vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:21 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1008)

[ 2417.340816] loop7: detected capacity change from 0 to 40
[ 2417.341420] loop3: detected capacity change from 0 to 40
[ 2417.345374] FAT-fs (loop7): invalid media value (0x00)
[ 2417.345776] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2417.354732] loop6: detected capacity change from 0 to 40
[ 2417.364596] loop4: detected capacity change from 0 to 40
[ 2417.401319] loop0: detected capacity change from 0 to 40
03:19:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:19:21 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:19:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2417.570644] loop7: detected capacity change from 0 to 40
[ 2417.593571] FAT-fs (loop7): invalid media value (0x00)
[ 2417.594322] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2417.618001] loop4: detected capacity change from 0 to 40
03:19:21 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2417.652880] loop3: detected capacity change from 0 to 40
[ 2417.688304] loop6: detected capacity change from 0 to 40
03:19:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2417.715560] loop0: detected capacity change from 0 to 40
03:19:21 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2417.823781] loop7: detected capacity change from 0 to 40
[ 2417.835602] FAT-fs (loop7): invalid media value (0x00)
[ 2417.836380] FAT-fs (loop7): Can't find a valid FAT filesystem
03:19:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x0, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:19:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1100)

03:19:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:19:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:36 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:19:36 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:37 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2433.121955] loop3: detected capacity change from 0 to 40
[ 2433.125674] loop0: detected capacity change from 0 to 40
[ 2433.146910] loop4: detected capacity change from 0 to 40
[ 2433.153664] loop7: detected capacity change from 0 to 40
[ 2433.154573] loop6: detected capacity change from 0 to 40
[ 2433.168370] FAT-fs (loop7): invalid media value (0x00)
[ 2433.169364] FAT-fs (loop7): Can't find a valid FAT filesystem
03:19:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:19:37 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:19:37 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:37 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:37 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:37 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2433.389181] loop7: detected capacity change from 0 to 40
[ 2433.409458] FAT-fs (loop7): invalid media value (0x00)
[ 2433.410205] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2433.431753] loop3: detected capacity change from 0 to 40
[ 2433.432555] loop6: detected capacity change from 0 to 40
[ 2433.437064] loop4: detected capacity change from 0 to 40
[ 2433.495248] loop0: detected capacity change from 0 to 40
03:19:37 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2433.649068] loop7: detected capacity change from 0 to 40
[ 2433.657559] FAT-fs (loop7): bogus number of FAT sectors
[ 2433.658331] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2447.341368] loop7: detected capacity change from 0 to 40
[ 2447.342965] FAT-fs (loop7): bogus number of FAT sectors
[ 2447.343405] FAT-fs (loop7): Can't find a valid FAT filesystem
03:19:51 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x2000)

03:19:51 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x0, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:19:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:19:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:19:51 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2447.364720] loop6: detected capacity change from 0 to 40
[ 2447.365622] loop3: detected capacity change from 0 to 40
[ 2447.395545] loop4: detected capacity change from 0 to 40
[ 2447.401546] loop0: detected capacity change from 0 to 40
03:19:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:19:51 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:51 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:19:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2447.515289] loop7: detected capacity change from 0 to 40
03:19:51 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:19:51 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2447.548813] FAT-fs (loop7): bogus number of FAT sectors
[ 2447.549800] FAT-fs (loop7): Can't find a valid FAT filesystem
[ 2447.555536] loop3: detected capacity change from 0 to 40
[ 2447.568556] loop4: detected capacity change from 0 to 40
[ 2447.643873] syz-executor.4: attempt to access beyond end of device
[ 2447.643873] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2447.645681] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2447.651349] loop0: detected capacity change from 0 to 40
[ 2447.670957] loop6: detected capacity change from 0 to 40
03:19:51 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:19:51 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2447.831360] loop7: detected capacity change from 0 to 40
03:20:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:20:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x0, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2461.484951] loop6: detected capacity change from 0 to 40
[ 2461.491982] loop7: detected capacity change from 0 to 40
03:20:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x8100)

03:20:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2461.504883] loop3: detected capacity change from 0 to 40
[ 2461.536897] loop0: detected capacity change from 0 to 40
[ 2461.538786] loop4: detected capacity change from 0 to 40
03:20:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2461.621395] syz-executor.4: attempt to access beyond end of device
[ 2461.621395] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2461.622754] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:20:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2461.647381] loop7: detected capacity change from 0 to 40
03:20:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:20:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2461.741916] loop3: detected capacity change from 0 to 40
[ 2461.804494] loop0: detected capacity change from 0 to 40
03:20:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x9a00)

[ 2461.806346] loop6: detected capacity change from 0 to 40
03:20:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2461.820775] loop7: detected capacity change from 0 to 40
03:20:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2461.835235] loop4: detected capacity change from 0 to 40
[ 2461.905116] syz-executor.4: attempt to access beyond end of device
[ 2461.905116] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2461.906535] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:20:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2461.920499] loop3: detected capacity change from 0 to 40
03:20:05 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2461.997525] loop7: detected capacity change from 0 to 40
[ 2462.018401] loop0: detected capacity change from 0 to 40
03:20:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:20 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:20:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:20:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:20 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:20 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xd300)

