c65302f66696c653000"])
openat(r4, &(0x7f0000000180)='./file0/file0/file0\x00', 0x80042, 0x124)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080))
sendfile(r3, r2, 0x0, 0xfffffdef)

04:22:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
pidfd_getfd(r2, r3, 0x0)
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:22:56 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x8, 0x36, 0x19200000000000})
r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x200002, 0x1b6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r4, 0x0, 0xfffffdef)

[ 2246.619466] loop4: detected capacity change from 0 to 40
[ 2246.662926] loop1: detected capacity change from 0 to 40
[ 2246.670086] loop6: detected capacity change from 0 to 40
[ 2246.674180] loop0: detected capacity change from 0 to 40
[ 2246.678075] loop2: detected capacity change from 0 to 40
[ 2246.711899] bio_check_eod: 4 callbacks suppressed
[ 2246.711912] syz-executor.6: attempt to access beyond end of device
[ 2246.711912] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.713559] buffer_io_error: 2 callbacks suppressed
[ 2246.714060] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2246.743383] syz-executor.6: attempt to access beyond end of device
[ 2246.743383] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.744581] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2246.764992] syz-executor.4: attempt to access beyond end of device
[ 2246.764992] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.766309] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2246.778069] syz-executor.0: attempt to access beyond end of device
[ 2246.778069] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.779362] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2246.782305] syz-executor.2: attempt to access beyond end of device
[ 2246.782305] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.783536] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2246.798974] syz-executor.4: attempt to access beyond end of device
[ 2246.798974] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.800005] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2246.806417] syz-executor.1: attempt to access beyond end of device
[ 2246.806417] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.807550] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:22:56 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000002740)='./file0/file0\x00', 0x7, 0x8, &(0x7f0000002600)=[{&(0x7f0000000240)="9ffe81060e22f38273248595d02b439d43fe3de4696748475258dcf940e6290cbd903663cdabeb08f4633bd59ab4b00545af74dc12cad264ff1b1a2707eec7e1e595836496d6bcb7ff5ee4614629a994677cf985e0bdda95425a4304025ebd81db45ab1a8e3f361cbb83463e6d2ddc6528c8e2b5f8c142a334463923176b74f1f697cbe04b541e5762ea56", 0x8b, 0x101}, {&(0x7f0000000300)="c49f2898d449dd48bd6ab02a36bcbb5e3a610b9d631fd27f180caf694d0f081a9d9ee0da284a19b0e3d738371ba58af2895038a48987775866e8f2ca6674b59ec57f82a00be093591c18a9a9975d257195b6b529e3ccc89fbdc61f431145da1192b0c0", 0x63, 0x800}, {&(0x7f0000000380)="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", 0xfd, 0x3}, {&(0x7f0000000480)="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", 0x1000, 0xff}, {&(0x7f0000001480)="6c4ff8a5f3c9a0258ddc3f7e49d5964f46fe6629e1174275826810978a86b6090e67e80c0a040299d420141b4ca5cfc0f7dab434ca605b8c3e96d6496f9396b083f8f29ec263603f2c00aec45a2e495fc70e276fefeadaf0c74a78a38ae57efcb7970093b5eb905d130a027ad3634a3e918be72002a94eae25e4df666d72eb350d3816de1e5c601c3676ea3216161ccab8cbcfe4798ed5cc74d4f3c60b84cbebff25dba67b495e6a316821b98e74ac0c5232c9318c4d7d7543f44d9370a19703ef9e450a00c0bfa0", 0xc8, 0x4}, {&(0x7f0000001580)="831102551b6887b6dd162d86e5e21dae48f3acf22e24639081a12f3a7f154d78044c6e45aed1936e1143d5a9621c68a18539027d9b157984f0eb08025b7bdea0ade43eed743d35009f23b3e592", 0x4d, 0x3f}, {&(0x7f00000001c0)="a312b6a856f4433043f1f7dfea42ea0a4c40d37b8e43b77fc0244b1fa9cd87ad11c0f07692c67d47e069405de0e756e9350fde", 0x33, 0x100000000}, {&(0x7f0000001600)="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", 0x1000, 0x6b}], 0x4, &(0x7f00000026c0)={[{@utf8}, {@shortname_mixed}, {@shortname_lower}], [{@euid_eq={'euid', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]})
r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x101042, 0x10)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r4, 0x0, 0xfffffdef)
r5 = syz_open_pts(r4, 0x0)
r6 = fcntl$dupfd(r0, 0x406, r3)
openat(r6, &(0x7f0000000040)='./file1\x00', 0x200, 0x5c)
ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0xad9eeee, 0x6, 0x10000, 0xa17, 0x12, "20ec10ec370ab0f1649ceab87225a8220be169"})

04:22:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
sendto$unix(0xffffffffffffffff, &(0x7f0000000240)="2e116dc5fcd07cef2d66c81b58679fb53d4cce43aa371791f2fd294062972bec110b0979d319ecfe4aaa11cddce79458767e67b4a727b0ba74a150c5478d61d702510ae8cf1cd6b0c18dd44991de87be87f67ee42f3c6d8389a1835e0aa7ea196788fc58c19ce3d17d3f32b5860ad9892d856fdf0e3119d56fd9e4fbced648863ac44536c87facb6f1b13ef2a34b713a062685e3ba4cabc5", 0x98, 0x800d, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a1143, 0x145)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0)
mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x16, 0x100010, r2, 0xf675b000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

[ 2246.862184] syz-executor.1: attempt to access beyond end of device
[ 2246.862184] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2246.863192] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:22:56 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:22:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="02", 0x292e9)

04:22:56 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x2, 0x4, 0x5, 0x0, 0x3, 0x4400, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x42f9dca7, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x4020, 0x9d1, 0xfffffffc, 0x1, 0x0, 0x52, 0x5, 0x0, 0x8, 0x0, 0x80}, 0xffffffffffffffff, 0xf, r0, 0x8)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2246.963242] loop6: detected capacity change from 0 to 40
04:22:56 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="03", 0x292e9)

04:22:57 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x58)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)

[ 2247.006125] loop4: detected capacity change from 0 to 40
[ 2247.008161] loop0: detected capacity change from 0 to 40
[ 2247.013695] syz-executor.6: attempt to access beyond end of device
[ 2247.013695] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2247.014657] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2247.021349] loop2: detected capacity change from 0 to 40
04:22:57 executing program 5:
chroot(&(0x7f0000000180)='./file1\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pipe2(&(0x7f00000000c0), 0x800)
write(r0, &(0x7f0000000080)="01", 0x292e9)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x490d42, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

[ 2247.064890] syz-executor.6: attempt to access beyond end of device
[ 2247.064890] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2247.066060] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2247.093550] loop1: detected capacity change from 0 to 40
04:22:57 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x14f003, 0x8)
write(r2, &(0x7f0000000040)="d7", 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

04:22:57 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="03", 0x292e9)

04:22:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "76b012789b1f37b0", "678bc304a116af40b2882c831289c8cc", "3834a00a", "6c3107d54f90d191"}, 0x28)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f0000001300)=""/204, 0xcc}, {&(0x7f0000001400)=""/97, 0x61}], 0x5, 0xe4, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)

[ 2247.304514] loop6: detected capacity change from 0 to 40
[ 2247.344121] loop0: detected capacity change from 0 to 40
[ 2247.358436] loop4: detected capacity change from 0 to 40
04:23:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2263.347474] loop6: detected capacity change from 0 to 40
04:23:13 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'})
sendfile(r2, r0, 0x0, 0xfffffdef)

04:23:13 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1220}, r3, 0xffffffffffffffff, r2, 0x1)
r4 = fcntl$dupfd(r2, 0x406, r1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f00000001c0)=0x2, &(0x7f0000000240)=0x4)
r6 = openat(r4, &(0x7f0000000100)='./file1\x00', 0x109042, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x2)
write(r6, &(0x7f0000000080)="01", 0x292e9)

04:23:13 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = signalfd(r0, &(0x7f0000001780)={[0x7]}, 0x8)
openat(r2, &(0x7f00000017c0)='./file0\x00', 0x131000, 0x8)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001740)=0x40000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001540)=0x10000)
r6 = syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x11, 0x5, &(0x7f0000001640)=[{&(0x7f0000000400)="b5bd371714e2ceb526e9e6f9a5d7cad1a461ca57c3f4a8d0465297c7f95669ba37ff7e82d1b1e2b26aecd25b8dc5d0223b334e0e3c02b29575b2c99eb07ee8796df5520ccbaee47f0c43afbd4a82faa9ef989f15610349c8ed8ccafe29aec6feda368344bb2e4ffd333d43bf5a233a07499b32dae74ca1ade796eecdf461442b0e5f3a939758f7a497f454a00cfa84ed02cfae5e6f330be8dd4bca19c33022ddef7e9017b3da8a1ea317ce28d47cdbd122b8dc28a8b6ced8e0a4f80d46306ba5ca46ef12", 0xc4, 0x80}, {&(0x7f0000000500)="3eedc4d067ba028fbc089ae9482885dc62f320dc9743aeddc9806eb70ba7925c39a866f88ccefb88", 0x28}, {&(0x7f0000000540)="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", 0x1000, 0x7fffffff}, {&(0x7f0000001540), 0x0, 0x4}, {&(0x7f0000001580)="3245f102b6c105ae3bee8baccf5a13ad2a93797bcda4bdb9c272b60fd39aa63d4f4fee4da3417dd2546eb5ea8eca24c2965c097f1277670d4ece20bc4d2da99fcea5d96365b7c4537ed10889d2fab199d74d9bb93417791619e7c5f51490c57faba46744b19723501359d2a49cd0d3e6082091ba1efaa63b6ffc8c573b05f78027bfcf6293a9e99325961722fc39d050a41e87867a0518c166391b169decc77e86d7641dc966bb03849614acaf478fb32592a56185bd7e3f9526c2d9ed11ffd0", 0xc0, 0x5}], 0x2000000, &(0x7f00000018c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB="e92c6800e799000078db61da760a"])
openat(r6, &(0x7f0000001700)='./file1\x00', 0x10300, 0xae)
sendfile(r1, r4, 0x0, 0xfffffdef)
fcntl$setlease(r1, 0x400, 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="9c16888d3f25e852adbe6e4768e9f90a6ad16b0f63d9db8bd7c82e52f5e56a51e5327d9f7613769475291ac9102bea11cf488bd585703dd11b9848ca2f8151075015843c39b5e5f003ee945c6b4f1d3f5f99000b76b1efe38c14e1c5c5e930a4d0bc7ce547c328ac3b373e0714b659361d7a9ec064c3f243d0eb", 0x7a}, {&(0x7f0000000240)="27247df4c872b4efc0c88090b29715b89ad2c49d98e122a9a8ba0738eb658e73a78e48a80d20dcefe274fd784780780669d2221ac8c48a54e365b493f92eff95929aa1cf499390d951c42346a937401eb1a0176a9b40e1b9d908bf691814db2d2a3838b5bddc052dce88d43976104a1abf140a01f1020447a6f40c80c468f8e394a1aaf256fa481c282dc2fbbea826d2870e4dd2fbd5beb8e6dfcaf955303033accab5947880a23030837016d8d9c1fc4cfec87b5d000aa720194a0350aecb4524a4e00645eb30deee69810509bc7185fb15b215223fc2901a47949e8345fa8502d8dd513a1f20cd63c0d6e70e0e645e9ca6978089", 0xf5}, {&(0x7f0000000340)="46c05a29f11e2312226dfb33859dc9ca787f99911c1c205bdf46d949b7278e461d5c4cff3beca8875894ba9f0183d2fe1e43997caa6d21b7387a0e9ddee85eb4424258d8acc6d3c56dfa5389131817dfdfe8f0d323c1a7b463b02f9b9140abdd49b63d7a81381f32b283a55a0594440ac92fcf9d0149610ca09f1a64007210abdf1ffb2e64c3179c", 0x88}], 0x3, 0xfffffff8, 0x52d)
stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840))

04:23:13 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
rmdir(&(0x7f0000000000)='./file1\x00')
openat(r0, &(0x7f0000000040)='./file1\x00', 0x1c0, 0xa0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x10000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FIONCLEX(r3, 0x5450)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x101)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file2\x00'})
sendfile(r1, r4, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001600)={{0x1, 0x1, 0x18}, './file1\x00'})
r6 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x6, 0x4, &(0x7f0000001480)=[{&(0x7f00000002c0)="04495303853a01db7f3f817810638318b858d5804de2cde500729e86b58c286421da2a39cd8d491e83a577bd665e210deb9444575bb74a90fd39638d894e2a81426ab71b343094adb79eb50223f546aa05765f08b1848708b7dbb9e09b6dfb295b5aad4ed07b2bb341", 0x69, 0x1d31}, {&(0x7f0000000340)="76905ba5b186e8d2", 0x8, 0x81}, {&(0x7f0000000380)="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", 0x1000, 0xffffffff}, {&(0x7f0000001380)="4126ed2f018124657c5361709026af06622d7780315ab870f40a542127dc712988ebe506222248ee4a34c6ad93050d967723b9f53eae904b8caf2a45ad78a0f24ad9d90e924028a8d01020ed80daf8e200aba3cc08c6bbc386431f70c0b2d5436f54f3afab3a35dca7ee1b18099939f956fa012003af1adc1f1c51a92bcca75e32429be59f1dbbd3087749b65c1da9390c0fb7d71a52e3cc86d76bb7150bd8ef0a1ac1f4b9b6add1ac146b765fe80147bef17e1baa87dc1a501c7e84710b20874a13ebed912c2f74e5e61780d8cf1e1a", 0xd0, 0x9}], 0x2264000, &(0x7f0000001500)={[{@sbsector={'sbsector', 0x3d, 0xff}}, {@session={'session', 0x3d, 0x56}}, {@hide}, {@session={'session', 0x3d, 0x4b}}], [{@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]})
sendfile(r5, r6, &(0x7f00000015c0)=0x2, 0xe052)

04:23:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="04", 0x292e9)

04:23:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x0, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:23:13 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x189040, 0x48)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r2, {0xfffffffffffffc01}}, './file1\x00'})
r4 = dup2(0xffffffffffffffff, r2)
clock_gettime(0x0, &(0x7f00000003c0)={<r5=>0x0, <r6=>0x0})
utimensat(r4, &(0x7f0000000380)='./file1\x00', &(0x7f0000000b00)={{r5, r6/1000+60000}}, 0x100)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x2, 0xd8, 0x4c, 0xf6, 0x0, 0x1ff, 0x25004, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xe, 0xcfc7}, 0x0, 0x653, 0x6, 0x6, 0xfffffffffffff001, 0x100, 0x6, 0x0, 0x72, 0x0, 0xeeee000000000}, 0x0, 0x0, r3, 0x3)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2263.371257] loop1: detected capacity change from 0 to 40
[ 2263.375194] bio_check_eod: 7 callbacks suppressed
[ 2263.375208] syz-executor.6: attempt to access beyond end of device
[ 2263.375208] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.376388] buffer_io_error: 7 callbacks suppressed
[ 2263.376398] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2263.386034] loop2: detected capacity change from 0 to 40
[ 2263.401516] syz-executor.6: attempt to access beyond end of device
[ 2263.401516] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2263.410486] syz-executor.6: attempt to access beyond end of device
[ 2263.410486] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.411390] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2263.413703] loop0: detected capacity change from 0 to 40
[ 2263.419351] loop4: detected capacity change from 0 to 40
[ 2263.445072] syz-executor.6: attempt to access beyond end of device
[ 2263.445072] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.446279] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2263.466869] syz-executor.6: attempt to access beyond end of device
[ 2263.466869] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.467800] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2263.489476] syz-executor.2: attempt to access beyond end of device
[ 2263.489476] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.490887] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2263.503330] syz-executor.0: attempt to access beyond end of device
[ 2263.503330] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.504922] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2263.516370] syz-executor.1: attempt to access beyond end of device
[ 2263.516370] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.517530] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:23:13 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x48000, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = fsmount(r2, 0x0, 0x170)
openat(r4, &(0x7f0000000000)='./file1\x00', 0x10000, 0x70)
sendfile(r1, r3, 0x0, 0xfffffdef)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000040))

04:23:13 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
io_submit(0x0, 0x6, &(0x7f0000000e00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000f40)="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", 0x1000, 0xfff0000000}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xb4, 0xffffffffffffffff, &(0x7f0000000340)="fbf336371600b672c0", 0x9, 0x7679cb1f, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, &(0x7f0000000b00)="243a2c3fb8f77ce3a35db34ca9dc0f967b5889e9e66956f779710ea6ba9838924c97e85876c3e0f1e61975c3c07f32c5757b2914f7d2b4ab1d76cc476ab1d6b8505aa078f1de0f631f185d55039103303fe0243e96a0baba4d2e36e0e3fc451b9a9a40f0f1180388cc4d4aa5d20638226b03c90f7dc458d0923d0d0b42242a1e5cda61c1b0cb6d4c440c8a34a7dd03f5c1013181ddc9f239e3e481a42d9febbfb7c85a3ac6963513fe0cedc5d6243d28fd50b1b59e89d59807f2", 0xba, 0x7fffffff, 0x0, 0x1}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x6, 0x200, r3, &(0x7f0000000bc0)="5c4a7280340d8e0e0d2c928013aac48318bfa75d610a237b70668a7488680ae7fa075a9f66916282bf939aa10c8057afafed1931410f0315", 0x38, 0xcce2, 0x0, 0x3}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x101, r2, &(0x7f0000000c40)="2547113872bf52a3d2da9ad9d55f0f19973e4fb6bb9aa7c7ff4b1b0c425628a44370a305150cbd9ff277bb8b6b807281a5b497e71a02eb64841282012f4c41119264b8913921830316882a8eaeba6795be136a341de5777972631bfb8412a51f1fec9158adbe6a3d26e2db3fd08db71c3cc3d907f5b055feef820b44a7f26e9872b55049ed51761960b91d554b231a86c4b602caade2b9a737603452af0c0b5da94c4ae53e42ba76d4944de0d15dedab72444dfea931db2b1264d5159027c2abc691533ba33081edecb797d2f612da86918b4eeb8ed5440220155ffc61d3b3b227", 0xe1, 0x401, 0x0, 0x0, r4}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000000d80)="95b78279a8f570ea1a676e9639a60e08b50e64aab457acda88d362e186cd09bbd35245b18de25dc3e8fb272ac84a62a733aa1b953862963e26", 0x39, 0x3, 0x0, 0x0, r5}])
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:23:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:23:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="05", 0x292e9)

04:23:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x0, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2263.653963] loop6: detected capacity change from 0 to 40
[ 2263.680011] loop1: detected capacity change from 0 to 40
04:23:13 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x682500, 0x24)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_hda_intel', 0x4000, 0x6)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x981, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x101842, 0x13)
write(r3, &(0x7f0000000080)="01", 0x292e9)

[ 2263.699454] loop2: detected capacity change from 0 to 40
[ 2263.700932] syz-executor.6: attempt to access beyond end of device
[ 2263.700932] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2263.702063] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2263.708689] loop0: detected capacity change from 0 to 40
[ 2263.726921] syz-executor.6: attempt to access beyond end of device
[ 2263.726921] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2263.758556] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2263.760759] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:23:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="06", 0x292e9)