03:20:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2476.656084] loop7: detected capacity change from 0 to 40
[ 2476.674021] loop4: detected capacity change from 0 to 40
[ 2476.683010] loop3: detected capacity change from 0 to 40
[ 2476.683984] loop0: detected capacity change from 0 to 40
[ 2476.697269] syz-executor.4: attempt to access beyond end of device
[ 2476.697269] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2476.698299] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2476.709847] loop6: detected capacity change from 0 to 40
03:20:20 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2476.795725] loop4: detected capacity change from 0 to 40
03:20:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2476.845314] loop7: detected capacity change from 0 to 40
[ 2476.860682] loop3: detected capacity change from 0 to 40
[ 2476.879265] loop6: detected capacity change from 0 to 40
03:20:20 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:20 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xff03)

03:20:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2476.907118] syz-executor.4: attempt to access beyond end of device
[ 2476.907118] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2476.908959] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:20:20 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2476.959902] loop7: detected capacity change from 0 to 40
[ 2477.005945] loop0: detected capacity change from 0 to 40
03:20:34 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2490.354077] loop6: detected capacity change from 0 to 40
[ 2490.362476] loop4: detected capacity change from 0 to 40
[ 2490.369608] loop3: detected capacity change from 0 to 40
03:20:34 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:20:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x34000)

03:20:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2490.401355] loop7: detected capacity change from 0 to 40
03:20:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2490.438747] loop0: detected capacity change from 0 to 40
03:20:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2490.481240] loop3: detected capacity change from 0 to 40
[ 2490.483289] syz-executor.4: attempt to access beyond end of device
[ 2490.483289] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2490.484996] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2490.532520] loop7: detected capacity change from 0 to 40
03:20:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:49 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2505.103165] loop4: detected capacity change from 0 to 40
[ 2505.112368] loop0: detected capacity change from 0 to 40
[ 2505.114002] loop6: detected capacity change from 0 to 40
[ 2505.116181] loop3: detected capacity change from 0 to 40
[ 2505.122322] loop7: detected capacity change from 0 to 40
03:20:49 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:20:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:20:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:49 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2505.193900] syz-executor.4: attempt to access beyond end of device
[ 2505.193900] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2505.194817] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:20:49 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:20:49 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2505.283608] loop0: detected capacity change from 0 to 40
[ 2505.298491] loop7: detected capacity change from 0 to 40
03:20:49 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2505.322407] loop3: detected capacity change from 0 to 40
[ 2505.337812] loop4: detected capacity change from 0 to 40
[ 2505.342343] loop6: detected capacity change from 0 to 40
03:20:49 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:20:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

03:20:49 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

[ 2505.440255] syz-executor.4: attempt to access beyond end of device
[ 2505.440255] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2505.442012] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:20:49 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2505.502806] loop3: detected capacity change from 0 to 40
[ 2505.514794] loop7: detected capacity change from 0 to 40
[ 2505.541884] loop0: detected capacity change from 0 to 40
03:21:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

03:21:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x80000)

03:21:01 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x0, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:21:01 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:01 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

03:21:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2517.464545] loop3: detected capacity change from 0 to 40
[ 2517.466714] loop6: detected capacity change from 0 to 40
[ 2517.485057] loop0: detected capacity change from 0 to 40
[ 2517.488716] loop4: detected capacity change from 0 to 40
03:21:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

[ 2517.521031] loop7: detected capacity change from 0 to 40
03:21:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2517.565609] syz-executor.4: attempt to access beyond end of device
[ 2517.565609] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2517.567553] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:21:01 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

[ 2517.585009] loop3: detected capacity change from 0 to 40
[ 2517.610692] loop6: detected capacity change from 0 to 40
03:21:01 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(0x0, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:01 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

03:21:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:01 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:01 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 2517.722549] loop3: detected capacity change from 0 to 40
[ 2517.723286] loop0: detected capacity change from 0 to 40
[ 2517.732918] loop4: detected capacity change from 0 to 40
[ 2517.737104] loop6: detected capacity change from 0 to 40
[ 2517.752104] loop7: detected capacity change from 0 to 40
[ 2517.786977] syz-executor.4: attempt to access beyond end of device
[ 2517.786977] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2517.787979] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:21:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

03:21:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x0, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2529.280850] loop3: detected capacity change from 0 to 40
03:21:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x200000)

03:21:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2529.299926] loop6: detected capacity change from 0 to 40
[ 2529.301102] loop0: detected capacity change from 0 to 40
[ 2529.304095] loop4: detected capacity change from 0 to 40
03:21:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:13 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 2529.318853] loop7: detected capacity change from 0 to 40
03:21:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:13 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2529.384805] syz-executor.4: attempt to access beyond end of device
[ 2529.384805] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
03:21:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2529.385720] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:21:13 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

03:21:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2529.444068] loop7: detected capacity change from 0 to 40
[ 2529.449597] loop6: detected capacity change from 0 to 40
03:21:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 2529.512568] loop0: detected capacity change from 0 to 40
[ 2529.564020] loop4: detected capacity change from 0 to 40
[ 2529.610728] loop3: detected capacity change from 0 to 40
03:21:27 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x400300)

03:21:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2543.492890] loop3: detected capacity change from 0 to 40
03:21:27 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:21:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:21:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:27 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x0, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2543.529268] loop7: detected capacity change from 0 to 40
[ 2543.535847] loop6: detected capacity change from 0 to 40
[ 2543.543661] loop0: detected capacity change from 0 to 40
[ 2543.559559] loop4: detected capacity change from 0 to 40
03:21:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:21:27 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

03:21:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:27 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:21:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2543.683253] loop6: detected capacity change from 0 to 40
[ 2543.693992] loop3: detected capacity change from 0 to 40
[ 2543.728874] loop0: detected capacity change from 0 to 40
[ 2543.737636] loop7: detected capacity change from 0 to 40
03:21:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:21:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[ 2543.786003] loop4: detected capacity change from 0 to 40
[ 2543.818790] loop3: detected capacity change from 0 to 40
[ 2543.819534] loop6: detected capacity change from 0 to 40
03:21:39 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1000000)

03:21:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:21:39 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:21:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2555.857288] loop6: detected capacity change from 0 to 40
03:21:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

03:21:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x80000)

[ 2555.896421] loop0: detected capacity change from 0 to 40
[ 2555.900956] loop4: detected capacity change from 0 to 40
[ 2555.902062] loop7: detected capacity change from 0 to 40
03:21:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:39 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

03:21:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2556.122186] loop4: detected capacity change from 0 to 40
[ 2556.127505] loop0: detected capacity change from 0 to 40
[ 2556.145481] loop7: detected capacity change from 0 to 40
[ 2556.168658] loop6: detected capacity change from 0 to 40
03:21:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, 0x0, 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:40 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

03:21:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

[ 2556.353798] loop4: detected capacity change from 0 to 40
[ 2556.357279] loop0: detected capacity change from 0 to 40
[ 2556.368771] loop7: detected capacity change from 0 to 40
[ 2556.403988] loop6: detected capacity change from 0 to 40
03:21:56 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1010000)

03:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:56 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x80000)

03:21:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

[ 2572.319626] loop6: detected capacity change from 0 to 40
[ 2572.327528] loop7: detected capacity change from 0 to 40
03:21:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

03:21:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:56 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x400300)

03:21:56 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2572.378927] loop4: detected capacity change from 0 to 40
[ 2572.392682] loop0: detected capacity change from 0 to 40
[ 2572.422341] syz-executor.4: attempt to access beyond end of device
[ 2572.422341] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.423282] Buffer I/O error on dev loop4, logical block 10, lost async page write
03:21:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:21:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x10000027f)

03:21:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 2572.548907] loop7: detected capacity change from 0 to 40
[ 2572.556952] loop6: detected capacity change from 0 to 40
[ 2572.602835] loop4: detected capacity change from 0 to 40
03:21:56 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)

[ 2572.682961] syz-executor.4: attempt to access beyond end of device
[ 2572.682961] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.683971] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2572.685956] loop0: detected capacity change from 0 to 40
03:21:56 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 2572.698420] loop7: detected capacity change from 0 to 40
03:21:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2572.798799] loop4: detected capacity change from 0 to 40
03:21:56 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[ 2572.838601] loop6: detected capacity change from 0 to 40
[ 2572.891181] syz-executor.4: attempt to access beyond end of device
[ 2572.891181] loop4: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2572.892848] Buffer I/O error on dev loop4, logical block 10, lost async page write
[ 2572.970773] loop0: detected capacity change from 0 to 40
[ 2587.613614] loop4: detected capacity change from 0 to 40
03:22:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

03:22:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)

03:22:11 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x2000000)

03:22:11 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x80000)

03:22:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:22:11 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:11 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 2587.647891] loop7: detected capacity change from 0 to 40
[ 2587.665043] loop0: detected capacity change from 0 to 40
[ 2587.679560] loop6: detected capacity change from 0 to 40
03:22:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2587.748846] loop4: detected capacity change from 0 to 40
03:22:11 executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:22:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)

03:22:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

[ 2587.828999] loop7: detected capacity change from 0 to 40
[ 2587.874453] loop0: detected capacity change from 0 to 40
[ 2587.875006] loop6: detected capacity change from 0 to 40
03:22:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

03:22:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[ 2588.018767] loop6: detected capacity change from 0 to 40
03:22:24 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2600.910067] loop4: detected capacity change from 0 to 40
[ 2600.921527] loop6: detected capacity change from 0 to 40
03:22:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:22:24 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1008)

03:22:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xd300)

03:22:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:22:24 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x0, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:24 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x2010000)

[ 2600.947818] loop3: detected capacity change from 0 to 40
03:22:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

03:22:24 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xd300)

03:22:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

03:22:25 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2601.108853] loop6: detected capacity change from 0 to 40
[ 2601.166320] loop4: detected capacity change from 0 to 40
03:22:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffdef)

[ 2601.302222] loop4: detected capacity change from 0 to 40
03:22:25 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x810)

03:22:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 2601.453318] loop4: detected capacity change from 0 to 40
[ 2612.907546] loop4: detected capacity change from 0 to 40
03:22:36 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:36 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x0, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:36 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x8)

03:22:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x0)

03:22:36 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x810)

03:22:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x3000000)

03:22:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x0)

[ 2613.074192] loop4: detected capacity change from 0 to 40
03:22:37 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:37 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x8)

03:22:37 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x4000000)