04:23:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="601c6d6b646f7376d8a010dd77aebc9c890600080101020440002000f801", 0x1e}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="040000000000000010000201000000000006fdaf9118c4f7"], 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@dfltgid}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt}]}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
r5 = getuid()
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r3}, {0x2, 0x1, r5}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c667363616368652c64666c746769643d28ebb9c30a2b5efc95b309a1ab41fc2cc5d1e0e70c2426281c9ca4b9d8f365589b397427bd77942bc2", @ANYRESHEX=r4, @ANYBLOB=',permit_directio,defcontext=staff_u,uid>', @ANYRESDEC=r3, @ANYBLOB=',measure,subj_role=hugetlbfs\x00,smackfsdef=hugetlbfs\x00,fscontext=user_u,fowner>', @ANYRESDEC=r3, @ANYBLOB=',\x00'])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
r9 = getuid()
fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r7}, {0x2, 0x1, r9}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@fscache}, {@dfltgid={'dfltgid', 0x3d, r8}}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r7}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r7}}]}})
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x4}, [{}, {0x2, 0x4}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0x1, 0xee01}, {0x8, 0x0, r4}, {0x8, 0x6, r8}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r10, 0x0, 0xfffffdef)

[ 2263.809755] loop4: detected capacity change from 0 to 40
04:23:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="03", 0x292e9)

04:23:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x0, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2263.944742] loop2: detected capacity change from 0 to 40
[ 2263.946862] loop0: detected capacity change from 0 to 40
[ 2263.950112] loop1: detected capacity change from 0 to 40
04:23:29 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
lremovexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="736563758a6974792e76663f7400"])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2279.995532] loop0: detected capacity change from 0 to 40
[ 2280.000955] loop6: detected capacity change from 0 to 40
[ 2280.004507] loop4: detected capacity change from 0 to 40
[ 2280.022320] loop1: detected capacity change from 0 to 40
[ 2280.027824] bio_check_eod: 9 callbacks suppressed
[ 2280.027838] syz-executor.6: attempt to access beyond end of device
[ 2280.027838] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.029361] buffer_io_error: 6 callbacks suppressed
[ 2280.029371] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2280.052236] syz-executor.6: attempt to access beyond end of device
[ 2280.052236] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.054059] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2280.067029] loop2: detected capacity change from 0 to 40
04:23:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
r4 = getuid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [{0x2, 0x0, r2}, {0x2, 0x1, r4}, {0x2, 0x4}], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x3c, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x161010, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', r2}}, {@measure}, {@subj_role={'subj_role', 0x3d, 'hugetlbfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hugetlbfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r2}}]}})
lchown(&(0x7f0000000000)='./file1\x00', 0xee00, r3)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240))
write(r5, &(0x7f0000000080)="01", 0x292e9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r6, 0x0, 0xfffffdef)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
openat(r7, &(0x7f00000000c0)='./file1\x00', 0x80, 0x2)

04:23:29 executing program 6:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
write$binfmt_aout(r1, &(0x7f0000004000)={{0x107, 0x2, 0x4, 0x29a, 0x2cf, 0xffff, 0x2f4, 0x63580186}, "d9289184e86908550b446fd78d4c556943fa602a0d3c73cd", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x638)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
recvmmsg$unix(r2, &(0x7f0000003e40)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f00000002c0)=""/168, 0xa8}], 0x2, &(0x7f0000000380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000580)=""/155, 0x9b}, {&(0x7f0000000640)=""/47, 0x2f}], 0x4, &(0x7f00000006c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)=""/90, 0x5a}, {&(0x7f0000000800)=""/77, 0x4d}], 0x2, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/83, 0x53}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000000ac0)=""/58, 0x3a}, {&(0x7f0000000b00)=""/68, 0x44}, {&(0x7f0000000b80)=""/205, 0xcd}, {&(0x7f0000000c80)=""/190, 0xbe}, {&(0x7f0000000d40)=""/200, 0xc8}], 0x8, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000f00), 0x6e, &(0x7f0000001300)=[{&(0x7f0000000f80)=""/51, 0x33}, {&(0x7f0000000fc0)=""/145, 0x91}, {&(0x7f0000001080)=""/213, 0xd5}, {&(0x7f0000001180)=""/234, 0xea}, {&(0x7f0000001280)=""/78, 0x4e}], 0x5, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000003a40)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/191, 0xbf}, {&(0x7f0000002580)=""/43, 0x2b}, {&(0x7f00000025c0)=""/212, 0xd4}, {&(0x7f00000026c0)=""/158, 0x9e}, {&(0x7f0000002780)=""/130, 0x82}, {&(0x7f0000002840)=""/178, 0xb2}, {&(0x7f0000002900)=""/186, 0xba}, {&(0x7f00000029c0)=""/101, 0x65}, {&(0x7f0000002a40)=""/4096, 0x1000}], 0xa, &(0x7f0000003b00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000003b80)=@abs, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000003c00)=""/166, 0xa6}, {&(0x7f0000003cc0)=""/1, 0x1}, {&(0x7f0000003d00)=""/174, 0xae}], 0x3, &(0x7f0000003e00)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x7, 0x20, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)
readahead(r4, 0x9, 0x3)

04:23:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = syz_io_uring_complete(0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
pidfd_getfd(r0, r1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x7fffffff, 0x4, &(0x7f0000000400)=[{&(0x7f0000000180), 0x0, 0x7}, {&(0x7f0000000300)="13df35b7e5d961e99e82b8ab76c0b2eb1ba547752b4886bb3ece1b330c18944796a1cd9fc5f4d6d4e77002aff62dbebf338543ac5782fae1dbb10b56636ffe04e40a3d90a15bae72ff2560f031309b7942a9ff27007a4887bb83986a1d24d57fba", 0x61, 0xf2}, {&(0x7f00000001c0)="b3bb463398535b0f3832134e4a8640f1651388191634971dc74a2e481f", 0x1d, 0x85}, {&(0x7f0000000380)="74a0052d914e8ddf99e61cb5052cd4403697c8262423fb6d6ea5fb856ff2b0f9d9e8333ddfa1611772445dc7d06b671c80fba7a048e261ef8912885dd2a52cfdf2fc9c80a5150e83c26da51b4cdebf6a867317017f46582ce8f0d39a050419bdf2944f8dcb5bf7c3036354f2", 0x6c, 0x5}], 0x18, &(0x7f0000000480)={[{@barrier}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@init_itable_val={'init_itable', 0x3d, 0x6}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', 0xee00}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@audit}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'user_u'}}]})
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)

04:23:29 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:23:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\a', 0x292e9)

04:23:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="05", 0x292e9)

[ 2280.081258] syz-executor.6: attempt to access beyond end of device
[ 2280.081258] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2280.086883] syz-executor.1: attempt to access beyond end of device
[ 2280.086883] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.087966] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:23:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x84, 0x0, &(0x7f0000000b00)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="85616466000010000a00000000000000020000000000000030000000000000008561646600000000080000000000000002000000000000003600000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f0000000240)={0x0, 0x20, 0x40}}}, @release={0x40046306, 0x3}, @register_looper, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x1}, @decrefs={0x40046307, 0x3}, @dead_binder_done, @increfs={0x40046304, 0x2}, @release={0x40046306, 0x3}], 0x96, 0x0, &(0x7f0000000bc0)="98da98bd82db49891815943dd205ec7d6bc867c1bed01000e2ea6f3d4aace5faaa5474de10e69ead9bd23a8558f7dbac5898f7b18c84fa710ecf7e285826a500a403370fcf5cc118d4d61f8ac23b0714b597530294a52d9670688001cf6765eddc3d2638e1c76029989e2a764af0accf7336a8a6fe7ac968a9cb5e5ef2dea3abf3234da569487fb971a21057c1b2d4d49b00e2ef807c"})
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2280.131119] syz-executor.6: attempt to access beyond end of device
[ 2280.131119] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.131990] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2280.145377] syz-executor.6: attempt to access beyond end of device
[ 2280.145377] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
04:23:30 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="06", 0x292e9)

04:23:30 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x20, 0x9, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x210281, 0x44)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r3, {<r5=>r0}}, './file0\x00'})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x40)
openat(r5, &(0x7f0000000040)='./file0\x00', 0x123000, 0x17b)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x40, 0x4, 0x4, 0x4, 0x0, 0x20, 0x4002a, 0xfb9804ab3aed7b66, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x1665, 0x80000000}, 0x2b, 0x401, 0x20, 0x2, 0x6, 0x1000140, 0x6, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, r6}}, 0x7f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r4, 0x0, &(0x7f00000002c0)="16ec9addb1692991a5208f17fe5534c9b00abebc89487b7fd0ee0c52d846f521ae98e8b59fdc0eeaba1884a6f835e585b0a2d036849a2f48c4ba", 0x3a, 0x48c0, 0x1, {0x0, r6}}, 0x81)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x20202, 0x0)
openat(r7, &(0x7f0000000180)='./file0\x00', 0x501080, 0xd0)
sendfile(r1, r3, 0x0, 0xfffffdef)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r8, &(0x7f0000000080)="01", 0x292e9)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r3)

04:23:30 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x202, 0x88)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
socket$inet(0x2, 0x0, 0x6)
r3 = accept$inet6(r2, 0x0, &(0x7f0000000000))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="3afc8fd6516e24b35685f21575038198f7709f435b5995188581186100c9129c95da5569a54ac11f08b8", 0x2a}], 0x1, 0xfff, 0x8)
sendfile(r1, r3, 0x0, 0xfffffdf0)

[ 2280.295955] syz-executor.2: attempt to access beyond end of device
[ 2280.295955] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.297096] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2280.298389] syz-executor.4: attempt to access beyond end of device
[ 2280.298389] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.300392] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2280.338242] syz-executor.0: attempt to access beyond end of device
[ 2280.338242] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.340135] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:23:30 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2280.462039] loop1: detected capacity change from 0 to 40
04:23:30 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\b', 0x292e9)

[ 2280.573880] loop6: detected capacity change from 0 to 40
[ 2280.582093] syz-executor.1: attempt to access beyond end of device
[ 2280.582093] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2280.583166] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:23:30 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x80000, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat(r0, &(0x7f0000000240)='./file1\x00', 0x208800, 0x10)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0b4e26217efe267ef66833928ae33a95"])
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40000, 0x21)
r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x4000)
ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000380)=""/45)
symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)

[ 2280.618287] loop2: detected capacity change from 0 to 40
[ 2280.639428] loop0: detected capacity change from 0 to 40
[ 2280.650350] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2280.654168] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2280.722460] loop4: detected capacity change from 0 to 40
[ 2280.783513] loop4: detected capacity change from 0 to 40
04:23:45 executing program 6:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00082abd7000fddbdf25170000000a001a00ffffffffffff00000a001a0008021100000000000a001a00ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x50}}, 0x885)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x48ed, 0x13}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000000)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

04:23:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2295.458815] loop0: detected capacity change from 0 to 40
04:23:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\t', 0x292e9)

04:23:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\t', 0x292e9)

04:23:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101300, 0x41)

04:23:45 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x101000, 0xda)
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)

04:23:45 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140)=<r1=>0x0)
io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="ba63501838fd43d0d3941e5a2b96757072725715a62df57b2985bd8c64f7f9b49e3d49b89b381194bca88e569510b6f5d68317af768877349dd6cb6de9cd28e4bd0a89cc5eb7899956f9ddb1d9daa4bad40a9eee4992694cc1944d27b5651b1fed0b0da9901c553cb7ac2417d88c0ec0b3a18a7c00edb7909d55ab1e3a4b6a56e7b2b44790be74c7dba22f37541a2644a6cd23ac35be0c685a39fc9dadb985329f0eb016b4d53bf5d44766076528bf0635", 0xb1, 0x100000001, 0x0, 0x6, r0}, &(0x7f00000001c0))
openat(r0, &(0x7f00000000c0)='./file1\x00', 0x400000, 0x93)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
write$binfmt_misc(r2, &(0x7f0000000680)={'syz1', "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"}, 0x1004)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)
r3 = epoll_create(0x8)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000240)={0x2, 0x4, 0x2, 0x3})

[ 2295.504803] loop2: detected capacity change from 0 to 40
[ 2295.507170] bio_check_eod: 7 callbacks suppressed
[ 2295.507184] syz-executor.0: attempt to access beyond end of device
[ 2295.507184] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.508769] buffer_io_error: 5 callbacks suppressed
[ 2295.508795] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2295.514389] loop6: detected capacity change from 0 to 40
[ 2295.515064] loop1: detected capacity change from 0 to 40
[ 2295.523243] loop4: detected capacity change from 0 to 40
[ 2295.528421] FAT-fs (loop6): Unrecognized mount option "À" or missing value
04:23:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000b00)={0x3fc, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x9d, 0x2a, [@random_vendor={0xdd, 0x4b, "e6a7f9a13331dc6a659669cf50cbe9dca7448aed0cde26b42693b6f3357bfec3bac22326a6363662247ab8caccdd38514a163e3088c23012e4b66602b19da526171075dd54103ac5e6bab5"}, @ibss={0x6, 0x2, 0x7}, @peer_mgmt={0x75, 0x16, {0x0, 0x5, @void, @val=0x2a, @val="42ceabac6dc4d3a0e0df9885f9ef734d"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x24, 0x2}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x1}}, @ibss={0x6, 0x2, 0x8}, @chsw_timing={0x68, 0x4, {0x81, 0x7}}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x1, 0x21}}, @chsw_timing={0x68, 0x4, {0x81, 0x4}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "73a92d4049121427bc"}, @NL80211_ATTR_FILS_ERP_REALM={0xe1, 0xfa, "519efd623e1f0c6c3fac1e401cd6d1b0d7b8b96c34599330034f5df182bd2944f54be704ddc6c68e5bbd01266ecc44d81b72e11e34f90209e251fce566298c575be8b22160242ff1f437ff6d43ab27ced0139f083e28d6ca9f08810bd888b329c64a9d1a161b384786e7dc8abb19bbc80c3ffc73a93225c132d03a56d248585160aa2b28bba5acc399031b3e29292c52274e2af7cb6c8b7257af68ef3e716b91c9d97a82a93bfe8e6a1393c0c687e6a8c6717a6a4e01a67d54b0139643a707f903055e42a6f6cca564afee7d76b1bb4a5a20513e34b979c32c0c85c8b3"}, @NL80211_ATTR_FILS_ERP_REALM={0xd7, 0xfa, "a88005aeac8128673ce9002344416d7fc8456433c3238e5c295f7e258da9e46e0bddaf8fb2c08fabbb7ab5bc0a63f081c0494c623fcc78bb5f19a706067a40df38963211ad78379d388f8a6ece93ad000fea85bf67c18d996c8b04351328e65bbec67884f016c077b00cfae07f8cd7e776db224756972a6d6292bd64f19aae4bf15354660753613894ef8eeeb5db64f0c3312690159b9721a27076cfedc3a1bb4963285016944f7df299c3cc2efcec8fc6f4ad11e1f6e13c69a47d67633b9291f8a378d94f46f78f4887c46b5b0517057da625"}], @NL80211_ATTR_IE={0xf8, 0x2a, [@challenge={0x10, 0x1, 0xe0}, @random={0x9, 0xd0, "d959cf03401c09c165c0c5ead9a11fc9d231b12b66e2642e6e70ad6cf9332cc910b12bd1061f9159c2c1c81e26a1eb42395671f622aabf3c94bfb5f77c8792f2e4a25bc0b371d773333a7cb24b7b5a8f87f6b29469345a9871406f44282191b9d957d5ffd43a5d50b6b934f1fa592e56eb21b38afa0750a9040b8af357ae873f0bff857c822887d1149b08d88cabad52ebb60652d7311d8a392595e88f8602b66b8a38646d3ba9531a804ae6856a56b053ba5119d3e300c268ce89f7b5ecd29cbd906fb54eea5fa5c0ef436632326891"}, @ht={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0x100000001, 0x1, 0x0, 0xff, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0xfffffffd, 0x8}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "7e8d308e253adc38df51e394b84e2297"}, @NL80211_ATTR_FILS_ERP_RRK={0x70, 0xfc, "fcc7ad90b57f02ffde579fe81b39a7e2c05b74d037a688274962bab67735b6d9314958af2b490dfda86ddec455acd7a6f9e807552d16818c16182d01e430f936bee29d7c829693d422d6cf3c74d0724970bdb67a3de4686b7daa092b0cf6ddf14b988b4d3b580d666cc35c3b"}]]}, 0x3fc}, 0x1, 0x0, 0x0, 0x80}, 0x40)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
read$hiddev(r2, &(0x7f00000003c0)=""/9, 0x9)
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2295.569131] syz-executor.1: attempt to access beyond end of device
[ 2295.569131] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.570312] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:23:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\n', 0x292e9)

[ 2295.624010] loop6: detected capacity change from 0 to 40
[ 2295.626923] syz-executor.2: attempt to access beyond end of device
[ 2295.626923] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.628857] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:23:45 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2295.689221] syz-executor.4: attempt to access beyond end of device
[ 2295.689221] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.690324] Buffer I/O error on dev loop4, logical block 31, lost async page write
[ 2295.709999] loop0: detected capacity change from 0 to 40
04:23:45 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x0, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2295.733011] syz-executor.4: attempt to access beyond end of device
[ 2295.733011] loop4: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.733913] Buffer I/O error on dev loop4, logical block 31, lost async page write
04:23:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8283, 0x0)
sendfile(r2, r1, &(0x7f0000000040)=0x8, 0xbd8d)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:23:45 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendfile(r1, r2, &(0x7f0000000300)=0xaa, 0x120000)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1150020, 0xfffffffffffffffd)
chroot(&(0x7f00000000c0)='./file0/file0/file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r3, r0, 0x0, 0xfffffdef)

[ 2295.757600] loop1: detected capacity change from 0 to 40
04:23:45 executing program 5:
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x214800, 0x113)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2295.799160] loop2: detected capacity change from 0 to 40
[ 2295.828101] loop6: detected capacity change from 0 to 40
[ 2295.839195] syz-executor.0: attempt to access beyond end of device
[ 2295.839195] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.840969] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2295.860519] syz-executor.1: attempt to access beyond end of device
[ 2295.860519] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.860708] syz-executor.6: attempt to access beyond end of device
[ 2295.860708] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.860752] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2295.864980] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2295.865929] syz-executor.6: attempt to access beyond end of device
[ 2295.865929] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
04:23:45 executing program 4:
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xffffffbd}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4a825c0c863063e9)
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000380)=""/96, 0x60}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/134, 0x86}, {&(0x7f00000014c0)=""/17, 0x11}, {&(0x7f0000001500)=""/73, 0x49}], 0x5, &(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0001800000000000000000000100000002008617e9b76cdac509b49a983a9e3eb3df582b5e6f14a0e9ae440ae7ce85762f5bbdc47151a89f616a90d8392f19a70ce635204901984091d20be86c9bdc09eec36d259d8bbf2f67e8283b2a753eb2b5a4e656dbab55e5aa3e17ddc1dbe879eebc1ca5d68070ed17327e047f790080c1eee37da91e3c8d1c89e19abbd34c21307b718d0d595eab44400d4b280297cda88a490346e5cf790b138201ab88f363dc7e324e8fabba7c7db2b07c079c328f870bd372be70aff81f52a756533a572eab136b46a3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138}, 0x0)
openat(r1, &(0x7f0000001780)='./file0\x00', 0x20000, 0x103)
chdir(&(0x7f0000000140)='./file0\x00')
fallocate(r0, 0x2a, 0x9, 0x4)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x102)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = fork()
process_vm_readv(r3, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
fork()
r4 = open(&(0x7f0000001880)='./file1\x00', 0x240000, 0x82)
perf_event_open(&(0x7f0000001800)={0x4, 0x80, 0x3f, 0x4a, 0x40, 0x81, 0x0, 0x8, 0x4800, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7f80, 0x3, @perf_bp={&(0x7f00000017c0)}, 0x4010, 0x2, 0x2b64b879, 0x4, 0xffffffffffffff3c, 0xfffffff9, 0x1, 0x0, 0xffffffd2, 0x0, 0x3ff}, r3, 0x9, r4, 0x8)