03:22:38 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x0, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:38 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:38 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 2614.846216] loop4: detected capacity change from 0 to 40
03:22:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:38 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x0, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:38 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:22:38 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:38 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 1)

03:22:38 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 1)

[ 2615.116777] loop6: detected capacity change from 0 to 40
[ 2615.119744] loop7: detected capacity change from 0 to 40
[ 2615.137492] loop4: detected capacity change from 0 to 40
[ 2615.152525] FAULT_INJECTION: forcing a failure.
[ 2615.152525] name failslab, interval 1, probability 0, space 0, times 1
[ 2615.153527] CPU: 1 PID: 11336 Comm: syz-executor.6 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2615.154222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2615.154910] Call Trace:
[ 2615.155137]  <TASK>
[ 2615.155345]  dump_stack_lvl+0xc1/0xf0
[ 2615.155721]  should_fail_ex+0x4b4/0x5b0
[ 2615.156079]  should_failslab+0x9/0x20
[ 2615.156439]  __kmem_cache_alloc_node+0x66/0x310
[ 2615.156860]  ? alloc_pipe_info+0x10e/0x590
[ 2615.157240]  kmalloc_trace+0x26/0xc0
[ 2615.157571]  alloc_pipe_info+0x10e/0x590
[ 2615.157961]  splice_direct_to_actor+0x796/0x9d0
[ 2615.158395]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2615.158871]  ? inode_security+0x105/0x140
[ 2615.159424]  ? avc_policy_seqno+0x9/0x20
[ 2615.159804]  ? selinux_file_permission+0x9c/0x520
[ 2615.160239]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2615.160697]  ? security_file_permission+0xb5/0xe0
[ 2615.161145]  do_splice_direct+0x1bb/0x290
[ 2615.161531]  ? __pfx_do_splice_direct+0x10/0x10
[ 2615.161963]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2615.162442]  ? lock_is_held_type+0x9f/0x120
[ 2615.162830]  do_sendfile+0xb67/0x1300
[ 2615.163175]  ? __pfx_do_sendfile+0x10/0x10
[ 2615.163559]  __x64_sys_sendfile64+0x1d5/0x210
[ 2615.163973]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2615.164420]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2615.164884]  do_syscall_64+0x3f/0x90
[ 2615.165240]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2615.165685] RIP: 0033:0x7fd248e15b19
[ 2615.166014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2615.167524] RSP: 002b:00007fd24638b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2615.168165] RAX: ffffffffffffffda RBX: 00007fd248f28f60 RCX: 00007fd248e15b19
[ 2615.168783] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2615.169398] RBP: 00007fd24638b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2615.170012] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2615.170621] R13: 00007ffc9d68704f R14: 00007fd24638b300 R15: 0000000000022000
[ 2615.171236]  </TASK>
[ 2615.199970] FAULT_INJECTION: forcing a failure.
[ 2615.199970] name failslab, interval 1, probability 0, space 0, times 0
[ 2615.201055] CPU: 1 PID: 11340 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2615.201746] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2615.202460] Call Trace:
[ 2615.202687]  <TASK>
[ 2615.202889]  dump_stack_lvl+0xc1/0xf0
[ 2615.203244]  should_fail_ex+0x4b4/0x5b0
[ 2615.203600]  should_failslab+0x9/0x20
[ 2615.203942]  __kmem_cache_alloc_node+0x66/0x310
[ 2615.204363]  ? alloc_pipe_info+0x10e/0x590
[ 2615.204750]  kmalloc_trace+0x26/0xc0
[ 2615.205088]  alloc_pipe_info+0x10e/0x590
[ 2615.205454]  splice_direct_to_actor+0x796/0x9d0
[ 2615.205891]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2615.206336]  ? inode_security+0x105/0x140
[ 2615.206708]  ? avc_policy_seqno+0x9/0x20
[ 2615.207083]  ? selinux_file_permission+0x9c/0x520
[ 2615.207526]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2615.207993]  ? security_file_permission+0xb5/0xe0
[ 2615.208442]  do_splice_direct+0x1bb/0x290
[ 2615.208828]  ? __pfx_do_splice_direct+0x10/0x10
[ 2615.209258]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2615.209727]  ? lock_is_held_type+0x9f/0x120
[ 2615.210148]  do_sendfile+0xb67/0x1300
[ 2615.210504]  ? __pfx_do_sendfile+0x10/0x10
[ 2615.210885]  __x64_sys_sendfile64+0x1d5/0x210
[ 2615.211295]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2615.211739]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2615.212223]  do_syscall_64+0x3f/0x90
[ 2615.212588]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2615.213041] RIP: 0033:0x7fc1c5d62b19
[ 2615.213385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2615.214959] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2615.215622] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2615.216238] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2615.216848] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2615.217452] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2615.218077] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2615.218704]  </TASK>
03:22:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 2)

03:22:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 2)

[ 2615.359025] loop6: detected capacity change from 0 to 40
[ 2615.395953] loop4: detected capacity change from 0 to 40
03:22:39 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x8100000)

03:22:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 1)