[ 2295.889101] syz-executor.6: attempt to access beyond end of device
[ 2295.889101] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2295.891834] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:23:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000300)=""/169, 0xa9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x0)

[ 2295.915338] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2295.939886] loop4: detected capacity change from 0 to 40
04:23:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\v', 0x292e9)

04:23:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x5180, 0x1e0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x8, 0x8})
sendfile(r0, r2, 0x0, 0xfffffdef)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x200000, 0x10)

[ 2296.062728] loop0: detected capacity change from 0 to 40
[ 2296.082403] loop6: detected capacity change from 0 to 40
04:24:00 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x1, 0xfbc, 0x9, 0x100, 0x1})
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080))
sendfile(r2, r1, 0x0, 0xfffffdef)

04:24:00 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000300)={{}, "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"})
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000001400)={0x2, 0x2, 0x1, 0x8})

04:24:00 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0xe1, 0xae, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(r2, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x2, 0x6, 0x40, 0x6, 0x0, 0xe08, 0x10210, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff7}, 0x10511, 0x141, 0x800, 0x6, 0x100, 0x9, 0xff, 0x0, 0x8ce3, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r1, 0x1)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
pread64(r3, &(0x7f0000000240)=""/3, 0x3, 0xc6)

04:24:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:24:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x0, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:24:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x1004056, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x12000, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(r1, &(0x7f0000000000)='./file1\x00', 0x101042, 0x111)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4942, 0x94)
sendfile(r2, r4, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc)

04:24:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x5c1282, 0x80)
ioctl$KDDELIO(r0, 0x4b35, 0x80000000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$LOOP_SET_FD(r1, 0x4c00, r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r4, 0x0, 0xfffffdef)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x1, @desc3})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
fallocate(r5, 0x60, 0xaa, 0x1)
openat(r2, &(0x7f00000000c0)='./file1\x00', 0x40002, 0x80)

04:24:00 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\f', 0x292e9)

[ 2310.772652] loop0: detected capacity change from 0 to 40
[ 2310.777202] loop6: detected capacity change from 0 to 40
[ 2310.779884] loop1: detected capacity change from 0 to 40
[ 2310.801757] loop2: detected capacity change from 0 to 40
[ 2310.804105] bio_check_eod: 3 callbacks suppressed
[ 2310.804118] syz-executor.6: attempt to access beyond end of device
[ 2310.804118] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2310.805316] buffer_io_error: 2 callbacks suppressed
[ 2310.805326] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2310.821350] syz-executor.6: attempt to access beyond end of device
[ 2310.821350] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2310.822183] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2310.836255] syz-executor.0: attempt to access beyond end of device
[ 2310.836255] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2310.837890] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2310.844582] syz-executor.6: attempt to access beyond end of device
[ 2310.844582] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2310.854054] syz-executor.6: attempt to access beyond end of device
[ 2310.854054] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2310.854956] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2310.869094] syz-executor.1: attempt to access beyond end of device
[ 2310.869094] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2310.870367] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2310.878096] syz-executor.6: attempt to access beyond end of device
[ 2310.878096] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2310.879066] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2310.894025] syz-executor.6: attempt to access beyond end of device
[ 2310.894025] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2310.909091] syz-executor.2: attempt to access beyond end of device
[ 2310.909091] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2310.910928] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2326.228014] loop2: detected capacity change from 0 to 40
[ 2326.230889] loop1: detected capacity change from 0 to 40
04:24:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000400)='./file2\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x201000, &(0x7f0000000440)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sctp\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
r3 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x7, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000240)="1f60eed6d14c99fa12571eb4f55e0ebc9af74e9768ed37a40f41590956d74b35a4dd938a9cf11ab5c4051fca67c1cbcf46212753cec4e9bc07e05adc5e8040e9cdf66995660c21320b80915b9ac557e718e2e318a528918c356c46baf7a3915a607e78735b5645853cdab94e7e50c117e56a20e3147595cde23a1c26adc1b648f76922fd45294072dc072102aa7c9781205609bd5ccf32c8404aa7343312eb8038a32012c313640be1b26b7727b6305edd6aa071d9128a4bef0cc8b39703305951b3ad13d1b65f602e5dab450239640180b0b9a923e141c9124c14e02b4742b5207f4aaa172f1cb19d85bc", 0xeb, 0x9}, {&(0x7f0000000340)="c15d64d30fc3f2538438481642061327f179a0c0ed8189110326434de28ed7e13d5bff4898ebbcf2f2fd5faab122b2143cb5e272b96e1185a29959a2c0b4118ba27f5bd0af695fe31a7771253ee50e146801b27c97663d5911bc139ba9aadeb44d", 0x61, 0x3f}], 0x10000, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYBLOB="2cc1709fa91cb08ee0989becba6575696475", @ANYRESDEC=0xee00, @ANYBLOB=',rootcontext=system_u,smackfsroot=net/sctp\x00,obj_role=(%.,dont_appraise,func=MMAP_CHECK,\x00'])
fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000040)='\x02\x00\x00\x00&!*-{,#/{\x00', &(0x7f00000000c0)='./file2\x00', r3)

04:24:16 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000300), &(0x7f0000002680)={0x0, 0xfb, 0xa1, 0x2, 0x9, "6b0b4c7476ff7ff917c0bb632d832a0a", "0af5d6c4098efb6761594d2a000e7a2cc3215ec876f8644c1f774a35b5a5404f3dbb900728500c1f4dd67025f666c4b09cf93c868b66b749ca3fff19e60779769a40d15d1630b9091dc09938dc88a33af22c78b17b3e096a6861c094e9bebd71488efe9863a685695cb8fa56cc7970fa66a9e9ac62cf703ad28ace669cb767229ae63de2d373401bdc097e80"}, 0xa1, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
[ 2326.275365] syz-executor.2: attempt to access beyond end of device
[ 2326.275365] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2326.276423] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2326.279466] syz-executor.1: attempt to access beyond end of device
[ 2326.279466] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2326.281196] Buffer I/O error on dev loop1, logical block 31, lost async page write
r2 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x100000001, 0x4, &(0x7f0000002500)=[{&(0x7f0000000380)="3b57e31bdfe09ff2282373ddb490f80e412ed1ab7b2f7c390ff4aaa82f7e8645205a25ab04bc7c473fe244c416fd11c78967ea8f8a27d33c187e9fcb9b3aded08f9e2928aa4eb020d7cd351d72ff6d3baa6166cd447a01698495f2978cfeee029b3f1a50831983fbc637a56552d3447750fde9c6808e6d07352b76d51c02dcf977c68ffa45fd50b9862f8700fd63e64ec5f79674100adc42be215791e7a2b661a205741f197b510f54a1deeb1a0cb39307d74db484887efd2aa1deea3a4dfcb54044fef136997c9315e1805ecbe357fa3128d0a6912991fb6b4c7cba78786701a3f43acd933ab44c951869a1d68600a45e0d1653378fcbba4527b98c9b4c6ea0d3763f1fcedf3666f034b404c6a751a61831f75ac26307035a144144225ec682650c53ec3f8608ba13d63bfc327de54df7d80c64964536b923b31eb569f6768f3e8503b37af9c0859c479bc06172abe72cb4ae649111ce08c1ff86554352016f28e8ff0cd7319b35f0410351c87b4d385b08d9a98a218a46cb0b22e474de3ad5f72887d6392d5953fafdd41774b0df0bc747c67046267339a1e6adbd3340008408ea03ccf4cb2e50ef02a385c3e410e40bfa8de1cb7686f39837d763c0efd3fa235e0ff0fa746fc7753256417fa98fa3649311155c953d74d949a3f51dcc69754559de53323d5a7db309dac95631aa87e4abc88f5fd664c3ecdd357fda997e698ae7ba467b4c1c7eb5a1e5493df38f4f61f84fd0314dac48b5dc842560271cbb78fb714b56ef88889692156de59ab0265e1aa4502de74e0848392045ab027288937dc1e8744a1ddeb4a01158b28fe65aa6fa8e40092460f943a025a4968079e63f10d08d453004f72c34dd3be53b60429df9937a3c546aab2a9aea33cf4fc16d9380b4de660768c9290fcf38e185a5c33de2b711fe0d6a71d19ac8705152806ea9f17071bff7464a06d7041fbca07baae66eb74846f535b3e6e2992f83b1e7ab24254a10fa4f714c2a3e9c2936046724f70c24907e687ba4f2eb0873445ca30769f38e5713ad4fc3a46149a058041a2e6cdbcdee5e0f7f199e0b9ac16b0c924d8c58cae10ab0e5b964cac84f8b8d2c8640d89b3fcff94a461f948b1f963aa9cf945fea8669aee0c229363b4f08b8224de448a10375e7ebf3d4134d8ee64c9b541a98e7378ae133e421b1daf6ccaca6d196a9d1f9783f0463056d2dada4202fb9d0e61a5c20408a502df8a5ec4be8269218366b92f04c345e0c6d790099abbdc64ff1e6d201440f7e8165971cb0b49cb8459fe44a239cc08b7d47c5392f5715e4494195310bbe9206b96d5a29e2fc3aad23575501838d00074a8d2c4771be10a493e57b8f79e22b26f5e93461aad0ea42b4fecfd53284953d584d22100770d95e4c7ee35ebed7bb76a1c7027c2324676b4f3063d47d86e7f1aa511e7ce05988231970a7c2ba8c5f6f1b41905ea67cf19e471a3a965890a47ef03c2d883e5f874fe450c896b33ec0bf7976d60ac926de0d63a675461ba622ba0bcc2b581c722d67a7c29cd440cf649ffcaedca3bf90d47f00e328470eefa420c15630b4904b1531b851f04c4594bdba04ebb66aa0337090b120b64ca9cd88402db21d051468a49e8d8a82c18279d5caf121da5e9a4ad21be0f44114ba504d57b7a1ab431e223d303607875895417a742c8fa077c815b1bcded8819f566bb7d6a7de11f1aa5ce379bef3e59b3288852c3b27c81282d200ae9d2760b7e4e48d56c0df1c04b16b3e7ec268dc36dc9a4ebf4d28860396ad3417410390e16b28498d106a3854cfa493105cbfa223cbc4d1eec8ae70db1d5c046e91d1b9eeb8f0404552b470140f8d2716c4922b35e5cadccfbc8c65648da5837f5c09e147fe2fe2b3ab81e91a666d2d4700f1fe88f36b6ac71b546c845c37a19a4375b1fbe4c0e802aa976f48b052de61d8cac532f8f3a809ea8aa6bc42bcd1560a5490c04590dbdd4e900b4da5490305f09ba620fa8a8fb276680226be36b688e72f8df7a86e6da9dd3eafc0aa369fedb4c82bccf5ee356e08919877efc5f3d4da070000989aa480e2593c4597f7ce82a2f935a2dfe1bce5ce4cca5dd9d0eefcb02985d5e866e79199b52762be4098509f84f962fbf3620ebc58fbccb94d24841da6b300d29d26cb061261b55bac917e58d6359b9ffe2f03fa6b931b510a52b668b2c126b0cbcb1b7bf5f6e2992e0097540c6132d0e316352f86161be4facfdc1494675dba7b07351cde9d6cd56704d0fe3f679f1fb9a5847badfe0d3ecdd87d7864c57c0eda5c15183ad14ddee55abb0bea376b87432f03443af515c4a2f0257b13611ec39c7198451813e41cca0bb5a6d3ea44ff064f5453259bd473835766ab65e2c2c71d459b7fa2c11e99ec9e5d4b8403cdc60d0d6a57bae26f517eb69fd0dc0f3abb9a0ef6c5394628c204f7ab25cb5446945654a96c98c4dc79088880a25845df6f6822ea98ec52dec57e6f7b8632ea084fbd31d8b27313c2ac915c7944e198b4b3494a1ab0679b1aeef67e5a8ba5ff48414d11535ba78929cb0d687057da768c0757d4d6e20b5d3d77358410a94d4ef3ae36f70743440879b59adc9ebfb5c345175d3ad7144b8ac78722789145f0ca44f8083a545da2e23419097e45d38e21d3c86947b6eeb302ceb2d1de353c1a879140dfc825c38915efa9e254ec8cc4d9ef5cc88981b8b54e05a3ecb8b5b8a64846e8a06c2e25aa7ca08aa04967be871be874e1b9fad63c3f0241a1cb5857aaedd62d31e460f0ec261e563b86e1d2fc7fe88dae10b702c70392c12fdf8e69950f072e64a4f9816bf688e5935a01ffb68b99d66f33a33a77e669267c0d781c4979406aff1b98529a1210157c0657ab14299376bd660f176234bef84b7e104170ad8ea2e8b853ab49df8ae0e2cb58618ca598e2e6cef4ac97ec2121998f0a698c7d556dc43da323ac69370e663134392f22365995c791bc6aa6c6b94eea7c22b817bf387a6cf62f10174415aba69638f8f09de11fd44066be583de0aa88d61c092ac0d1f76c412282ce53d8058846e7fe41385c0cfa441aba6caf1da97aa8f9edf7a9d372fdb808cfd0330072c9cc491f0402c1f0d5880cc31752078e7048a726273aa21a6634a8d44a7ed01a1e43bc1c26fbb18946fd9bc1390503b0f692cc0a68072bbdb254f2f8ddc734b2555ba2cab4d2a49ffdea1294501252f14901d5e9fb8aa026c387c8d54b59ed7ee2b9defe0b405daf9a9a3b14b9acfcb4d952dcafe1f0a08427bec9f9d2853caeeb4eed51aa6928b1df7d8cf272a18ed78df024b6d23aee378f3b8d71746529a91a3263af6cecbe8faed590768b2fb57ee2b867243772f38b6e7a05cf2c535815c72f5ebb6dcb0983941d5dcb2b063b9306323c384131ebf3722fe7f0e8234a481bdfb192953118a6ce4e4d7fbf45885c15319335f1ef6e54133e8923332149fa48395dbc330f070d4911039396575679040ebc1364fc0bfb45322beef8305b86d444d6c8f9efa4e9d054e7aba2fd50ae4f5b5e44ae67db7aae0a87b0b0e2e8579c8257a5fac4cfb53e6a0940fe80b4ec670d02ea119c7210ce23958e35dab39c590889f0d26f6c59219ac308d78dfbb8d63963cbd5387142108a8762320fe78395ac4e5b976f9fb03b2a85cd8c93b51c3d54e4fc59d8cdccaa60e9837a5735e9d98da7b04fa8a922dac9b273db9be13622367bdcf0d6ecda280170a286a1abbcd68dcc91b7ae2f5a9a85dd398e259fd626099f0b4910b3c1d640663c550be806ec68bee2d02417b9e71fc6d41109bdda53846b2ee803f5564af1fbb7b7ceacba914f60b66b4b8436e5d0a82fe9ed6f34766af2757c6b89740379221bd7ac03fd103d07acb0461bdf3cacf0842bd9dbe35cf14d0089cae6102bf3d6b5fe7b02d8f436599f7d0b73d6bfc9c5f360cd8c630095704f4fcd36cc6d473ada74fef27db8b12d06edd28d4799dae6ace03c6923e4002eb02b7489d28eca6f0e86a7a81afc92568ac786c2b840ab4cc06735bfdd1661b7b663c22c51042d226294c0460a78df1f98cefd78cab6bdf53996cd497eeaae77a23bf0cf6da9a39ffecdc819c3f00035861c4e8586756315294f8355850eb23cae8157325719647fafbecad38a24135a497571c1923f6332d9dee4e276f6111e911cbf5ba7f475903b393bb3d70db634d81ba793a32cda6787e66c4d8e72f97498295fd6f2b0eba0d58341033663d425604186ef1d9161444d221240092f4c7549de9b398e0e249cd9a87621f7c30e84e331a271b55f797396fb86d8180a886c4b8feb5f871448ecf914a9c7d49c5e52a35e57db80de71dad031ca78f78b75c49103f8ced27ac5c9dfdd3cc33e67bbc9279fcf5e5a277675120bd756f7755bd705f1a30171c3c75cfda34f8d5c606d07b17b33786bbc0e6e20e349adae187aca3035410e46ed4b4b2a13496aa286749f4911a74af0076dab778cc881effd53cc0abf8e909611fcc547383607eb315d0ed31d20086d819e310c4373e711df0910b422423e6cf328e6ad3113cebc049ec16e39c5e13671a7e86cd61a72d50e889224ae0781bba49c7dee289129231b3f8a2b4658ba71788d242efa23182a4003e06f70f447c55df89e99580b182d71ee2e466df65521add5f8aee26550747b2f3c6ce627f8bba75b302a64a74069686a3fd89713214557bd77d6e683de3e3f8fd4cf0fe7cbdef9008db17d35c78934932175d81fd80a7f6b49f5b8b9201f2fb5bb52f286e0894dfd2b738d0eaf4b2ecffb54106479c03a88babccb30b28df2d1bc567eb100e5b2f6e8e21fd5c6655f4580b803c389a721d4f82c677d6c4fa2b424cabe9a7ad8ba777b321f34e37e8254de94918146d1415dbd2d7df8141d4ce913719649720c9ba301c6cc897e5ff0ffa2dfb19a0df529e8617c7a7a92b86a7c40fc5e09338bda11a5b534efde62d6430faf72348df61fbac6cc727e1637d558ed0c8378afd3d5f83de3f9cead3d3d9a4c55e03186862890d17c7e3b810f3e8f7f4a06c99d4a963e1031e9953d5d2bb007571479cb25950fe21697b235b363dc0368386e06d230f792fb18eaba411365ef1555fe055d403d4dafc4bd3ff7d5aadc001011ade72f1b44f16bd9b0e32eb498edf4633b3f02c19327fa6526b9d39a1b8a406feb8e082781cf6693054fec44741aae5a32de578dc71aac98cd52da24d783b1d195046ceab3d6692abbd40a6bdcc4991cf5a14e2f898709752b58da5959cf3792f309989d5a607d0b55748b549a8ea50eb42e1b09c4e40f793896d9bb30d820c0e1fa41751375c5e41c182c0ac551a4a8f93af88688317eb6dedbb6a24ecf3d03ca9ef2e502fe0279694894e42b0b2d8be6317206048057e0df8d464d4e6f981f9e7aaf0f3d028f4cf786adfffdb910e7000ff17faae64c5b6b4be6bed4b65e95356fc113fd0ba8c0d551f3ee0849c0f2df7e6055258d1e3015fa44f3d460099dc46355ded7a6badceab1e504f149f666335abd27c92657bc4e2c126b217e14ed1ee39a33ecf8cf3acf8e241272b29e62b5434b80fe685244d144dfc014840279392bdfe43f4450732101e5fc99afa289dc156fb6df6b8f8a4aeb89c5bece4b7aa6439f7aa31695b9c05928d5ae6934b1532d92535a25912f98474547ab1940a5f4672503ebe3bad5df97db5a73339baa6802cf39a27bf23233becd51d483ec1f80b4b274b8a765613561309437df5184d40cfcaf127ff71696b631a856c2559f9881d474cdd00ad540d08ce92c0009a514c763108bb87c22056202ed", 0x1000, 0x796c}, {&(0x7f0000001380)="2abd428ff66d46eaec8c542a87df708abff7aba9e0fa8cc170c6b4769d381e5bcc6d52959149b5919024edf3275a56e13cec2841644ff71394b0ca98cd59b2bc941a7adc1ac235f8df12b4f27d4a83aa05ee326b277aab20a434e63ade7c16530d86e4aacfd5698207d779692d9403018f6bf7acc2fcaac150700b30b3a74b453f6d799f22b3b23286b9a80433a29d7cbc7294f44360eed9203f5b551322c0b8967f858cba62597373844bf4ec1e987b8827babbb3de240531aed4ec820f0ca5ad073e2aaa166ea0e1c1cfe43bfcc11c91ba0fbb8a636e72448d6ca95610908b4c8b220acc37fbd009ceb38b9959dc4a426b1a8bbdc14dc1eb9f553d7685519c993a326cc83fa104bc7e6b60a8c9b395b50673e4ddc5ab49b58b7e3a2c86e2e9f3078c8fd5ec2717a8a138bb7b1e8fff3b5ab4a0e400e1d4300ad3fc3029eaa2d8c399283f1e60de13a3a24943b4a50e28e00038b0d021cb2d4fd4c7ef89f2438056e12074703b9dff23953b606b9a476807cad87e2fdf07466a2c5741d34fe0eb4050fc9d0cf310f5ab2e33fadaff07946c80e4c0a1c8a0506a54dcf02b71d84c4b97a667f6fe508f638adc537c74048adb5e45a03e65d3ac9f633033316e0c9d890db7546281aee1461d8bcbee9f96f0989103e87861e8462460498752917addeae2e569f3981fc6721fbf037ca1bf2393d16ab6e578a0c571f3b7767d14b12ad94775fff05cf729ed6e8fdff17784d0580883414c2cc0857030df184f2f15cb1636071cbd162f1dc1872e4cac7ef980aa3934e59741c7b02976ad884b2865400ce79dcde50a86e8f76de388e8a60ca73bc587259be0a451edc33a7e228bcfcb6a6ff7a6f7bb0e57827a5ba75f13b13b2b00c21b0032ab64b49a32747fc767b4bb9c5c2234c16f2b345e53b297b58bcc1481b54b941f87c1bf44fb8cad9693210f489aa6f599a8b2055cd22674d676c67fb6be211216a384759e68586acf828a6f852e1a0ac06caa250891c43732fd779435cfb4fe24d11fed76d1331733df046938b3b79babe8a2ef2993eb25ce4eed71df264557cdb85f22c733e2c434383fa91f8bcd0f58eb251166e0d50ff99cd9e595fb5323f68da6fed9f19feb97258c0e82b399afec0d8254546cdbda6cc0cfdad1c06b8a305bbd8a6bde3edc37ca84a2b5056ce0684b9564b40f0664966ad15b97a45e1ba6f6263e35e469da854047daa78dc7c69f9d22bd4e6b0332b840d53f4f4dbc5241719ad5bca6e2894906b9c8bad5ae4318db4d9d701550047f02c1695c805d0308f17afe308e7d9d398e4e663cc1d3ac72332a630987b032bbbe742247f86bc8c0c7f886cd4c5b19b856cca8a02a2f5db016c719b1ffd4f3b137895547045dfa1107d7d67d4a6513171e3ec890d2dba70f197c4d2071ab321ec84b844df8547f3cfc52f7cb1abf5cfd1b998418461c44a75c1ce9fe1baf57c9bf139eeec0c932e3058a88419a11441b9625e79cea5dd4d1d7d3c389a5df3e8288be1d126b2cfb983232e39ddcbe6d5549abb2bf3ab403aaf6cddd4a6f5ae09c5b5e560c6beae4812dbc891c2b8c1a16c14418d09795ba13cfe395cd15d6e15f5698505ee9d9f387250d539c67bb324783570c476b0ad3815f32210409526082c9b0f3fda06cef0ac805c34af8617869c00fa9062965688af1e9e8e2b97724aae1c914ee625cb450c421ed9e88a93b018629e419eef026d7174972e274ab6ecaf481cc6abb2a620814cb624c257e9b5b66f225b26a381e693c3c352a30e11a9fe432c07ddc66fb2fd0d9c048ad1e42c640d7931ff4eeee27ee01aec9f28e95d3c49a4f43395833e82cd2ba5257857fd9532e99cc09ca8a9f8d2b931a06d14441922a5bb650e982a6f1c54a94bcbd131d86f1f6d1ca06d7e33b225c7789018dbb43bb8ad8049281bc091895102c348f18dc047ee1d97b43cfa63f2269f23a85b6f0a6da1423ba8b48b9cebd866c016d06ec651a03f899c501097962bf784228f2175d28cdb2f53b2e3ee99e0043e68a2b076c65f86981d53a9f2cbad3505df8e33a1ba64d65450c5eb02f1ecc4b94fd64f1bc71a1b528fc5173816f59a1ba617cd7c67831d640319771ed0618c5fdf57584bc3ca219fe423d56b13b789d2afe9e1dcf4fa60f6d400fe43b6cc4a8ce1ba9ee4a6f815188d92e5934e347f9dfd9003a621f8c8abdafb51f75cefa250b47eca06d3b7a72960849af4683b9264b36b662a9769e2a03db927664a9dd7f1ae862805abb2e92f8f89c223ee5bb40eedbdc690b3fef264942d33532ed7636e5ffa855c8d3d0f5493aded8f317b0c083fd4e2c7af23eab0c5e485a2f81bd7b36561cdbd743c471f88c631c7d576366ab83f6c409778630f332f834ec173f7ee698729dc91d6381b6a031fc1c340e5b2383e5895d79d1e34d0303f72849e5606a74b92853eb3ee22058dc4145fc33a32cf353fc421a5b7ba9af215fc61ed615d402e5d3e40de33ca9c290ca92f10f6b2580bf2677b9dd0e09090b421afb34d91693beadc6d6790c78f731f9cc1d263ccc78fc730238d1de05d89e4f47d26bf135e160291e7b0e7cb094c6ff925843a694d63b6d6dd8f6a5d59f1d141293a938c2a69ca9885ce0d6486d18ceac8fd9be9abacd9540d898958e27c875e28793da82b41bb3fc2a33dd147131d4e3fce005ccb9c343a50b0d28283167b092456e353f5d517dc647fc0836abec73ed49878ebf78e847378e94adf49e7d286712142079c80ae7bbdb418d07d66d1a9063a0410ba2db2d28a222f60372a949912d6042eb3c5fea073f534c261ca9421a923b20e620656002670ff86e6812aaffcc69341033dfb8174612f441aab89ac28697193dc61942fcb1c0d877d8017a699335f5f550882c8c70225ee443a838fced4c92d2f9ced954133bbe19d6a861179969ba39306ab8e5a4eefada574b20bfa1732653b1b926a250514fae4805b406aa1d419b095af8aa0ff1f5e812f6ce508a30d33760c36cf82f6b4d175851533b7037a7d943a81705c229206fbc81fc592a8073b383ef7ed389b5f18cca91a7a3dd22eb4cb859307e1f7ea43172e1ad334c6cb96cf6bffaf36471ffe4c822511dcac9a27721f8430265218ca590c0bb0e235203fb55311527aa018bd0da0ba008069a8640b4f7a401f8976b30e14a9d6042ede43f3a69dadc46ea5faa6f76d9c3d70d717602fc3ca3c6d90785d1858f02623214b807f7e9309d7605263adea5b201047db1af64e25f60327679a9d51dae77ee5879dbdae5a55d537061e73bd181e24eb6068c2122c592f65b17f518ee5d4b3c96ae8d2dacd3401f97a9fcb6123f95b6472838849d34858cfb113f1298a6151643c15b30d2b2871efafef35510ca84644667f60e8942713ce44549511e7161ad0320d6b7ab50d7a02ff90d0cc8cec51cb55514ad0df9e106658553ca2300e784b6c18826c60875c453444e87f341dc852e5f08a04857d33aba6cfc97cfe0f689635c44b6391b9bfaafb46e06a342a1fdd4b817092e3f5b8716fd02afef9de80c673f04f79caf0e21c09c9791dde3cf782d4190b72f21d84f210b97e364234b65cce95f4934cb3773cea603f9eca11682acddc2eeb2c5722a7edb94546e0952420f208ddd8d84825635e922f2674a0fbad995d8c5e225f9aa7a8d0b295563bc0334d76bec238ad58b65c429a017bac7804dc98e4645f3e535614262977898d6aff40e427a804ef45e04d413b97c2bdb0b0c944987bc42d5e5023ea72c52fe1617364035cf629d7d3055baeeaa69b8da1ce6348a8f9c503ed17a86452dcb6942eb6f660e3b4f5e4b30b4ae8a07d0ce1e2820c01c80d0d5fa6bac653a1dd77d71b0bc8f23759877c3215213bd50d240179e63a7045bbcfb45bb6a6c356a5fcec314b157a795dcb7f44c14e08ea953cdbfd4581f983476bc2db353327e45c5294f89e423018baa9393d833ea2ee8002fecedddede2a34c99ecc4195e67bf080ff41a7e010fd7165dc6fdfb58e7345d75a3d882c41731de851ced871733c053a938f4f913feb2a228105854e903e5ed2d702e7a36d4a890ea64dd113649b9a27aecdb3854c17776e369ea5b9b2007497a9d5460a37324dae1816bd7ada93068f31a3485e76e2f2c1a954547e97a79ad344ccd1ec2615895f594d9474ad3dc08b4f571ca73623762dc70d67a773d586c61208a14a7ebac6fd4ea4742f3c122aee6e461e97bf0ee3257f3f56aa0bb4ae85ce1b817b29dacb70ab3a7679b64dcc134ed1bbf3a5eb0ac939c74b57778fe3925ea7869c504b58fbdbe5ad167aab2aa3b517595e1455f3deb8080f7a2b97186a2af7ee8edc44ae27dce4d443081fdc8f7b84f4921a41bbee7949c7887650b02a90cc8d2960b3d1771e4dcfbfd08d6d146810a1886bcb3e0eda7dc8a1ea810a3232165368aca2dd47b773164ebcd680838923d17da7f0873c85e32831530355bb9fc99b9fb43743ce80ee7c6eff08f109bbdad74ee8100a95c37b754faa0107b77adf4c95dad505425c40fd25313cfdc6a3880a48aaf85e36a80f99d71eaea96cf34433a58b9a72a4811d118dd0eb6f04310149957226cfb6332ef1b55ad3d4e89f2f0f53302ac31083df63311cc0d49ff7318f84d82004a343b09615546ce949c51d35049cafa00ea6417fbfba544687c1159df78005313dbee73085c6f7b81c8637135b262163438562de631c090eff8526c0d0c625dc1a59e20600280543de0961bf74e7d601703a3fe08aef2c5d9c6bebd1f7a2ce7f50cbef8bd8aa65ca3901ada2ab0bb326f0ea0fa0e08646e3af2ac0689381675c06753ab1b92d4cd97f425702bfa7dcca1608d7791ead438444fd37b9ac8d25ad103e60940ae244d04b4743f718b206086c64abece87baf3b9b46ca707c7105079647e19f9d63800fc4d98b2b778323f6f4848922fe62a8d6483ab6d98fcd0308a93336d6c38e457318e9771b80d7cfd4d7dce099cc486153068be77d864622fc7c64d84e0ad8a7a4295cc91da59a618f5de0d825335324e82890d1c47b2802cd770c0df8e395312a588072601cb256f27fe223066ca7f1d62652a4dec26a1956e282dc1cea17ca8edd0b06a1faab91968754c05bbc5de41892bfb555555ff29f3b378587681ac2ceac43f2882242fbca5b4678f60683c5197f506b0bb700ff91ef08e979dc879ea10ea7095f44e82f8f28fb598dc9d909cc54f446f91cf153bb336fc06fff7f6d7e25117a612a606eacbb6e0e2064984f59385be8cc62d3f014d2ea3d4dd77985d17db1aa231d2f5e5cbf095e305c63e40398f8ab08c3781a608cd7acba7601c8646611c6568db710d19987bfa5d5cc7f5f3ee3b0b5f390e265a853423033cd4028dde5d87d586b4b7558bd61fd7f37d67e47a16711b89df898375d7abf43e1fc91eb7cc4874015aab75e942d9bc9cef4455b59ca07d233720d35aed3d851407cda754562080efd2d29dab1e60d29aafc5a760e8a8b7a2aa034ea37eae5b029372dddaff4c9e1f50ff1458ca74531bc514a9fb1e1ea18377439793276feccfe3bd19fa663c621d864431751e75c95d5969e262567ea156ab439e91af159a5cf1ce7c5b6b3bbd0e302d3f563504b4f1bccf9da00e37203e8dfcf689ae9e6cada52886ad5fe93d8260af0fee29b2dd42e5d350c3e1a4da4747b54c1f9cb175d994d5355effb5aa0a03220695450cb67b9860d51addb72e3b36421100a1bca881aacca9672ead97809a94eca44303aabe308eb6f986654ee5d62d1cd4a4cff510f47ab57c2dceea4ec94ed1", 0x1000}, {&(0x7f0000002380)="4cca2464444532e53fa857ae11a1f420d2ed2755adf920849ea26389020c29383665cc2f84e31f9a99ea30fe0e5d15f15b74f2c3025dbaa0e15c25d2e38d5016fbebf747fe1f4c2770d53758ada72e6a9db0211fe9c6f39f41bac38e396bed46234448536204b2f56d5e36ec164605463a93cc76295a7013b9eb976bdb799e7bf978b0c1", 0x84, 0x6}, {&(0x7f0000002440)="ab86611ea794dcc8915b50fb33b05d190f06a8fe3d1e8d5e1b594c7c7ea09e85c67a572cf6bec058d5f25c403a4401b7794e067559257acd9185bf46b659039b4403ac537bb2edc0ef5e352502f8f1e2a8052d773d5168f3f5dad681e7c28f79217b431b476ad09bb73743caa11eb2b7aa9634502d0a3f2cba056bf5d11c4c97ae67ada512e669308d40b5534b7dbaa2b40ad996e70f0ef8878ebb1f7b09d3c567c6d70eb71694eda1b5399b7425", 0xae, 0x122}], 0x40, &(0x7f0000002580)={[{@gid}, {@map_off}, {@block={'block', 0x3d, 0x200}}, {@sbsector}, {@mode}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x7}}], [{@dont_hash}, {@uid_lt={'uid<', 0xee01}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, '-%'}}, {@audit}]})
openat(r2, &(0x7f00000001c0)='./file1\x00', 0x900, 0x100)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

04:24:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\r', 0x292e9)

04:24:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17, 0xfffffffffffffffc}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r2}, '.\x00'})
openat(r3, &(0x7f0000000040)='./file0\x00', 0x80900, 0x42)

04:24:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:24:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x0, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:24:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x202022, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

04:24:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000002540)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x3a2f}}, './file1\x00'})
[ 2326.296021] loop6: detected capacity change from 0 to 264192
[ 2326.301183] loop0: detected capacity change from 0 to 40
io_submit(0x0, 0x9, &(0x7f00000025c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x2ab2, r0, &(0x7f0000000300)="98bd84aeb658698c4d8180cbb1437bccd8dcfaf59d251a347d39959fb1a49fd1b0aa835914c88504f7cdaac282dc127b0fa81482ee747097f7fb077bfea6e03a39d940bb69a4d7a54ff9527c", 0x4c, 0x3, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffffff, &(0x7f0000000b00)="1b3327a566bee178f13eb63ef07f66f1e71934da707609d92be6ac2ada1fff66b40b1deaabf4154e2f401b50d88d9daa0e63b9c9729e2ea2a24e5515b95d8bc57af4dc065e364640cb8d752858a9847fcf7e3df77f13d6b4f28028c49306", 0x5e, 0x788e}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000001e00)="89aaa5a40f1027a8518248dfe21202f96b3799267557690f4d66b0fa1e6484e70f982f6b82d447446fbecf868841277eb106c6f891876f240b290f6745de399fee7fb2eb716c6162", 0x48, 0x100000000, 0x0, 0x3}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x6948, 0xffffffffffffffff, &(0x7f0000001ec0)="0fd998729deb772464662068957d85eef1e6adc7505d531b3a6e3aad0d1a7c883eec49a30a1c0d21065ef2e71e0cd384dd0878937b55a2f107fa438293d4ce4f6db206abfce8ea97a24f73d9e81a4fd4d3fef3e60839b4f091f59cf2dc6523f63cad770c7027ab5cd6121f6876d057a3765d7c5b4bcd2eb16048f2e20628f6fef9f0dcc163e778a6b2bef93843cc16a672b1ff6799edb66bb443b624fa871a19fb6a93a1ba99ec78de8a899dd865c220069ac691ad58a9aa1d8116fecff331455bc88e91490123464a84c11a5417ce9a14", 0xd1, 0x8af3, 0x0, 0x3, r3}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x1, 0x2, r2, &(0x7f0000002000)="31ca39ded0ec60b2260f48f9dbde2ed8bf963820d34306a00b5215d747f841cd71f34ee509fe6645f32889ec8c5efedd06bed3fe53ada29c7e570524b070b5b49344d6b3952d08e62da3357a859fd926e205cb6997c60187a5258504e9dbc953e6d2ec1ab7ae4fd08a054ad00ae02a0c8bfb37758dc73431b8f31d756084835ec045cf4881d20cb850eea9129295784909b3ab96f1b14e1c2116a07a35fa3bf4291aeacfac7912033aa44f8e145033264c7aba8ddb3270799d4e33debbac4f56032ffe2922d9e418e9d9a5", 0xcb, 0x7b, 0x0, 0x1}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0xf832, 0xffffffffffffffff, &(0x7f0000002180)="0fc43659916f58f6f9c7fa", 0xb, 0x3, 0x0, 0x1}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f0000002240)="dc6f917a339ded9504cafeb4379e2a6162e7afd3c5b1db1482c9336746aac01ac7d98f29024b957a1834f515996088a17c15b06286d4b57337a6b7cf7cef19b22b400c07f9d18c15cd7d6c534a61fedb24d9c9a91af9a64504667eb0632fb7f313064014ec609b31f9eef3f11de7224fe0257de2ee385c4eebce9da33ea2971b039e558f1e95403d541d820091c06f47a49bf3056a8fa496f578632c0ad3d3b83ede5758194ec530ccef04415d2f171f27ffc5cf6d4afce5a4d54c3bbb101b95be679e8c58", 0xc5, 0x100, 0x0, 0x1}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x2, 0x71b5, r1, &(0x7f0000002380)="9bfb990307aa7794a0b012b19663b5104a89283034054188fff86dd59087fd1c5f76a6323235623d8f1bb2334e1abf3235fd77d942454acb15635c6bc9a7b86f010ad9fb34086127b815f895ada015d53f691a4e23aa71cbc4766fff13171fa5879c0006a4c12b745515650ee6ad3ed9009ae0ae2bca00f7e616164631858dbc6b9a67ca62284300158ed473a8abb835c176ae26d575e5e801ceb6e753e9830fc4a15303efa89fcc321635494c4bdf2682ba31bd16cba6eed98ffccbce3a9340784aa749180b9adb856d364508f96580c9966392134375031d4debccbd7afdde7c380b8b3d6047594149b5", 0xeb, 0x4, 0x0, 0x1}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x7, 0x4, r4, &(0x7f00000024c0)="9734c779838e014909767d507ee4ee971699e0b7c63d669267e35b8a1a3c35cab6b4da2e16b04d3ac348d93019a342110c25d6b77a97d4f09328c34ed54126a2d4547aef749dbb99800db9022086999252345652da2676e4f7", 0x59, 0x0, 0x0, 0x2, r5}])
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:24:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x0, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:24:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2326.394204] syz-executor.0: attempt to access beyond end of device
[ 2326.394204] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2326.395843] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2326.441988] nfs4: Unknown parameter '#&:`+]'
[ 2326.467414] loop2: detected capacity change from 0 to 40
[ 2326.468270] loop6: detected capacity change from 0 to 264192
[ 2326.507214] loop1: detected capacity change from 0 to 40
04:24:16 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file1\x00', 0x111442, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x194, 0x4}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x6, 0x101}}, './file1/file0\x00'})