03:22:39 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2615.409534] syz-executor.6: attempt to access beyond end of device
[ 2615.409534] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2615.410493] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2615.461589] loop7: detected capacity change from 0 to 40
[ 2615.486419] FAULT_INJECTION: forcing a failure.
[ 2615.486419] name failslab, interval 1, probability 0, space 0, times 0
[ 2615.487542] CPU: 0 PID: 11349 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2615.488326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2615.489098] Call Trace:
[ 2615.489364]  <TASK>
[ 2615.489601]  dump_stack_lvl+0xc1/0xf0
[ 2615.490020]  should_fail_ex+0x4b4/0x5b0
[ 2615.490443]  should_failslab+0x9/0x20
[ 2615.490838]  __kmem_cache_alloc_node+0x66/0x310
[ 2615.491308]  ? alloc_pipe_info+0x10e/0x590
[ 2615.491764]  kmalloc_trace+0x26/0xc0
[ 2615.492149]  alloc_pipe_info+0x10e/0x590
[ 2615.492581]  splice_direct_to_actor+0x796/0x9d0
[ 2615.493074]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2615.493588]  ? inode_security+0x105/0x140
[ 2615.494023]  ? avc_policy_seqno+0x9/0x20
[ 2615.494454]  ? selinux_file_permission+0x9c/0x520
[ 2615.494937]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2615.495487]  ? security_file_permission+0xb5/0xe0
[ 2615.495997]  do_splice_direct+0x1bb/0x290
[ 2615.496440]  ? __pfx_do_splice_direct+0x10/0x10
[ 2615.496924]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2615.497482]  ? lock_is_held_type+0x9f/0x120
[ 2615.497950]  do_sendfile+0xb67/0x1300
[ 2615.498363]  ? __pfx_do_sendfile+0x10/0x10
[ 2615.498827]  __x64_sys_sendfile64+0x1d5/0x210
[ 2615.499286]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2615.499808]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2615.500337]  do_syscall_64+0x3f/0x90
[ 2615.500743]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2615.501254] RIP: 0033:0x7f435bfddb19
[ 2615.501634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2615.503301] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2615.504044] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2615.504735] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2615.505419] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2615.506131] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2615.506815] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2615.507530]  </TASK>
03:22:52 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9, 0x9}, 0x80, 0x7, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00') (fail_nth: 1)

03:22:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 2)

03:22:52 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 3)

03:22:52 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:22:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 3)

03:22:52 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x0, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:22:52 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xa000000)

[ 2628.839237] loop4: detected capacity change from 0 to 40
[ 2628.849734] loop7: detected capacity change from 0 to 40
[ 2628.852585] loop3: detected capacity change from 0 to 40
[ 2628.852797] FAULT_INJECTION: forcing a failure.
[ 2628.852797] name failslab, interval 1, probability 0, space 0, times 0
[ 2628.854203] CPU: 0 PID: 11370 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2628.854756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2628.855307] Call Trace:
[ 2628.855492]  <TASK>
[ 2628.855659]  dump_stack_lvl+0xc1/0xf0
[ 2628.855952]  should_fail_ex+0x4b4/0x5b0
[ 2628.856248]  ? alloc_pipe_info+0x1e9/0x590
[ 2628.856549]  should_failslab+0x9/0x20
[ 2628.856826]  __kmem_cache_alloc_node+0x66/0x310
[ 2628.857162]  ? alloc_pipe_info+0x1e9/0x590
[ 2628.857461]  ? alloc_pipe_info+0x10e/0x590
[ 2628.857771]  ? alloc_pipe_info+0x1e9/0x590
[ 2628.858080]  __kmalloc+0x4d/0x160
[ 2628.858350]  alloc_pipe_info+0x1e9/0x590
[ 2628.858660]  splice_direct_to_actor+0x796/0x9d0
[ 2628.859010]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2628.859386]  ? inode_security+0x105/0x140
[ 2628.859703]  ? avc_policy_seqno+0x9/0x20
[ 2628.860016]  ? selinux_file_permission+0x9c/0x520
[ 2628.860383]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2628.860770]  ? security_file_permission+0xb5/0xe0
[ 2628.861150]  do_splice_direct+0x1bb/0x290
[ 2628.861473]  ? __pfx_do_splice_direct+0x10/0x10
[ 2628.861832]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2628.862252]  ? lock_is_held_type+0x9f/0x120
[ 2628.862591]  do_sendfile+0xb67/0x1300
[ 2628.862894]  ? __pfx_do_sendfile+0x10/0x10
[ 2628.863229]  __x64_sys_sendfile64+0x1d5/0x210
[ 2628.863568]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2628.863943]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2628.864339]  do_syscall_64+0x3f/0x90
[ 2628.864634]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2628.865004] RIP: 0033:0x7fc1c5d62b19
[ 2628.865284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2628.866547] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2628.867081] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2628.867595] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2628.868095] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2628.868597] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2628.869093] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2628.869632]  </TASK>
[ 2628.890953] loop6: detected capacity change from 0 to 40
[ 2628.906835] FAULT_INJECTION: forcing a failure.
[ 2628.906835] name failslab, interval 1, probability 0, space 0, times 0
[ 2628.908303] CPU: 1 PID: 11373 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2628.909305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2628.910337] Call Trace:
[ 2628.910670]  <TASK>
[ 2628.910969]  dump_stack_lvl+0xc1/0xf0
[ 2628.911484]  should_fail_ex+0x4b4/0x5b0
[ 2628.912006]  ? getname_flags.part.0+0x50/0x4f0
[ 2628.912596]  should_failslab+0x9/0x20
[ 2628.913088]  kmem_cache_alloc+0x61/0x390
[ 2628.913618]  ? fput+0x2f/0x1a0
[ 2628.914073]  getname_flags.part.0+0x50/0x4f0
[ 2628.914658]  __x64_sys_unlink+0xb5/0x110
[ 2628.915183]  do_syscall_64+0x3f/0x90
[ 2628.915683]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2628.916340] RIP: 0033:0x7f74634d9b19
[ 2628.916879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2628.919385] RSP: 002b:00007f7460a4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 2628.920450] RAX: ffffffffffffffda RBX: 00007f74635ecf60 RCX: 00007f74634d9b19
[ 2628.921456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 2628.922490] RBP: 00007f7460a4f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2628.923510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2628.924531] R13: 00007ffcc6f4d40f R14: 00007f7460a4f300 R15: 0000000000022000
[ 2628.925592]  </TASK>
03:22:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 4)