04:24:16 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000000)='./file1\x00', 0x18002, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)

[ 2326.592705] nfs4: Unknown parameter '#&:`+]'
04:24:16 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="0e", 0x292e9)

04:24:16 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x40980, 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

[ 2326.805365] syz-executor.2: attempt to access beyond end of device
[ 2326.805365] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2326.807389] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2326.841886] loop0: detected capacity change from 0 to 40
04:24:16 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x7})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x7fff, 0xa296})
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x10c)
write(r2, &(0x7f0000000080)="01", 0x292e9)
write(0xffffffffffffffff, &(0x7f0000000240)="76ace2ad5d6b03a70ecedcd2b64ee67d998948974f78d30a0620488f14fd6a3245d8e358ee44ca0838e33698968b43473d0d278ea838fdcbaca6680b329dd9e2e2a500ab9db8d69bcd5348edbc0b3b2f53804189ffe55bf5707f2b26d3c79dff5d35ae367b18eec471b4812a88e8ff2e1659f3b9a9a41bbcc1558b5a9caa803400ab2128c3b38b52eeac0cdc8d005430f7c2ceebb4df5ecffb070bb6a596d8c8655f8aacc24c9d48224cf80bf52ed89678d34743d948d88bb33877eaf46922031abb7ad935b80eb321b79a8d53c03a79b86b6a1178ef1d0fb75bfe006933f4c24fa84c67a15425ac08", 0xe9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r3, 0x0, 0xfffffdef)

04:24:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x0, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2326.928879] syz-executor.0: attempt to access beyond end of device
[ 2326.928879] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2326.930053] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2327.001999] loop2: detected capacity change from 0 to 40
[ 2327.017528] loop6: detected capacity change from 0 to 264192
[ 2327.106178] syz-executor.2: attempt to access beyond end of device
[ 2327.106178] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2327.108167] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2342.059061] loop1: detected capacity change from 0 to 40
04:24:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="0f", 0x292e9)

04:24:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:24:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x20840, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r2, r4, 0x0, 0xfffffdef)
r5 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0)
write(r5, &(0x7f0000000240)="a0c34fdc118d58935afce6bec32ccef391a9e560e39ee22d338c14867406e2a4f1f16700a5707ffc18700eec89f34a27bf5e9b3673c7d4552577a92bd5e58242fb5c53adbf340c4d1e8c8e1ac9270dcb001c85a5103e0618c8045b86f49c32528a88d146b4f8814db714f9eeb7d7eca927f2c1c80e3257981905bc747bfd568f70c60534df2083629ae7ee6b9f3de0d84c5475689711b9811da46a75bdb3e05e2a26e74421b8035291614c744d80296c5ddab62e976d22ac0f57cbf337c3a38a1f76ff1598654af8b01c9aa698753b3ae00b3b44b6951b293910276a9830fe9512eccdd4c2f6e22c08f7d0096ad37b198db28d086ac0486e85bda9e9acdd711239aa3c90f5e963f546ff5f23f1491505b08b563d6d135c920eef376181b63856101c58ceef3947333ec3e7d9bb3e0b83eb9502602d2eb3157894afe6efd33f7e7351d563c5cc04c3abd7585ad9ac165f27591b46b9585b46934627ede2a48ce9566e1e9924f483334ec32a897c14878ec9bdef1dfc5b51f20238650052cae6c17ebe2af7df5d1d39854b0964b288b71d565d026fb506e739428e6cd96863240bb908443cbf027b38e3c594285e0047a9b29bab63c5b0de2817f336d2f1ac445a2f8bd04dfda0aacbd1a94df6ab7f74eba272f35d3fdee5f1c52ffe64819e615dd62cf8083a4efa578dff1770a5a8bfe215dfce2117b0372ca0c92a2edf6f62f3173d15609ec47f7e08634e880e98b5a1bdd67986c529dde86de20d0fad424d136ce1b0804030e31002c82bf6446374397fc7d3c7785f213f0d71c82a860a75d25957f487dec52d125a67867b91ea0f31b0a0ba911b1039a1840b29c3d296f1b62377352dd412ecb5427905ea1ab1971e933ccf02370721b6c0624a9e8f5eb8788030bd958e7c576a621125eef39cf1a61f19f49dbeb3b243b12f76de4a34cab279aa0bc1a3c25305c6d0a83501752f25273fad547ac61b443d3e4b89c49053d13284e1605c47fd963d10e1eda9de566c4cf053de7f5438c3d08e1ec8f3020fe4b2a8a7d27dc24180d9b49b9ea26176aeb14b948f19f3d018fbf874d4238606e908fd24f0da1a02c88eed3e77af09dbc0cece6baccdc1718ed5d456854cb123d517bdec12eb10228e040888a584e87c2e1fa72567155c5a1c212a32c42743f986254d9b96be5b8c2937dd7a33fe02230284e75f5e472633b2cf0350325803fd48dbec30af7a7e057fa0e42f1a0ce89ba24279b5a24030a4faa479da87a15307a73beb0abf3b7f3a607aa83c06dd9ae2a40e8391ebc44192cffe12f715c2321b65f8f57dba6ac2765e1a098a4f8a6094f20b94f0c519ff08e64cedbd8bd98e5f859446d8d248fef9690767c8c89e4b1f1c8f22a2ddbbad3900cfa31034b7909fd42b77e7333b9d8ebe0ed9f2d150ab1f6542b4185dd865fc830f458e0302c76c2fb6f6885491952bb3de9020d3d46a30b984b460e9a1b94319bcc4bf2f24f4630a4b9e1b684c778c423822ca0205c09cc6480a1a2cf1d101e8bd036d0944e645525a17b05fb610b3e71b389ad86ce6260f66f46fb346f6872df3610c5aa261f63b3f9a47fe23c7a53c161e8c5fcb0ea4ba1f5573f6d957677361aef3dc5d5afc0883f3f9f5d32341a7c2d0701feb158c876e0fb3831f5dbe48d142d3c310526d3bfc020a70b0f154ec37858d89ffd163cb05b28698caa364fb6943cc5de67c17b76941c1c4d706b54a5f51d7d83d70adf2c1634810d96ab5bacc5105572657c49f4d4db7305913179c11f59204d1a936bfee1f14a6e7eee03fee85b83d051b5e990f4d76bc1f2c6bc253b87a8f7831ec946e634a031badda69f2291ae563273c623d6514bd309f4f802a9eb2690d7a60b0fb9f7d9bbd853b5cd057ebbe0514a44e6eefdd98ee3252db9c58a10f6bba94f79eefa6ca538629afe0900cbd5e73cf2e0c8ae449cd49be161a31d9bc647e21c409ab4614bf94567b106da4d810eee4bc770c675f07fce66c7cea5378c4d9881bb0a95a0f522d4062d1f5949762e49cb1d50aa572deab86f5264c76d1c63454f2225c615297e4a423ef88b7e68cfc1a3fb836620117d02305df985ed845821e59301ee402f47c005ac43ad9792b4518e8decc23848f14ca2f620858e2f209fcd322df387b72ebe216ae090a5436ec0f2eb46bd97f695e4cfb4879d5439d9a0e6a2d001290bb2813b7af1143541dd7b780db473593011516e1d0baf2b8318344cb85df42d06b699f1e243ad269f9ad4f8b27e2d2b9384c444a36c3283c69247ae703874cb6fdebb561212a5ba3d6d8ea4aee264438607f3a07400063e1288f2c53e36d73850210627bdada61feb1c7886c632413938c4cd68e9edb6fa998adb42cc69238593008e4a36fe9f4985e0a2ce2326008101f06155b9a6ccd017d89f302a544bdec6866d87a5732a61832bd6f948c695a841a3c21bb417be782f530b739942b2d3c597e4385b3d375bb32428aa14c2a14b7263523c32a3559c48eb8cc87f8915042e14e5c9b7235cc68355f44f8d52d4fe96dc6d81a9b3b920a259ab714e13a03a423cd59b53e15d6bcbfb55177abefc4ea967073730987e980c4caca79e424580efeb6cfe233d6121910f52292183c109ce38305b113b63fa313306c3dab3c88b9a7198c32d0ef002e58c7bd8a3479436ce268ad09199cbad4d5c26d58ae38295fe53ae82d315ae6c70964f26ab9f72aa42452918d198c436f791278830be0c0d118c8a9a7e5899975be3dfc231ba42a278b82e481fb11f86052f302cad2d92b5c9749b5f5eca72a2c744db8ff8c8a8d8b35277cf3ac30ef0b965481783fd37e1a1870b83128e554f871d9ec2f45fc8a34383febbf70074b3995bb5d3a4aa63966e56697f5b8bfccbca82a6aa2929e032eee684482e7e807929c8a5267553680e7ce12e9c7a253211f073fd96f4a443c1b7447d3394e9dee1c3edd0e829690f1b86696ca37ade20015c5ddb3a84507a8e723c8e631eb8bb904220cc8457151b88288c69ab3ba1e0a758f225f20a985bcf217f414d5aba6329ec86631eb8a4709fe95f5205d1a5cf0d8ab8c4348a0e4cb2a74fb1cb8e82313174a4e307749fbc8960dc470b6c7ebf63c1cc89ea066de9af81e5c13df6a0dc603993824ffaa685a281240e305ac57b5cf383c3ef0f116128bdbd150f6f6508852bba1a09b6cff10909c98a256cd0d2ea0d21fc0e59d53660b67effe560d988feca52505b3c27e55bb3d1de25ba8649faa44c19e909b53b7596dfac2326185c04a459c2c0fe64f8a6b95c7e29bb58e013a4f0c1eded1b0ba9a24efcd2b438ad61650bf796e9b77809599b7cc860cc358215ec87f5bacab4817ee895af56c07a78fce9264ab3a964a8a357f645867b7f4ee6466059e72c13b264860e036ef4d2830104637415bad29dfc071aa53ea8262f15419deddda4e31a06f086829e504ddb5a37605276cf8f2c9e143de4f8ffa3c230c6de049b45a98ab191376846c068f096d890649ddef974111aa8fe3ce6b3b1fca57c35978edd53c91c049fda2662b8a91a595ec291a76f7c6c4fe8150dc1891b7ad0b599397a335e22e25bbe3107da7b34ba3ccc65d257ed31096e4e0a60d4d29a2482158eda5e13e219ede6ca1c4f19e478c7069c6b04ea322f0aed98bb13597fd9bb89a74dbbf9311bb8ecca599988ed1845eb14fcbd30adc20f611978247ef3deebf6b26abb9d485773d8e58fdeedcbc03c902e6122d7e867f12b439c350b93834f6493dc539f379014c416e4a9178b6ce5ad4f2a8093932288289116c306feab6818597c89e2693abf8f0d99ea0ce629c756dcc0797373a40160ce61aa392561e4b2f15e01592c775c9db48ff5e30d5b2529a6ddc2172b3c730a2777c1e2cccaaafcf99e1af3626803a89000a0486fc434da082ec6b32b11e645a923ed716d5ee36d0f545eaf3e27de7a464f362e0e72454555b2db1f953e4eca7d94d9a7051eb09aa605643dbe6ef01f2a6a9a7864da1f38ab215b82222274a352170fd2edc377e877b528c20f319e6ff62de6cd6389807b8aa0477573568889cfb466cb74eb722b1185a32c209322d8ea084286cf5f0b03dc1e2e8d7b7e020a12d0341b07a4c9e1db9407f2841b9e197758409ece5481b46d4a95a01d515b7db42a89a9d97959f0a8f8dccf8075d6c0d5f27bcefe95952f9062d6255f31ab8bc49fafd694ebe4920b5e4f6219130ad1db375e836f60258e17aa01695f720dc81d03663c535732513d694258252e9b77dcba78d65630d055cf978a121e0796abdecf25e1d64da1e9cd2235c749bda03683748e14d1bfc5a2ec3bf272ed1320ce1e18800d0c030d9afee0746c56fd751f336e3ba23769bc8f842a268ed6ac9be6d2ec574ff4aa61ae05fefa6786c1fc9b161ac02a3c4c96199fd7318501f756ac217f4951ae1922c9f5cdfe7a67cf04b9919a3f9b75a1b7d7fd6972e4258ed12d49beeadcab516489de3a3200a75964dc1661fa1883cebb665cd08e3a218ef926d49ab1b06879ee28f21933c6bbc64e15c75da366c22f547efd56297a919fd6e048fa617f9dda8c478a5c002e7cd30a810b937d7b96c18c03032e3637ca1a3e4e6e0032e206bec4c96a6b3938f9744614acb62af19938f4817bcdfcd57aad573c8eafb17771ce5929d24979f35ccd86a445b8dc1c1bada47eba46a5a96b4b1e6ea83dbda386c672c700fd951efa39b0d54e03fb8d68212cb468b0f79fa8ca07ac870550f87cd266a61daf2d88e6da553bf78324c714297479dcdcb215796d0795cef38c2d791fa9a56dee767face061aceb67ad47d3f36e887cc0dd93a8a699724e6b3134aa364c6ded5197214325ae0b97e4275fb6ca8a0fbb39bc54232c0cb6f31644d7dc0bb7232b85a29d7bbfeeff44bb681549f8f568c9499ea71d34401dca2e292852344a75f4a0725a0db478c0f88b8130cea8ee5865a8e97b9c7edd2d513fbe751060b357a70b20ba435823b5a6aeaef14688633204000b468a54e1fa3f266ff46af339ad8a589d7d5b517e2d2efa7eb00d06edf99cb86ed934f8494b33e59f60f7f03fbfdcf9a8bebc661ce9a5f6b11d03bc448a610256f490f7f1cde8b4405ed4aa726a2dab091cce4431e4670fdba7394d38264da7c13b808d8623fb1d750b04b613419c0293fbd329a39b1a4d186ded3ec295d150616392cdae8fb56b74a94ae18e5d68f13d34912dc5dcd08a1d78ae56b5d09803e07dddef0c80e7ff242bfa2868900ea5a133162fb712c1b34071246215470a5d0aa484c25c106e8e1d063e6cb2eb36c7c3f67621ede1a809b9aeda0a1c47df6784a7e8eee1b28fd3683c923332cc8297b990c4f14af39f4b583243dbc70038254542394c8ef840586f077b34b1654b47c6c70cd87ab957e29d2223cf622703a3c32f1d3241b727907a0c8a895e78459cd6dbac4f7944eeb1612632740332de032172c8fab48af9d8e8c7dbd875bef59a3b5068d71cae8403b5e997d92bfe281a8083ca1570b08428774d7592771a6fc7ab1df91721cbecc72980a8b934cd8831bbff46e1985bc8c7e09f245005c383767f5b9d43a2fc83b0f8dcda77a5e71e6090d5fe98da4ce221728a4b050cd37fb58cc758331b04041cb648457e92356cb0cb1aa01db576065dd0b990de07733580dcb794f66f47880bd5e0f9acf53fbc045b6cad0f943c5ce93e63d52677f9a97698c7cd86fa79a6b7231ef71c32edf64eebdcbcc1b84e19d423244dfafee285dac2c0f2283bd3a3a87da900609d7abee9fee40b5ce644d7711aef667e355", 0x1000)
r6 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000001540)={<r7=>0x0, 0x0, 0xd1c5, 0x1})
ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000001940)={{r6}, {@val={r7}, @max}})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000014c0)={{'\x00', 0x1}, {0xb}, 0x40, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file2\x00', &(0x7f0000001240)="03f0a89bf00e0b5a55ad14bd4e40810dcc176b646b597ebd54842afbaf2d87454538c13c2de90d006425255b17c382180e86911b730f0786553db3e5289e4f44b78ea66c5ea6b00539f118ba0c40fcd774cd1c392278d5f1a308d314cbdd8bbd7832b5a8b30f11d44ee5716217927cafe58b03e47f0bc9e4453b8dfc32ebbcdf85363e8d396e46f75337614b2fca510c2780a6e30e948ec9a62ec74b66a61ecca9af70ffd89f476a6da07d278cad31d4", 0xb0, 0x0, &(0x7f0000001300)={0x2, 0x8b, {0x1, 0xc, 0x20, "20c63e489f15a5557965331f94f908f47835e489a51c0beac15c35bd44272d06", 0x5e, "93e9e4e911ff4f972b614ce4c2de6bfc548831dbae5636be835745bcacfdd74a57d0c25dccf7a4d5df603df934106a159e4f0b398a0456401a455d185c7ed8e1004293e72162be03ef87a6a19d4a51e26ff7a40250f630da2dbc1a099ba4"}, 0xf8, "f87310712a26a95842b4714e8a3c96319eec5173b41b0dcc127e000f13ad3e7604d959f56ad97a6a34b09ee12ab57749af10159c40b4e4e5e9d9b12265efa2466ba43ed4af9c0743316486ff3fff38fdcaf7197a3cdd02dfe16f76f42f271b3283009c5abc98f98686f18cec1bf378564bfcea638f4bce1c76e66c58a414ca9c1de0bff2f03288bd99519025eb2221fc1e9fae7d203e625add6677a1c48144df295c09627a1a8590b0307e89ddf8d74ba258b778d04f51b616c5f8b6713eb7daa4eef3a30d9dc8faed63bb347a77caf2ce386e059011d754c408bee9254333eed2d98a93141b0a6018c533fc069c34a6454ebaa59518c9a1"}, 0x18f})

[ 2342.065995] loop0: detected capacity change from 0 to 40
04:24:32 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000001380)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYBLOB="a7e742b9a5fec91c60097758510f4568adb72c16b5559bb683b8ac7993539c20ac7bfe39f40b62b6f9fbf601361bfcd6a22782831f83d61de02e62f97777ad486894e6a7ab3287fcff4350797ac94a399a89fd2d2456d4a5d835da6a64beae98e7778083e88728f114ce700b8cbb87e0157387ffc6fe860362d9b0b7f961c44b365ab158b842725ae0c9a40d8180230a5e2673223de9bc6856eab83f923853aa9471c14748cb23ae04a1a381c294f0105fa7e2fdb13a0de27bb2a20969b3d8db56eefc14b0a45475511b637ea8a16ac019fdee0b8e03ae35f3f699db99bc02e2c105770418a416ea41611ff869d90fcad873afd5ff578c29d677ab5eed7aeebcc7f7a572e431b63f81a54c20c58c6fb77c15fa68191d29105345998ec8689c4d1614e98886e74d656ffcfa61743eb7f450aea41ad9569eb8234d9a64f757a74a72daa6e81326eb21da8ab72c7370ff30d28e2b451b3173f4f534d59ed7b212d6fa84ac948504e8ea2436690590cbec496b3c4459b44775acd775629435bbe486a3501eadbb10a32f928e509938a96a07d0409b3ebcec90f62f9f4163da38a8a88ffc1003bb0b02517fecdfda1057f8c1b0b0205239059ceed5da3e2b7cdcfbe9b7b415e5f837eb553e365e733a89c7e5962b05c3320ca27ef5e99f9d80a3548f12278999b9779244cf3324f95779ef0e63480ff3120c2ee6ab6fac5c2c529af8b0648afae86733bfd053c977cb485dcdd9d30de3afaa61e63d647e5995205292c5dc13d4a926eecc68ce6670bc003f9c084301714ef97e3d344fb9ecd2b1a9a78d9a2a8e6a1c490c639c5d4085c549feb73871c539f08625d8b9d0e5eb1afb8f55ffab2defe6f77b83b2b0c249daa09f6ddce2e398e3670df5e63a7e4ec0a92ca6d26b63ca50b7bb29cbd3a1cc3ee7c00fc1f14a10b057b26f652643e9ee748df573efbbdda382e14328f93d2711dfa729b4c74a3ece0690a92830d9be6406c178ff632cdef58c7d0348613ef17b63fe4b9065cddf59fb378c99e8b62b7cfb21c55fd01344b32faddc1c5cc2db695fbde5fce0c82bf1cb3cd940f46c42229c9e1204eb90b6a7fc3e465352a90e66607c74620793639b400f16be50dd28709cd31ef5378b8c501421003b5389e898ce8885bb76ef6e6628d08d6d456b88611729de6a63fada28094816e325b8435eda7f1e39f9170958d91103080e42713b04cba404593751a9a7033ad321ea03152a4fd4ee8d73958c340e8f6d3a37a997400f9b683d562150d8b8bc9a0113d4ec78cd79403663ba729b2a95d0b3e6c7b760c24bc7ee65ba10e029409baa42745de26ac1ca11c76def7a7d65efbd7e4210fb03dd93b957162a1772ccee81e4203411dd36db9398e7c37b30ce22f61d4f95abf68d9c2a9d774960cb7728d8a4a3bc732bc107c2aa4bec5bbea9ec1f17cdddbbdea9c5d6f02024b37bed2f17d24a1287cd91335725955295d219857ecf86095017318a48ffcb4ff17e4674328a67ef5532fe24b869982fce090a9fd8d42c3c28e0af0f542f6600abf703b2679ce4786f7b71ed5d7606090fb5b8c240510bdd578be4a934e27f3c18aa64cc80da8acf09de9eb2e808e1b290e568b92cb60a56a7f02be8c3379984599cdcf6ddf637e93348539dda8b509f8d0c077586d3c57d940568a3cfa080047efec6f31038ab11b617fabc8c27554135b8e21181955d6fec37696cf801ad656bfe3016b20758e2af69dfbf76513a7e380d58076cd0a5c960b7b0a23f5ee99f7fa5fba1c3c25b3656bab77fe63b4dcefbd0319e6bc2921749689eb0c29f4ececd9ee7a22a4629ad85e492711014bf26b45ca41e08d63750d300ccf45f351a22d0991a7bc4704ae9089ba897572759c6867e182e2b5e0762111b91ce37fd1cc8dcab26ad1ab931de6762b43e8cfa0ddd90d78021313d8438f81ea9bf801782805d7d141d034856090a6b4eb86b5acbeeec3d987ebf4c2e69b4aaa84b26a228d3d53d7459f5d49020bb42144fd8de2daba1d7319dc254e60a226166574f1212b2b698b5b45ae8a3f02c2ec932a0fdb33f62bbd8f95a168206d5358274b0dc5b1c54f4ded1fd44708b04fb84ab88bec126f6e08d8de173fa6b6a4e5c9e98f14bd21d1697a21336f4a75a1a40bc1d97d981a5e5a14c2ef83c6cdbe0df1f75810b33af77308fc84b338ea5216c5625b162774cc8263fd698814a2503280a482e0adc608d47f996529ebb11981306f5e09637d234cf70ba92fda6f0d3ce1b7a8ed222537982e978878597457f3092f96aa4d3b380f8a4d5ad2bb350cb69bb474da8b5d7821366b3d561dc88d9f25808828b5536ec08e7703e92a29b3f1198a159a04d8b3fd6a328ffdf30f9906f5177b98d3c00d13e3248b9589871bf45dfc7cb84ff102d9fbec410a065307e39a78a2be25c73453a1512047a4f87b0bf517e8e7b0d045dd59161e2ac29b8bb06da5278eaa9e92e7a12e67e4ff149618645d2e145e9aca967362f1f3e692e2ee0be5123ff7dc78887ff4f82900886e8339c31d3f35e0ecd3be281e7db4dee713e4f0badea782bb12595fac67b4a40ac7a4f068f9122ee9e03a477e4f188b7f6a8f26b00deac1bbe76e6783b4e3f7fd4f3495cb097151e0e829e6b8ac49b12b366e664e32c83e5f3c750b7166f28c28ca8dd17defd15e4c83f1e59325149bb2603b98f481a9c150c9d35374df0dca0f824db60a42b22ad5e45cf6eef57c1cdfa4674a9bceb6f84895c9f7fd3254792adcefb4b85961d1481f26f70cdf251b71b7fc6f6494be27d244ba3061a19abd17f37a5015519cf990bc4fa61406d2ff92ffbe6f3a761514b78b6ca65f203686ccd0bdfb87f248c801bcb3c66cd887253afb9d557e493fc81615dc11fd30f6b97f76080bc04626239a081e115d289653e095de4798cef4852ed9e3827f273e048721cc60eccd3e158b93e0709f532e6989c4a13415161ae39854016db6b8c4ca3f7b3c58945f8c6b3168ffbb08db1fdc70a4eaf42fd323dfbbf5ab196a8f79f7cf2d2db687016dcfb15838f9ceba414492ee2ce8f7a554add0a0816b7db7d774ce3314ce799247a295c063387d5080274b3fe1abbf6dcfd577dceff626b9647949c15c0027cdf3ee80773d427056b6bc6c240c866ef594a9e0c26c71d9c80421d20d7c6149efe2264908bff7868f6a185c3d840288cab50bba1f33438f4e3096e0bc89d3f94f4ed90221cdfca4523fcf8dc1e829846bb255dbe4e14f6bf66fa31998f80a0dce4a329212021d1bf3940ead19febac9e60d5a774b593e58f211016fe5bdc73f499f4a5287e001bd41c2b9b4f4d6f3f000800000000000059e67b471ee11cf4863b0e58a0bc70351ad5ba7a84b604e889c2c04e3a15df7d409638e6fba77f82365c410a36a2dc9871f5e511ba41de8953e8428d21ab7d561736e4c0c37ee85d219d44e8e0af80fba964346df5d59c4cc6464038a0427e6fd51588d668fc5bca530cfa0cda1b3a8a2607a8fafb837aa32f00c432af572aeb962e2df76fa057a663053d13de2b7ff96fe53b6920da660f2e3b132f01c6c24c694e9699a99f39e453af59ae0171612490b6b103b58072592b037876edc19cb2ef8cb5aac7d86a082f64cfa64f2ebee1e9101d15b05f85caecbe61c774c4273cea6b0ac02176a040c66df9e16b6e17d452bf1b4012e54f83d545e46d5cf2e4f31e3c88f9a72e06ee6384f6d8dc0f32f30ecb3a2a01f439018782bd6fb562db4345866db2db0572084bebfc60d01b2ab106a6d54144df210b727eaf2ea96fc9ce0c523e582e814faa5c3540fccc28b47388fecf810bd6bf3abed0d6c929f78aeb88f507458cf956c79bf30c21d3dd9224183f58fd9008ba668bb1e281c6849acdd6ebeaba0bfbd9b53ef41690ab775cd93d30d2fcade2471bf4e25b76e7321e9a6cc2ff33a9657035354d98556bba4a98c35b30c15106d67d00d3cdbbd74a4d197583ee3969eb7fe9c2e8a11e5a5278ea8f3e5a617a03dccc174c5b622b2d3eec777324c80e23f253743c8f328cf0ce98629e2dec17299bd4a0a70bb75b2d2708af25e378c2d606893cbd29161b35651729c64daa89e2b526f005f15908fcd3b9829515e52bacde8fd7349a7c85703e51c6b11168219370156401bad317bcd39d205215a56724d7acaa8a9dea37ee8da59dc048211a4513c8f2ae0d5a0345ee6228ca4576cd287785992da5c142708be225a3e8a505db346ca71933a359bad83aa49b75b53e9a3f5c422423d867d73fdcab603ed2fd991c8533950b4d756c3bdac29b516f4096c3f79bf08cbfaa5427f437b8884674e205b2b4a423aedd412346f38eae3cbb5de0f2b88bf9d463d245d09319b2eefd9c9ad714ad7fcf4c52c2194235a25f9e8de1074c11bb409d954e185386a25fdc3e24b815c0a6d4c926996ed146f2dc46c62a0c36c537c1685fe3a87a0850e7f039c3c825eeacb5ccc5fd3d8131f6b27a2f32e4e5d2ee02771ead323f4c81d346f320a2b6141f05874692b5f207787f6202fede2d385379ef57ceb8eca4285b8ad481c9919da9da733095bbac8c24cd17f22123fae5bcd8942e47e39b2952c7333cded960dd722b2ef54b90542deed4a165ab50965820d9789bfeb85bb00df3646c44ae2611307516bf06c02c56bd7413f9654539a61d091cf6771299fd5a214609c0bb81877882c7d675e25319fd1540cbaaa1a5c1c6f78b70663b864c8b3f4576c36ca39b0dbf58fea01cbc7ed4beead752d9cb2b3d2b47a82c004915325042e6a8d6eaa787a273bc30bada52ba4cc44c735a06ad15128f13be5dc9010843e31d432bdf03800f0cb678582b6842b9d2702385b1c70d070844b08c7cdc9370b556fc493140341a30b60a24a6641590f6394694df4647abf556def45320f48fa8fed79f8638f0afa7165f7dddd01cea32915dbd87bab3c40fd948be82f936adafcd191228ec3fc5d567e7c978b00e7d7311ccb50dfb59f89c6d46124266960f67117b0f51502c37964c381e0b715575183b19ee39c3fc6863a365a3807477d7b927c257f34600204f0a58a0ddde74274abd8f5ae82649baf253b89a863cbe02f0743751bad9651fb164ab0ad6fb02cad984d20690c773749797da4b7cfa50d257065c856ed778b2978283ef9b9b8472e705dd44c6766732f79bb0687263992e2ecaff28ff295cf354b25ab2eb783ec3a0c40ffcb6d9d7e4e252860c72dd573f566d4838333197595acb5ef3c21f3b32fd965d495aec81d2b07ece5eab49c3f2ce1bf15b55851b10d18fc4b03b45fd3b55d20a0e64bdfa590f8abed9862db70d24f65983ac33707f8a0d16caf078acb0dce1b2ffe417efb6e3829a2716fa83557094b383c92d01e13e2e22391abae5f81266efa848a5c91b8f650425c233cddf499905aa8be29d7099f85f122fa4428fcada4abd3db01f944e97edf3c92fa6a7642897ef375a5277b03ee40dc8741060689cc4cda9dbb3ddbbb01c06bae4ef66371d33f918c13d8a349d5807a13a6e64ccbc4c952b8ce194a90f951cecf5bdcb7ca7c05fcb3ef82e096d7e04817079d9fad86ba5eac521e763baede0fe77b7843a6430b398c39930e2826f428a479b4117a8471463715cde0186cba708f4707d18a66c47f1e28ff58ee039a9b06695883e4275f7096b98aa2490ec8db24389e05899fdea11e4cd060f87e3ea42c8e78a7d487b0b4bb93b79c43b9993a683e96107d92be34019321f6ceea7408b2b8b7a8eb62993ca10d8f7371d00"/4085, @ANYRESHEX=0x0, @ANYRES32])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xee00, <r4=>0xee00}}, './file0\x00'})
fchownat(r2, &(0x7f0000000040)='./file0\x00', r3, r4, 0x400)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)

04:24:32 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x40, 0x3, 0x2, 0x0, 0x100000001, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000240), 0x7}, 0x1024, 0x80000001, 0x40, 0x7, 0x100, 0x8, 0x3592, 0x0, 0x0, 0x0, 0x401}, 0xffffffffffffffff, 0x10, r2, 0xa)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:24:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x103401, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = timerfd_create(0x0, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x80000001}}, './file1\x00'})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
sendfile(r5, r3, 0x0, 0xfffffdef)

04:24:32 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x1c)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x2}}, './file2\x00'})
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

04:24:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x0, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2342.114526] loop2: detected capacity change from 0 to 40
[ 2342.152994] loop6: detected capacity change from 0 to 40
[ 2342.172842] syz-executor.0: attempt to access beyond end of device
[ 2342.172842] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.174065] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2342.178682] syz-executor.1: attempt to access beyond end of device
[ 2342.178682] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.180951] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2342.189246] syz-executor.2: attempt to access beyond end of device
[ 2342.189246] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.190406] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2342.234193] syz-executor.6: attempt to access beyond end of device
[ 2342.234193] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.235107] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:24:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2342.264684] syz-executor.6: attempt to access beyond end of device
[ 2342.264684] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.265690] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2342.285711] syz-executor.6: attempt to access beyond end of device
[ 2342.285711] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.286624] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:24:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:24:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x0, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2342.295182] syz-executor.6: attempt to access beyond end of device
[ 2342.295182] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2342.308318] syz-executor.6: attempt to access beyond end of device
[ 2342.308318] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.309372] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:24:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="10", 0x292e9)

[ 2342.431891] loop0: detected capacity change from 0 to 40
[ 2342.440077] loop2: detected capacity change from 0 to 40
04:24:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 2342.478503] loop1: detected capacity change from 0 to 40
04:24:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x800, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x20)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:24:32 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file1\x00'})
ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000300)={0x0, 0x9, [0x0, 0xa01f, 0x9d, 0x7ff, 0x2, 0x3]})
r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2342.531543] syz-executor.0: attempt to access beyond end of device
[ 2342.531543] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.534103] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2342.591488] syz-executor.1: attempt to access beyond end of device
[ 2342.591488] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2342.592901] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2342.595144] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:24:32 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x1, 0x8}, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = accept$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c)
readv(r3, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/195, 0xc3}, {&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/105, 0x69}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f0000000600)=""/248, 0xf8}, {&(0x7f0000000700)=""/160, 0xa0}], 0x9)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2342.602252] loop6: detected capacity change from 0 to 40
04:24:32 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="11", 0x292e9)

04:24:32 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x0, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2342.730241] loop0: detected capacity change from 0 to 40
04:24:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:24:32 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x40, 0x92, 0x80, 0xbf, 0x0, 0x0, 0x412c8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x2, @perf_config_ext={0xfffffffffffff001, 0x4}, 0x66800, 0x41e2, 0x335, 0x4, 0x2, 0x8, 0x6, 0x0, 0xfff, 0x0, 0x7}, 0xffffffffffffffff, 0x4, r1, 0x9)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000380))
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:24:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1a1042, 0x134)
write(r0, &(0x7f0000000080)="01", 0x292e9)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x184)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
open_tree(r1, &(0x7f0000000040)='./file1\x00', 0x8000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)

[ 2342.833713] loop2: detected capacity change from 0 to 40
[ 2342.847473] loop1: detected capacity change from 0 to 40
04:24:32 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x109043, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73660100"/23, 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYRES64=r0, @ANYBLOB="385b9be4909595dd2e700805761356877565f1ac52120d6f2c34c53f3313184069feb01c8a8fe2b540320011a899cfa16f098af5bd97ab93dd86cca375cc648a51c9d7ba6d1656dc58053e0704e320f30c0e88cab685413d50afe0c8a4a23744ada83d1d4ee772e5b750f2038b7d77fe63c1e8d29c433731bd65d29b827992fc18ee750e310e3d370657e63061b377d9261452a27e83b7ce8e344bff2a71f74b1a4451458e76c2828294b4bc1a1448e26cb3adac2645afcc901874f7928a923bfdd856d01ecb3058bcb9e001c0ccef20df9d8dfe96615575f732159cda82fd661428", @ANYRESDEC=r0])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x102)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000040))
openat(0xffffffffffffffff, &(0x7f0000000540)='./file2/file0\x00', 0x480100, 0x4)
sendfile(r1, r3, 0x0, 0xfffffdef)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101000, 0xb1)
write(r5, &(0x7f0000000080)="01", 0x292e9)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x4000, 0x0)
signalfd(r6, &(0x7f0000000600)={[0x401]}, 0x8)
r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x402020, 0x40)
openat(r5, &(0x7f0000000000)='./file2\x00', 0x40, 0x356)
clone3(&(0x7f00000004c0)={0x10a8100, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240), {0x7}, &(0x7f0000000280)=""/73, 0x49, &(0x7f0000000300)=""/48, &(0x7f0000000340), 0x0, {r7}}, 0x58)

[ 2342.893074] loop6: detected capacity change from 0 to 40
[ 2342.905253] FAT-fs (loop6): Unrecognized mount option "0x0000000000000003ÿÿÿÿÿÿÿÿ" or missing value
[ 2343.053445] loop6: detected capacity change from 0 to 40
[ 2343.055370] FAT-fs (loop6): Unrecognized mount option "0x0000000000000003ÿÿÿÿÿÿÿÿ" or missing value
04:24:47 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8001, 0x100)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
close(r3)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:24:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="12", 0x292e9)

04:24:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40, 0x150)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:24:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

04:24:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:24:47 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x0, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:24:47 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:24:47 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYRES64=r4, @ANYRES16=r0], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r2, r0, 0x0, 0xfffffdef)

[ 2357.683089] loop1: detected capacity change from 0 to 40
[ 2357.683607] loop0: detected capacity change from 0 to 40
[ 2357.703373] loop6: detected capacity change from 0 to 40
[ 2357.727247] loop2: detected capacity change from 0 to 40
[ 2357.735212] bio_check_eod: 7 callbacks suppressed
[ 2357.735227] syz-executor.1: attempt to access beyond end of device
[ 2357.735227] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2357.736823] buffer_io_error: 5 callbacks suppressed
[ 2357.736850] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2357.823923] syz-executor.0: attempt to access beyond end of device
[ 2357.823923] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2357.825105] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:24:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2357.980626] loop1: detected capacity change from 0 to 40
[ 2358.006153] syz-executor.1: attempt to access beyond end of device
[ 2358.006153] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2358.007231] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2358.028257] syz-executor.2: attempt to access beyond end of device
[ 2358.028257] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2358.030311] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:24:48 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="13", 0x292e9)

04:24:48 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0xffffff1e, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
syz_io_uring_setup(0x2b2, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, r5}}, 0x7f)
syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x82001, 0x80)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