[ 2628.957584] FAULT_INJECTION: forcing a failure.
[ 2628.957584] name failslab, interval 1, probability 0, space 0, times 0
[ 2628.959205] CPU: 1 PID: 11376 Comm: syz-executor.6 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2628.960367] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2628.961446] Call Trace:
[ 2628.961823]  <TASK>
[ 2628.962154]  dump_stack_lvl+0xc1/0xf0
[ 2628.962738]  should_fail_ex+0x4b4/0x5b0
[ 2628.963305]  ? alloc_pipe_info+0x1e9/0x590
[ 2628.963940]  should_failslab+0x9/0x20
[ 2628.964487]  __kmem_cache_alloc_node+0x66/0x310
[ 2628.965191]  ? alloc_pipe_info+0x1e9/0x590
[ 2628.965775]  ? alloc_pipe_info+0x10e/0x590
[ 2628.966410]  ? alloc_pipe_info+0x1e9/0x590
[ 2628.966997]  __kmalloc+0x4d/0x160
[ 2628.967533]  alloc_pipe_info+0x1e9/0x590
[ 2628.968132]  splice_direct_to_actor+0x796/0x9d0
[ 2628.968839]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2628.969557]  ? inode_security+0x105/0x140
[ 2628.970189]  ? avc_policy_seqno+0x9/0x20
[ 2628.970797]  ? selinux_file_permission+0x9c/0x520
[ 2628.971507]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2628.972252]  ? security_file_permission+0xb5/0xe0
[ 2628.972962]  do_splice_direct+0x1bb/0x290
[ 2628.973572]  ? __pfx_do_splice_direct+0x10/0x10
[ 2628.974318]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2628.975065]  ? lock_is_held_type+0x9f/0x120
[ 2628.975744]  do_sendfile+0xb67/0x1300
[ 2628.976304]  ? __pfx_do_sendfile+0x10/0x10
[ 2628.976940]  __x64_sys_sendfile64+0x1d5/0x210
[ 2628.977589]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2628.978348]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2628.979092]  do_syscall_64+0x3f/0x90
[ 2628.979669]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2628.980382] RIP: 0033:0x7fd248e15b19
[ 2628.980915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2628.983306] RSP: 002b:00007fd24638b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2628.984345] RAX: ffffffffffffffda RBX: 00007fd248f28f60 RCX: 00007fd248e15b19
[ 2628.985314] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2628.986303] RBP: 00007fd24638b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2628.987270] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2628.988235] R13: 00007ffc9d68704f R14: 00007fd24638b300 R15: 0000000000022000
[ 2628.989236]  </TASK>
[ 2629.004445] loop4: detected capacity change from 0 to 40
03:22:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00') (fail_nth: 2)

03:22:52 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 3)

[ 2629.077662] loop3: detected capacity change from 0 to 40
03:22:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 5)

[ 2629.109743] loop7: detected capacity change from 0 to 40
[ 2629.134983] FAULT_INJECTION: forcing a failure.
[ 2629.134983] name failslab, interval 1, probability 0, space 0, times 0
[ 2629.135799] CPU: 0 PID: 11382 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2629.136357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2629.136904] Call Trace:
[ 2629.137095]  <TASK>
[ 2629.137264]  dump_stack_lvl+0xc1/0xf0
[ 2629.137556]  should_fail_ex+0x4b4/0x5b0
[ 2629.137858]  ? alloc_pipe_info+0x1e9/0x590
[ 2629.138176]  should_failslab+0x9/0x20
[ 2629.138450]  __kmem_cache_alloc_node+0x66/0x310
[ 2629.138803]  ? alloc_pipe_info+0x1e9/0x590
[ 2629.139103]  ? alloc_pipe_info+0x10e/0x590
[ 2629.139415]  ? alloc_pipe_info+0x1e9/0x590
[ 2629.139723]  __kmalloc+0x4d/0x160
[ 2629.139981]  alloc_pipe_info+0x1e9/0x590
[ 2629.140288]  splice_direct_to_actor+0x796/0x9d0
[ 2629.140636]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2629.141000]  ? inode_security+0x105/0x140
[ 2629.141304]  ? avc_policy_seqno+0x9/0x20
[ 2629.141598]  ? selinux_file_permission+0x9c/0x520
[ 2629.141944]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2629.142354]  ? security_file_permission+0xb5/0xe0
[ 2629.142725]  do_splice_direct+0x1bb/0x290
[ 2629.143038]  ? __pfx_do_splice_direct+0x10/0x10
[ 2629.143395]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2629.143792]  ? lock_is_held_type+0x9f/0x120
[ 2629.144128]  do_sendfile+0xb67/0x1300
[ 2629.144429]  ? __pfx_do_sendfile+0x10/0x10
[ 2629.144769]  __x64_sys_sendfile64+0x1d5/0x210
[ 2629.145119]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2629.145505]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2629.145912]  do_syscall_64+0x3f/0x90
[ 2629.146221]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2629.146616] RIP: 0033:0x7f435bfddb19
[ 2629.146888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2629.148213] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2629.148768] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2629.149278] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2629.149801] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2629.150328] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2629.150848] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2629.151405]  </TASK>
03:22:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 4)

[ 2629.185141] loop4: detected capacity change from 0 to 40
03:22:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00') (fail_nth: 3)

[ 2629.220420] FAULT_INJECTION: forcing a failure.
[ 2629.220420] name failslab, interval 1, probability 0, space 0, times 0
[ 2629.221303] CPU: 1 PID: 11384 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2629.221921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2629.222562] Call Trace:
[ 2629.222773]  <TASK>
[ 2629.222959]  dump_stack_lvl+0xc1/0xf0
[ 2629.223283]  should_fail_ex+0x4b4/0x5b0
[ 2629.223614]  ? copy_splice_read+0x15b/0x900
[ 2629.223968]  should_failslab+0x9/0x20
[ 2629.224294]  __kmem_cache_alloc_node+0x66/0x310
[ 2629.224671]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2629.225065]  ? copy_splice_read+0x15b/0x900
[ 2629.225438]  ? copy_splice_read+0x15b/0x900
[ 2629.225805]  __kmalloc+0x4d/0x160
[ 2629.226103]  copy_splice_read+0x15b/0x900
[ 2629.226449]  ? lock_release+0x1e3/0x680
[ 2629.226776]  ? lock_is_held_type+0x9f/0x120
[ 2629.227153]  ? __pfx_copy_splice_read+0x10/0x10
[ 2629.227551]  ? inode_security+0x105/0x140
[ 2629.227901]  ? fsnotify_perm.part.0+0x248/0x680
[ 2629.228288]  ? security_file_permission+0xb5/0xe0
[ 2629.228698]  ? __pfx_copy_splice_read+0x10/0x10
[ 2629.229083]  vfs_splice_read+0x238/0x2d0
[ 2629.229449]  splice_direct_to_actor+0x2aa/0x9d0
[ 2629.229844]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2629.230275]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2629.230711]  ? security_file_permission+0xb5/0xe0
[ 2629.231125]  do_splice_direct+0x1bb/0x290
[ 2629.231483]  ? __pfx_do_splice_direct+0x10/0x10
[ 2629.231880]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2629.232314]  ? lock_is_held_type+0x9f/0x120
[ 2629.232670]  do_sendfile+0xb67/0x1300
[ 2629.232996]  ? __pfx_do_sendfile+0x10/0x10
[ 2629.233355]  __x64_sys_sendfile64+0x1d5/0x210
[ 2629.233742]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2629.234159]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2629.234586]  do_syscall_64+0x3f/0x90
[ 2629.234900]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2629.235308] RIP: 0033:0x7fc1c5d62b19
[ 2629.235610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2629.236991] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2629.237582] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2629.238144] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2629.238708] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2629.239258] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2629.239822] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2629.240385]  </TASK>
03:22:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 4)

[ 2629.262635] loop6: detected capacity change from 0 to 40
[ 2629.273943] loop3: detected capacity change from 0 to 40
[ 2629.298983] FAULT_INJECTION: forcing a failure.
[ 2629.298983] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2629.299854] CPU: 0 PID: 11388 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2629.300415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2629.300996] Call Trace:
[ 2629.301184]  <TASK>
[ 2629.301356]  dump_stack_lvl+0xc1/0xf0
[ 2629.301661]  should_fail_ex+0x4b4/0x5b0
[ 2629.301960]  strncpy_from_user+0x38/0x340
[ 2629.302281]  getname_flags.part.0+0x95/0x4f0
[ 2629.302623]  __x64_sys_unlink+0xb5/0x110
[ 2629.302923]  do_syscall_64+0x3f/0x90
[ 2629.303207]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2629.303563] RIP: 0033:0x7f74634d9b19
[ 2629.303840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2629.305033] RSP: 002b:00007f7460a4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 2629.305562] RAX: ffffffffffffffda RBX: 00007f74635ecf60 RCX: 00007f74634d9b19
[ 2629.306051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 2629.306544] RBP: 00007f7460a4f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2629.307023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2629.307530] R13: 00007ffcc6f4d40f R14: 00007f7460a4f300 R15: 0000000000022000
[ 2629.308037]  </TASK>
[ 2629.324026] loop7: detected capacity change from 0 to 40
[ 2629.334809] syz-executor.6: attempt to access beyond end of device
[ 2629.334809] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2629.335790] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:22:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 5)