04:24:48 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2358.086959] loop0: detected capacity change from 0 to 40
04:24:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
openat(r2, &(0x7f0000000000)='./file1\x00', 0x40, 0x100)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:24:48 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x0, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2358.138981] syz-executor.0: attempt to access beyond end of device
[ 2358.138981] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2358.140237] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:24:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
mknod(&(0x7f0000000180)='./file1\x00', 0x1, 0x8)
getgroups(0x6, &(0x7f0000000380)=[0xee00, 0xee00, 0xee00, 0xee01, <r0=>0xee01, 0xee00])
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8)
mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10000, &(0x7f0000000500)={'trans=unix,', {[{@cache_fscache}, {@version_9p2000}, {@uname={'uname', 0x3d, 'X['}}, {@cachetag={'cachetag', 0x3d, 'security.capability\x00'}}, {@version_L}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@fowner_lt}, {@dont_appraise}, {@uid_gt={'uid>', r1}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '('}}]}})
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000600), 0x30000, 0x0)
openat(r2, &(0x7f0000000640)='./file0\x00', 0x80002, 0x185)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x113c40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff, {0x9}}, './file1\x00'})
openat(r5, &(0x7f0000000240)='./file1\x00', 0x324c3, 0x20)
lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v3={0x3000000, [{0xcec, 0x200}, {0x0, 0x3a4}], 0xee00}, 0x18, 0x0)
sendfile(r3, r4, 0x0, 0xfffffdef)
chdir(&(0x7f0000000280)='./file0\x00')

[ 2358.147364] loop1: detected capacity change from 0 to 40
[ 2358.221389] syz-executor.1: attempt to access beyond end of device
[ 2358.221389] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2358.223430] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2358.355236] loop6: detected capacity change from 0 to 40
[ 2358.363307] loop2: detected capacity change from 0 to 40
[ 2358.404067] 9pnet_fd: p9_fd_create_unix (12837): problem connecting socket: ./file0: -111
[ 2358.425393] syz-executor.2: attempt to access beyond end of device
[ 2358.425393] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2358.426888] Buffer I/O error on dev loop2, logical block 31, lost async page write
04:25:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000240))
copy_file_range(r2, &(0x7f0000000080)=0xffffffffffffffc0, r0, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:25:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="14", 0x292e9)

04:25:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

04:25:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x9c020, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x4c042, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
ftruncate(r0, 0x80000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)=""/24, 0x18)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = dup2(r1, r1)
openat(r3, &(0x7f0000000300)='./file0/file0\x00', 0xc00, 0x80)
write(r2, &(0x7f0000000080)="01", 0x292e9)
name_to_handle_at(r2, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x1ff, 0x7, 0x8000, 0x20}}, &(0x7f0000000280), 0x400)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x103800, 0x0)

04:25:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="ef", 0x292e9)

04:25:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x0, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:25:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000000)=0x1)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="cc005886decfe22776186c754b47620268000000cd01000080000000d6011000070000000000000007000000b2f1bc32d2b2512f0941cf9a113ae1630400000000000000f7437aa556d604d37a10c567b56a345764f8b1279dd7a99cfe92abb9a71fb0c30e8511aa084cfcf4948a4901b26f5295fe303f26f1f9e54f78b24743e0930e313504b9c53fd7c4b477f636d9634f323d46f95a430a3922a7b65400"/173], 0x3e)

04:25:04 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@l2tp={0x2, 0x0, @loopback}}, 0x0)
syz_io_uring_setup(0x2b2, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000000)=<r0=>0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="d60a7af4def17ba820605c8a2263a549522fb510d7c5e44148efb9bbe1ea9347", 0x20, 0x40010002, 0x1}, 0x7f)
syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r2}}, 0x7)
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x527300, 0x101)
sendfile(r4, r3, 0x0, 0xfffffdef)

[ 2374.320441] loop1: detected capacity change from 0 to 40
[ 2374.321410] loop0: detected capacity change from 0 to 40
[ 2374.338184] loop6: detected capacity change from 0 to 40
[ 2374.377310] loop2: detected capacity change from 0 to 40
[ 2374.386500] syz-executor.6: attempt to access beyond end of device
[ 2374.386500] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.387384] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2374.404303] syz-executor.0: attempt to access beyond end of device
[ 2374.404303] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.405411] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2374.419539] syz-executor.1: attempt to access beyond end of device
[ 2374.419539] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.421394] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:25:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x3f7, 0x400, 0x70bd28, 0x25dfdbfd, {0xd, 0x7, './file1/file0', './file1'}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20048080)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee01}}, './file1/file0\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:25:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2374.509148] syz-executor.1: attempt to access beyond end of device
[ 2374.509148] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.510104] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:25:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\t', 0x292e9)

04:25:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="15", 0x292e9)

[ 2374.617981] syz-executor.2: attempt to access beyond end of device
[ 2374.617981] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.619882] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2374.630051] loop1: detected capacity change from 0 to 40
04:25:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
r3 = syz_io_uring_complete(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x3)
openat(r3, &(0x7f00000000c0)='./file1\x00', 0x4100, 0x120)
fcntl$dupfd(r1, 0x0, r1)
sendfile(r0, r2, 0x0, 0xfffffdf3)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x8)

04:25:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
openat(r1, &(0x7f0000000000)='./file1\x00', 0xb00, 0x108)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 2374.655091] loop0: detected capacity change from 0 to 40
[ 2374.685925] loop6: detected capacity change from 0 to 40
04:25:04 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
io_setup(0x65, &(0x7f0000000240)=<r2=>0x0)
r3 = syz_open_dev$loop(&(0x7f0000000300), 0x80000001, 0x81000)
io_submit(r2, 0x1, &(0x7f0000000b40)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7, 0x4, r3, &(0x7f0000000340)="457961305e7d9b536e4ebe19d656de315d621cef76188232c4c4813bd829c5557bbdc8592fa09512b7d20350c2e9fff592a8253ab052a4f5730438e40e763cc007d94bf73be31807cce3ffdca0eb54bc6e28ced8678b8be1e42bbe1319e047bad3bb5b09d6d8785c95116de8af0224275a3cd002e12e4f4c7055beadcf2edf3704d3bf00e6aacc30d281be7e00631e8269f622bf83d05fb6b1a8561b82971ab6315a9976aed71656be2e59d3122102ea495584", 0xb3, 0x9, 0x0, 0x2}])
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:25:04 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x0, 0x1, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2374.745296] syz-executor.6: attempt to access beyond end of device
[ 2374.745296] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.746200] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2374.759528] syz-executor.6: attempt to access beyond end of device
[ 2374.759528] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2374.767131] syz-executor.0: attempt to access beyond end of device
[ 2374.767131] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.768371] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2374.780548] syz-executor.6: attempt to access beyond end of device
[ 2374.780548] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.781455] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:25:04 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="16", 0x292e9)

[ 2374.872893] syz-executor.1: attempt to access beyond end of device
[ 2374.872893] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2374.874912] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:25:04 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x480000, 0x101)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040))
sendfile(r1, r3, 0x0, 0xfffffdef)

04:25:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x9, 0x0, 0x3, 0x5, 0x1})

[ 2374.922292] loop0: detected capacity change from 0 to 40
[ 2374.955148] loop2: detected capacity change from 0 to 40
[ 2374.957364] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2374.964960] loop6: detected capacity change from 0 to 40
04:25:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="17", 0x292e9)

[ 2375.089377] loop0: detected capacity change from 0 to 40
04:25:19 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d0020000300000000000000fe961edc3fcc02e80d1ebb16306821fe6fb2573442f90a44386f1881c1589ffe4e46b486b865f3f6abac8b037011bed1740000f4f3ecf3e854710699929b9747", 0x4e, 0x81}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x8200, 0x1a8)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r1, r0, 0x0, 0xfffffdef)

04:25:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:25:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x109042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:25:19 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="18", 0x292e9)

04:25:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x51, 0x7, 0x9, 0x1, 0x0, 0xff, 0x4024c, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x30, 0xfffffffffffff695, 0x0, 0x9, 0x0, 0x100, 0x7, 0x0, 0x1f, 0x0, 0x8}, 0x0, 0x10, r1, 0x2)

04:25:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x0, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:25:19 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
io_setup(0x4, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000b40)=[&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000000300)="f5cf4995bc8e7f38a3952a25c486bdc0b1de0bac023211c4078110b13d79119f781f2d9bfc07a2860029f46915975035fe0528cf14b824783b6172cbfe86fc05b5a354244ab40dff40bc7e57f8951b8d588ff324b3c5922908b2a951c1582219204032ce2e2463bcc974aa4f8b69ddc2aab672b4b06efd2176a06464c3b9bfa681558739534ff098c6a1495dfbfe00250f7934c945c1ee520bcd1cc3652bebbb0e314821351f16169a85cae39b953b75755cc5fc682d3a9ed6abdaec4c6a3faf2de05233bbe394bbf8f0c169bef7", 0xce, 0x7ff, 0x0, 0x3, r2}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:25:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x1a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x200040, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@version_L}, {@noextend}, {@cachetag={'cachetag', 0x3d, '![:'}}, {@dfltgid}, {@cache_none}, {@nodevmap}, {@msize={'msize', 0x3d, 0x4}}, {@cache_fscache}, {@cache_mmap}, {@version_9p2000}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_measure}, {@uid_eq={'uid', 0x3d, r2}}, {@smackfshat={'smackfshat', 0x3d, '\xf9%[^@\'@\xdb'}}, {@hash}]}})
write(r1, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

[ 2389.162133] loop0: detected capacity change from 0 to 40
[ 2389.165645] loop1: detected capacity change from 0 to 40
[ 2389.171221] loop2: detected capacity change from 0 to 40
[ 2389.210061] loop6: detected capacity change from 0 to 40
[ 2389.239448] bio_check_eod: 8 callbacks suppressed
[ 2389.239461] syz-executor.2: attempt to access beyond end of device
[ 2389.239461] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2389.241266] buffer_io_error: 5 callbacks suppressed
[ 2389.241277] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2389.251395] syz-executor.1: attempt to access beyond end of device
[ 2389.251395] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2389.252515] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2389.291231] syz-executor.6: attempt to access beyond end of device
[ 2389.291231] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2389.292835] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2389.332154] syz-executor.6: attempt to access beyond end of device
[ 2389.332154] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2389.362459] syz-executor.0: attempt to access beyond end of device
[ 2389.362459] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2389.365118] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2389.368999] syz-executor.6: attempt to access beyond end of device
[ 2389.368999] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2389.369847] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:25:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x0, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:25:36 executing program 4:
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0xff, 0x44, 0x1, 0x0, 0xfffffffffffff7ed, 0x80404, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0xc0000}, 0x69040, 0x7, 0x3ff, 0x9, 0x5, 0x4, 0x800, 0x0, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r0, 0x9)
write(r1, &(0x7f0000000080)="01", 0x292e9)

[ 2406.480127] loop2: detected capacity change from 0 to 40
[ 2406.508013] loop1: detected capacity change from 0 to 40
[ 2406.510944] loop6: detected capacity change from 0 to 40
[ 2406.513472] loop0: detected capacity change from 0 to 40
04:25:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000), 0x4)

04:25:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="ff", 0x292e9)

04:25:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="19", 0x292e9)

04:25:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000000)="01", 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:25:36 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = fork()
process_vm_readv(r1, &(0x7f0000000bc0)=[{&(0x7f0000000300)=""/105, 0x69}, {0x0}], 0x2, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/98, 0x62}, {&(0x7f0000000cc0)=""/109, 0x6d}], 0x3, 0x0)
getpgrp(0xffffffffffffffff)
creat(&(0x7f0000000040)='./file0/file0\x00', 0x67)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1, {0x0, r3}}, 0x7f)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index, 0x101, 0x0, 0x9, 0x3, 0x1, {0x0, r3}}, 0x8)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x69fa, 0xdc}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r2, r0, 0x0, 0xfffffdef)

[ 2406.532724] syz-executor.6: attempt to access beyond end of device
[ 2406.532724] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.533646] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2406.542857] syz-executor.6: attempt to access beyond end of device
[ 2406.542857] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2406.550220] syz-executor.6: attempt to access beyond end of device
[ 2406.550220] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.551091] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2406.555890] syz-executor.1: attempt to access beyond end of device
[ 2406.555890] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.556981] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2406.558251] syz-executor.2: attempt to access beyond end of device
[ 2406.558251] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.559411] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2406.566613] syz-executor.6: attempt to access beyond end of device
[ 2406.566613] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.567505] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:25:36 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="ff", 0x292e9)

04:25:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x0, 0xc0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2406.674273] syz-executor.0: attempt to access beyond end of device
[ 2406.674273] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.676343] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:25:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x20000, 0x40)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x52080, 0x113)
write(r0, &(0x7f0000000080)="01", 0x292e9)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)

04:25:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x1, 0x8, 0xd6d4})
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x8041, 0x100, 0x1}, 0x18)
r4 = pidfd_getfd(r0, r0, 0x0)
openat(r4, &(0x7f0000000000)='./file0\x00', 0x10000, 0x190)
r5 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'})
write(r1, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000040))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="010000002bdb3bc26fa97ac297000018000000", @ANYRES32=<r6=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00'])
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f00000000c0))
write(r7, &(0x7f0000000080)="01", 0x292e9)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r8, 0x0, 0xfffffdef)

[ 2406.725192] loop1: detected capacity change from 0 to 40
04:25:36 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101043, 0xc7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:25:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='%', 0x292e9)

[ 2406.739152] loop6: detected capacity change from 0 to 40
[ 2406.741264] loop2: detected capacity change from 0 to 40
[ 2406.769246] syz-executor.6: attempt to access beyond end of device
[ 2406.769246] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.771071] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2406.786184] syz-executor.6: attempt to access beyond end of device
[ 2406.786184] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2406.787832] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2406.810325] syz-executor.6: attempt to access beyond end of device
[ 2406.810325] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2406.813210] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2406.818380] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2406.820689] loop0: detected capacity change from 0 to 40
04:25:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0x0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:25:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x1000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="601c646f7366d8a02b00080101000440002000f801281fca0549a09b513800000000000003ff688366c02f1d4b3a4370cd", 0x31}, {0x0, 0x0, 0x27fc}], 0xa7807, &(0x7f00000000c0)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r1, r1, 0x0, 0xfffffdef)

04:25:37 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="f2", 0x292e9)

[ 2407.032076] loop6: detected capacity change from 0 to 39
[ 2407.044382] loop2: detected capacity change from 0 to 40
04:25:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='c', 0x292e9)

04:25:37 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
write(r0, &(0x7f0000000340)="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"/429, 0xffffffffffffff9a)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
mknodat$null(r2, &(0x7f0000000000)='./file1\x00', 0x10, 0x103)
llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000240)=""/148, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r5, &(0x7f0000000080)="01", 0x292e9)
r6 = dup(r5)
sendfile(r1, r6, 0x0, 0xfffffdef)

[ 2407.128874] loop6: detected capacity change from 0 to 39
[ 2407.146059] loop1: detected capacity change from 0 to 40
04:25:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x100, 0x39, 0x6}, 0x18)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

[ 2407.183723] loop0: detected capacity change from 0 to 40
04:25:54 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x7, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x105001, 0x0)
syz_io_uring_complete(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r5, r0, 0x0, 0xfffffdef)

04:25:54 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x10, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x5410c2, 0x0)
write(r1, &(0x7f0000000240)="059b3e790e1467dc52e86279a639a9278416f8e15e181a64dc69ff3aa8b8a312894680fcd7ed59785318b474a963e2d3d7cc8f5aee2517a9f915032074d6c964ec986ab703d668f4e4a1316d117e117aecc3c62bb402a220ddd0f0cc088f2f2315363b1eea97db1d413fd2f05f7dcc9779e061ad418f51e879003749e75998f776d2469f51fb8dd01ca3edae996d4c219f5450e6bf4ef62a3395b8c604cfe2e6518dc097e43f847b2a74404cd61659f3abe18921f1b8200276d95180", 0xbc)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x7, &(0x7f00000000c0)=[{0x2, 0x1}, {0x9, 0x3, 0x8, 0xb076}, {0x1, 0x5, 0x1f}, {0x2, 0x81, 0x2d}, {0x6, 0xff, 0x80, 0x9}, {0x20, 0x9, 0x40, 0x7}, {0x5, 0x9, 0x0, 0x40000000}]})
fcntl$dupfd(r3, 0x406, r0)
memfd_secret(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
openat(r2, &(0x7f0000000000)='./file2\x00', 0x400000, 0x163)
sendfile(r1, r4, 0x0, 0xfffffdef)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x50001, 0x0)

04:25:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0x0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:25:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

04:25:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="f9", 0x292e9)

04:25:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000240)="8769895d81004a484bd98ead8010e423bd63e1155e46b395713751b00cba52e801d488b49e89048e8f2425246f8508ea01aa21e0500bb9177fceacdff814b03c0d1162fb7b7b2cc28b3f9664d58a4791e82c86ebb75fb0e81f0fb38330dbee45553ec66143072afa44065a8587337c8c89ac5c7765fd6c5dabaa9b46ccc17c4dc02dbc0fff2d7f91a1a18356f0", 0xffffffffffffff4c)
renameat(r3, &(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00')
sendfile(r0, r2, 0x0, 0xfffffdef)

04:25:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="03", 0x292e9)

04:25:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={<r2=>0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000240)={0x0, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}]}, 0x10)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000b00)={r2, 0x7fffffff, 0x4})

[ 2424.064297] loop6: detected capacity change from 0 to 40
[ 2424.072963] loop1: detected capacity change from 0 to 40
[ 2424.080741] loop0: detected capacity change from 0 to 40
[ 2424.104660] loop2: detected capacity change from 0 to 40
[ 2424.230215] bio_check_eod: 8 callbacks suppressed
[ 2424.230261] syz-executor.0: attempt to access beyond end of device
[ 2424.230261] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.233028] buffer_io_error: 6 callbacks suppressed
[ 2424.233047] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:25:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2424.282248] syz-executor.2: attempt to access beyond end of device
[ 2424.282248] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.284361] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2424.297221] syz-executor.1: attempt to access beyond end of device
[ 2424.297221] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.299166] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:25:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x3)
write(r3, &(0x7f0000000080)="01", 0x292e9)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:25:54 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0x0, 0xa2, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:25:54 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = dup(r1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000000)='%\x00', &(0x7f0000000040)='./file1/file0\x00', 0xffffffffffffff9c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x28, r4, 0x5, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x10002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = syz_open_pts(r2, 0x209c3)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000780)={<r7=>0x0, 0x7, 0x3e6, 0x1})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000b80)={r7, 0x7, 0x1ff, 0x1})
write$binfmt_aout(r6, &(0x7f0000000300)={{0x107, 0x3f, 0xd6, 0xd, 0x19b, 0x7f, 0x2c7, 0x1}, "fa6f82969d81be40399fe1e80067d2f2887cedb7c1b7e7b033e15afb942ec628ee1359db29c8500dda6b4afd483cb508317695622a37d8a9dbea2acb", ['\x00', '\x00', '\x00', '\x00']}, 0x45c)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r8, &(0x7f0000000080)="01", 0x292e9)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
bind(0xffffffffffffffff, &(0x7f0000000180)=@isdn={0x22, 0x5, 0x7, 0x6, 0x4}, 0x80)

04:25:54 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

[ 2424.466373] loop6: detected capacity change from 0 to 40
04:25:54 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x7ffffffff000)

[ 2424.559373] syz-executor.6: attempt to access beyond end of device
[ 2424.559373] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.560985] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2424.580773] syz-executor.6: attempt to access beyond end of device
[ 2424.580773] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2424.618151] syz-executor.6: attempt to access beyond end of device
[ 2424.618151] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.619951] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2424.633937] loop0: detected capacity change from 0 to 40
[ 2424.642135] loop2: detected capacity change from 0 to 40
04:25:54 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1ab201, 0x44)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2424.739333] loop1: detected capacity change from 0 to 40
04:25:54 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
creat(&(0x7f0000000240)='./file1\x00', 0xa6)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2424.833317] syz-executor.0: attempt to access beyond end of device
[ 2424.833317] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.835353] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2424.852301] syz-executor.2: attempt to access beyond end of device
[ 2424.852301] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.854236] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2424.906126] loop6: detected capacity change from 0 to 40
[ 2424.962359] syz-executor.6: attempt to access beyond end of device
[ 2424.962359] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2424.963997] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2424.977165] syz-executor.6: attempt to access beyond end of device
[ 2424.977165] loop6: rw=0, sector=28, nr_sectors = 100 limit=40
[ 2425.001115] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:26:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
quotactl(0x0, &(0x7f0000000180)='./file0/file0\x00', r2, &(0x7f0000000240)="c833e6d379422b16c54af82760cdbc6f4b7e9b4f5c26bce4ec46ec99046ec547f701fff14c8d5c2e62bc11adc586dc76acdd65e520e812a97823a3e6023941ab776d58d1c333676a790d1a5b235cc5e7851d873f8a0bb78dbb572e5cf42702983031d90eb332ec726432e73bb4425b3b6a58a6dbf77ad61de1554267f50d2a24b1198cae518179acb36a03c948ca849f3a9ea99063716a2404bbd7dee20bee5d0827f4ea099242fd6907e5ea81f119566213fd1fa7b451ed9ed5ec8edff2e4f9523f757397e8db5e3c6e2d8de02445dc836cc672936035")
write(r1, &(0x7f0000000080)="01", 0x292e9)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x3)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
chdir(&(0x7f00000001c0)='./file0/file0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r4, 0x0, 0xfffffdef)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0))

[ 2439.301048] loop2: detected capacity change from 0 to 40
04:26:09 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x10000000000000)
chdir(&(0x7f0000000140)='./file0\x00')
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101102, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
fallocate(r1, 0x1, 0x1, 0x6)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x59, 0x0, 0x2, 0x80800, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x1f8, 0x108, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000180), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xff, 'syz0\x00', {0x2}}}}, {{@arp={@local, @multicast1, 0xffffffff, 0xffffffff, 0x10, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x5593, 0x0, 0x4, 0x6, 0x7ff, 0x6, 'ip6tnl0\x00', 'erspan0\x00', {}, {0xff}}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x8000, 0x80000000}}}, {{@arp={@multicast2, @broadcast, 0xff000000, 0xffffff00, 0x8, 0x0, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xfffd, 0x0, 0x4, 0x5, 0x8, 0x1, 'ip6tnl0\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x204}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x9, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
write(r2, &(0x7f0000000080)="01", 0x292e9)
write(r2, &(0x7f00000003c0)="adc0fb12fd19936c8dc50dd08e789be3c4e54b4db204c9d0fc29381f8a38d77df1dd4716f037c7f5df70ee64aca2e9a09f64bfadd5c8890fdf6eb996ede9153800cfc6e7825fac9e45ee70c19887ed9b1fa3a1a09997bf69353eed9e54219e192dd109c1641f7c353bfc2807514bb34d8030d9f7de22fa2b5747b19b77c21f2cfacc0b8951ae3507f02139bc5e5dfb2b37f43587937e8dd2db4aa6521f7d7c1e31359e8fcd0e38c6c65ecbab634d38f583ec7b1e3daab64348241b47f7c568f43f0c22b000d1a1219b241d46a7ef1911", 0xd0)
write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{0x0, 0x4, 0x80000000, 0x9e, 0x8, 0x5, 0x6, 0x3ff, 0x100, 0x1, 0x1, 0x7c, 0x7, 0x31, 0x10001}, 0x18, [0x0, 0x0, 0x0]})

04:26:09 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
openat(r1, &(0x7f0000000040)='./file1\x00', 0x800, 0xa)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x6a00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)

04:26:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0x0, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:26:09 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = mq_open(&(0x7f0000001680)='A\x10Q}\x1b\x9e\xfcF\xd6\xb9\xbb\x93~\x01\xdd\xd3\x058x9\xb2io\x88\xe4\xba\x8a;\x9a\x1d:C\v(\xc3v\xb7\x1f\x95rE\xd7\x9d\x9bR\xb9\xc8n\xa0\xeb[\x9bqx\xcf\xcb\x97\x13L\xbe\xe3\xd4r\x90\xab?\x1b\x89\xfcJ\x86\x0e\xb5K;\xad\xab\xd8\xdf\\\x8cF\xcf\xa4\xa7p0\x0f\xce\x15\x03p)\xc0C\xba\xb0&0\xf2\xfb\xf6\'\xe1M\x0ery_vzZ\x88\x15\xf5K\xda\x94q\x98\xa3\xc9@\xa7y\xc2C~\xfcS\x98\xb9\xa4\xda\x1f\f\xff\xb7\xdc,?\x0ez\xf6!\xf7\x14d\xaa\x93\\N!\\]ma\x00%\xd2ehdk4\xc7\xff\xc8^\xa5\xc6\xce\x9b\xb5\x1f|\xd0\xab\xc3^\xb40\xc0\xa6G\f\x0f+\xe1\xbd\xbeq\xe3', 0x882, 0x100, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000500)={{}, r3, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000})
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r3)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"01c184ef84c8e6af476470a96c34c422", 0x0, r3, {0x6, 0x8001}, {0x6, 0x7}, 0x8, [0x81, 0x3f, 0x3, 0x8, 0xbf30, 0xe0f, 0xffffffffffffffff, 0x1, 0x7fffffff, 0x4, 0x4, 0x1, 0x6, 0x3, 0x1, 0x4]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x181002, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x4)
socketpair(0x2, 0x2, 0x10000, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(0xffffffffffffffff, &(0x7f0000000180)=0x7fff, r5, &(0x7f0000000240)=0x8, 0x4b91, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r4, r0, 0x0, 0xfffffdef)

04:26:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\x00', 0x292e9)

04:26:09 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="2f0000644b0008010100044000666e0000000000000fc18e7d753d27e31e04751b61018ee01d4870a01e9a67639fcdcd6701891111cd2fbfd2c49911b95d42ecb80f9cc90000000000000001562a28f9eb719d9a4013b574f0f74e04dae6625b3a214cbe11d13c0eb40569048ceaab7ba8d1e21f441c94a935d1e3c362b74e", 0xfffffe55, 0x99d8}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(r2, &(0x7f0000000000)='./file1\x00', 0x84142, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)

04:26:09 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x400, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000b00)={0x0, 0x6, 0x3})

[ 2439.353955] loop0: detected capacity change from 0 to 40
[ 2439.368451] loop1: detected capacity change from 0 to 40
[ 2439.422124] bio_check_eod: 1 callbacks suppressed
[ 2439.422136] syz-executor.2: attempt to access beyond end of device
[ 2439.422136] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2439.423574] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2439.474868] syz-executor.0: attempt to access beyond end of device
[ 2439.474868] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2439.476046] Buffer I/O error on dev loop0, logical block 31, lost async page write
04:26:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)

[ 2439.572175] syz-executor.1: attempt to access beyond end of device
[ 2439.572175] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2439.574337] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:26:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0x0, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:26:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
openat(r1, &(0x7f0000000180)='./file0\x00', 0x40, 0xc8)
mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x1000, &(0x7f00000000c0)={0x89, 0x84, 0x0, {r3}}, 0x20)
sendfile(r0, r2, 0x0, 0xfffffdef)

04:26:09 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="05", 0x292e9)

[ 2439.695527] loop2: detected capacity change from 0 to 40
04:26:09 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x2dc084, 0x110)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)

[ 2439.842058] syz-executor.2: attempt to access beyond end of device
[ 2439.842058] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2439.843229] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2439.853537] loop0: detected capacity change from 0 to 40
04:26:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0x0, 0x0, 0x7, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2439.966393] loop1: detected capacity change from 0 to 40
[ 2440.023226] loop2: detected capacity change from 0 to 40
04:26:10 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0xffffffff, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:26:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x30be02, 0x3)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
truncate(&(0x7f0000000000)='./file0/file0\x00', 0x8)
openat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x400000, 0x1)
sendfile(r0, r2, 0x0, 0xfffffdef)

[ 2440.113487] syz-executor.0: attempt to access beyond end of device
[ 2440.113487] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2440.115990] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2440.120877] loop6: detected capacity change from 0 to 32767
04:26:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)

[ 2440.212072] FAT-fs (loop6): Unrecognized mount option "ÿÿ" or missing value
[ 2440.231977] syz-executor.2: attempt to access beyond end of device
[ 2440.231977] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2440.234287] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2440.237151] syz-executor.1: attempt to access beyond end of device
[ 2440.237151] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2440.239186] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2454.555461] loop2: detected capacity change from 0 to 40
04:26:24 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="06", 0x292e9)

04:26:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x80000000})
sendfile(r0, r2, 0x0, 0xfffffdef)

04:26:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '\x00'}, &(0x7f0000000180)='\x00', 0x1, 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)="01", 0x292e9)

04:26:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x0, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

04:26:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat(r1, &(0x7f0000000300)='./file0\x00', 0x8200, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=<r3=>0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xff, 0xf2, 0x3f, 0x7, 0x0, 0x8000, 0x1200, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp, 0x44020, 0x1, 0x3, 0x8, 0x2, 0x8, 0x8, 0x0, 0x6, 0x0, 0xffffffffffffff81}, r3, 0xb, r0, 0x3)
write(r2, &(0x7f0000000080)="01", 0x292e9)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/msg\x00', 0x0, 0x0)

04:26:24 executing program 3:
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x6004000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x100, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x1000000, 0x20010, r1, 0x10000000)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x52)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))
sendfile(r2, r0, 0x0, 0xfffffdef)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r6, &(0x7f0000000080)="01", 0x292e9)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6c6f6f73652c64656275673d307830303030203030303030303030303030c77665727369cc4fd17f31046bf6d04e494bb9136f6e3d3970323070302e552ff9be1154", @ANYRESDEC=r7, @ANYBLOB=',subj_type=)%!,\\},smackfsfloor=/,pcr=00000000000000000003,pcr=00000000000000000039,fsname=/-!-.-\\,fsuuid=5d1d904d-bc9c-4387-2f6d-ea29328f,\x00'])

04:26:24 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x100, 0x120)
write(r1, &(0x7f0000000080)="01", 0x292e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(r2, &(0x7f00000000c0)='./file1\x00', 0x303042, 0x1)
write(r3, &(0x7f0000000080)="01", 0x292e9)
openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
inotify_add_watch(r4, &(0x7f0000000180)='./file1\x00', 0x20)
sendfile(r1, r0, &(0x7f0000000000)=0xd9d, 0x4)
r5 = openat(r3, &(0x7f0000000040)='./file1\x00', 0x101042, 0x18c)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r6, &(0x7f0000000080)="01", 0x292e9)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x24042, 0x0)
sendfile(r5, r7, 0x0, 0xfffffdef)
fsetxattr$system_posix_acl(r5, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x6}, [{0x2, 0x1, 0xee01}, {0x2, 0x6}, {}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x4, 0xffffffffffffffff}], {}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x4}, {0x8, 0x2, 0xee00}], {0x10, 0x5}, {0x20, 0x3}}, 0x6c, 0x3)

04:26:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x2062, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00')
read$hiddev(0xffffffffffffffff, &(0x7f0000000bc0)=""/184, 0xb8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002140)={0x0, <r2=>0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r3, &(0x7f0000000080)="01", 0x292e9)
ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000380))
perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x3, 0x2, 0x7f, 0x7, 0x0, 0x6, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3f, 0x4}, 0x4a01e, 0x1ff, 0x1, 0x6, 0xf5, 0x3fffc, 0x4, 0x0, 0x2000003f, 0x0, 0x40}, r2, 0xf, 0xffffffffffffffff, 0x2)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

[ 2454.586792] loop6: detected capacity change from 0 to 40
[ 2454.600211] syz-executor.2: attempt to access beyond end of device
[ 2454.600211] loop2: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.601436] Buffer I/O error on dev loop2, logical block 31, lost async page write
[ 2454.620096] syz-executor.6: attempt to access beyond end of device
[ 2454.620096] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.621182] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2454.638902] loop1: detected capacity change from 0 to 40
[ 2454.648280] loop0: detected capacity change from 0 to 40
[ 2454.658289] syz-executor.6: attempt to access beyond end of device
[ 2454.658289] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.660060] Buffer I/O error on dev loop6, logical block 31, lost async page write
04:26:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x0, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2454.707354] syz-executor.6: attempt to access beyond end of device
[ 2454.707354] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.709032] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2454.732882] syz-executor.6: attempt to access beyond end of device
[ 2454.732882] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.734531] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2454.767209] syz-executor.6: attempt to access beyond end of device
[ 2454.767209] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.768109] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2454.785901] loop2: detected capacity change from 0 to 40
[ 2454.786260] syz-executor.1: attempt to access beyond end of device
[ 2454.786260] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.788047] Buffer I/O error on dev loop1, logical block 31, lost async page write
[ 2454.788137] syz-executor.0: attempt to access beyond end of device
[ 2454.788137] loop0: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.791237] Buffer I/O error on dev loop0, logical block 31, lost async page write
[ 2454.791914] syz-executor.6: attempt to access beyond end of device
[ 2454.791914] loop6: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.793316] Buffer I/O error on dev loop6, logical block 31, lost async page write
[ 2454.866429] syz-executor.1: attempt to access beyond end of device
[ 2454.866429] loop1: rw=2049, sector=124, nr_sectors = 4 limit=40
[ 2454.867362] Buffer I/O error on dev loop1, logical block 31, lost async page write
04:26:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
io_setup(0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/136, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00')
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000240)={0x2, 0xff, 0x7f, 0x2, 0x8, 0xfff9})
read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
syz_open_dev$tty20(0xc, 0x4, 0x0)
copy_file_range(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffc0, 0xffffffffffffffff, 0x0, 0x9b, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000300)=0x40000000)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x0, 0x10c}, 0x18)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x4})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x220)
mkdir(&(0x7f0000000140)='./file1\x00', 0x20)

04:26:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000000)='./file1\x00', 0x10000, 0x8c)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x300, 0x186)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
r4 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000180)={0x3, 0x4d5, 0x3})
sendfile(r1, r3, 0x0, 0xfffffdef)

04:26:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
syz_io_uring_setup(0x203e, &(0x7f0000000000)={0x0, 0x1b4a, 0x2, 0x1, 0x388, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0))

04:26:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\b', 0x292e9)

04:26:25 executing program 1:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x100, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
r2 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10)
sendfile(r1, r2, &(0x7f0000000300)=0x3, 0x6)
mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@aname={'aname', 0x3d, 'vfat\x00'}}, {@cache_none}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xffffffffffdffffc}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$vcsu(&(0x7f0000000440), 0x3157e16c, 0x980)
ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r6, &(0x7f0000000080)="01", 0x292e9)
r7 = openat(r6, &(0x7f0000000000)='./file0\x00', 0x86200, 0x1ea)
write(r5, &(0x7f0000000080)="01", 0x292e9)
fallocate(r6, 0x10, 0x9, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r8=>r3}, './file0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8)

04:26:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x0, 0x0, 0x2}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2455.008420] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 2 (only 16 groups)
04:26:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000013c0)="601c131094956d6b646f7366d8a02b00dfcf46c95b7179db8045aa38d52008", 0x1f, 0xffffffffffffffff}, {0x0, 0x0, 0x2000000000002800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r1, &(0x7f0000000080)="01", 0x292e9)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001440)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000001540)=0xe8)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1f9b10a5, 0x3, &(0x7f0000000180)=[{&(0x7f0000000240)="201463b4796bcbbfd3cb59e0aa3d23ed0b3ad660db1840aafc759ffff778b3ec93ee751ef8314d4c3ee2f8ad777326987c1c8a94cd386d6f9a3e431e64e1d0e9552815de0d78e66e2f974eacb861b01043fdd5d066ae98937a8d56cca8cf112a194105ecd62f38a4094ca45290a52e1f82ff4c195c33cd1c0de3dedd6ae818d44f6250ed20976516a8e7c8db1baf7daf691277d63c603d49363e02776ab689cfc77459865c3917e5a89b1b72ac31b88e387d29a95ed940", 0xb7, 0x400}, {&(0x7f00000000c0)="b5eda1334df2036c96", 0x9}, {&(0x7f0000000300)="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", 0x1000, 0x10000}], 0x800, &(0x7f0000001580)={[{@rodir}, {@shortname_win95}], [{@uid_eq={'uid', 0x3d, r2}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@pcr={'pcr', 0x3d, 0x24}}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r3, 0x0, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r4, &(0x7f0000000080)="01", 0x292e9)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f0000001300)={0x3, 0x1, 0x0, 'queue0\x00', 0x1f})

[ 2455.156527] loop0: detected capacity change from 0 to 40
[ 2455.157430] loop1: detected capacity change from 0 to 40
[ 2455.192287] loop6: detected capacity change from 0 to 264192
[ 2455.219596] FAT-fs (loop6): bogus number of reserved sectors
[ 2455.219998] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 2455.224007] loop2: detected capacity change from 0 to 40
[ 2455.319155] loop6: detected capacity change from 0 to 264192
[ 2455.333617] FAT-fs (loop6): Unrecognized mount option "uid=00000000000000060929" or missing value
04:26:25 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r0, &(0x7f0000000080)='\n', 0x292e9)

[ 2455.374212] 9pnet_fd: Insufficient options for proto=fd
04:26:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write(r2, &(0x7f0000000080)="01", 0x292e9)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x1000, 0x8800, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x6, 0x10000}, 0x40180, 0x1000, 0x8, 0x3, 0x1, 0xc0, 0xa2, 0x0, 0x7}, r1, 0x3, r2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[ 2455.398323] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 2 (only 16 groups)
[ 2455.479960] loop6: detected capacity change from 0 to 264192
[ 2455.489508] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
[ 2455.501553] loop0: detected capacity change from 0 to 40
[ 2455.528515] loop2: detected capacity change from 0 to 40
[ 2455.540403] loop6: detected capacity change from 0 to 264192
[ 2455.541991] FAT-fs (loop6): Unrecognized mount option "uid=00000000000000060929" or missing value

VM DIAGNOSIS:
04:31:34  Registers:
info registers vcpu 0
RAX=ffffffff84442e80 RBX=ffffffff854328c0 RCX=ffffffff84423c22 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff85407e20
R8 =0000000000000001 R9 =ffff88806ce34f83 R10=ffffed100d9c69f0 R11=0000000000000001
R12=fffffbfff0a86518 R13=ffffffff85d0c210 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff84442e8f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0824e16000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0824e14000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f215b0ac010 CR3=000000000f5ca000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000000ff00000000000000000000
XMM02=00000000ff0000000000000000000000 XMM03=7500736461657268742e70756f726763
XMM04=00000000000000000000000000000004 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=703e2d73004c414954494e495f544e45 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff84442e80 RBX=ffff888008d85040 RCX=ffffffff84423c22 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff888008df7e58
R8 =0000000000000001 R9 =ffff88806cf34f83 R10=ffffed100d9e69f0 R11=0000000000000001
R12=ffffed10011b0a08 R13=ffffffff85d0c210 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff84442e8f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe2d38cc0000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe2d38cbe000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055eee81f3cd8 CR3=00000000161ea000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004159a74000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000