[ 2629.450646] loop6: detected capacity change from 0 to 40
[ 2629.470248] FAULT_INJECTION: forcing a failure.
[ 2629.470248] name failslab, interval 1, probability 0, space 0, times 0
[ 2629.471017] CPU: 0 PID: 11393 Comm: syz-executor.6 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2629.471589] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2629.472159] Call Trace:
[ 2629.472354]  <TASK>
[ 2629.472522]  dump_stack_lvl+0xc1/0xf0
[ 2629.472808]  should_fail_ex+0x4b4/0x5b0
[ 2629.473098]  ? iter_file_splice_write+0x162/0xcb0
[ 2629.473444]  should_failslab+0x9/0x20
[ 2629.473717]  __kmem_cache_alloc_node+0x66/0x310
[ 2629.474053]  ? iter_file_splice_write+0x162/0xcb0
[ 2629.474406]  ? iter_file_splice_write+0x162/0xcb0
[ 2629.474743]  __kmalloc+0x4d/0x160
[ 2629.475000]  iter_file_splice_write+0x162/0xcb0
[ 2629.475354]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2629.475718]  ? inode_security+0x105/0x140
[ 2629.476033]  ? security_file_permission+0xb5/0xe0
[ 2629.476389]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2629.476759]  direct_splice_actor+0x119/0x180
[ 2629.477091]  splice_direct_to_actor+0x349/0x9d0
[ 2629.477432]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2629.477799]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2629.478185]  ? security_file_permission+0xb5/0xe0
[ 2629.478545]  do_splice_direct+0x1bb/0x290
[ 2629.478852]  ? __pfx_do_splice_direct+0x10/0x10
[ 2629.479191]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2629.479580]  ? lock_is_held_type+0x9f/0x120
[ 2629.479910]  do_sendfile+0xb67/0x1300
[ 2629.480218]  ? __pfx_do_sendfile+0x10/0x10
[ 2629.480547]  __x64_sys_sendfile64+0x1d5/0x210
[ 2629.480887]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2629.481266]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2629.481668]  do_syscall_64+0x3f/0x90
[ 2629.481949]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2629.482347] RIP: 0033:0x7fd248e15b19
[ 2629.482624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2629.483883] RSP: 002b:00007fd24638b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2629.484419] RAX: ffffffffffffffda RBX: 00007fd248f28f60 RCX: 00007fd248e15b19
[ 2629.484925] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[ 2629.485433] RBP: 00007fd24638b1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2629.485938] R10: 00000000fffffdef R11: 0000000000000246 R12: 0000000000000001
[ 2629.486444] R13: 00007ffc9d68704f R14: 00007fd24638b300 R15: 0000000000022000
[ 2629.486981]  </TASK>
[ 2641.044531] loop3: detected capacity change from 0 to 40
[ 2641.048087] loop6: detected capacity change from 0 to 40
03:23:04 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 1)

03:23:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 6)

03:23:04 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:23:04 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00') (fail_nth: 4)

03:23:04 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 5)

03:23:04 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 6)

03:23:04 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x10000000)

03:23:04 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x0, 0x7, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2641.063818] loop4: detected capacity change from 0 to 40
[ 2641.067638] FAULT_INJECTION: forcing a failure.
[ 2641.067638] name failslab, interval 1, probability 0, space 0, times 0
[ 2641.068754] CPU: 0 PID: 11407 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2641.069338] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2641.069909] Call Trace:
[ 2641.070100]  <TASK>
[ 2641.070294]  dump_stack_lvl+0xc1/0xf0
[ 2641.070598]  should_fail_ex+0x4b4/0x5b0
[ 2641.070908]  ? fat_parse_long.constprop.0+0x8e9/0xb50
[ 2641.071296]  should_failslab+0x9/0x20
[ 2641.071583]  kmem_cache_alloc+0x61/0x390
[ 2641.071901]  fat_parse_long.constprop.0+0x8e9/0xb50
[ 2641.072274]  ? lock_acquire+0x19a/0x4c0
[ 2641.072595]  fat_search_long+0x384/0xdb0
[ 2641.072930]  ? __pfx_fat_search_long+0x10/0x10
[ 2641.073275]  ? __mutex_lock+0x12a1/0x1a30
[ 2641.073599]  ? vfat_unlink+0x118/0x390
[ 2641.073896]  ? avc_has_perm+0xfe/0x1a0
[ 2641.074211]  ? __pfx_avc_has_perm+0x10/0x10
[ 2641.074544]  ? __pfx_lock_acquire+0x10/0x10
[ 2641.074869]  vfat_unlink+0x283/0x390
[ 2641.075162]  ? __pfx_vfat_unlink+0x10/0x10
[ 2641.075492]  ? down_write+0x11a/0x1f0
[ 2641.075787]  ? __pfx_down_write+0x10/0x10
[ 2641.076120]  vfs_unlink+0x35e/0x930
[ 2641.076400]  ? lookup_one_qstr_excl+0x3a/0x190
[ 2641.076738]  do_unlinkat+0x3bd/0x650
[ 2641.077025]  ? __pfx_do_unlinkat+0x10/0x10
[ 2641.077328]  ? __check_object_size+0x3d4/0x8c0
[ 2641.077687]  ? getname_flags.part.0+0x1dd/0x4f0
[ 2641.078035]  __x64_sys_unlink+0xca/0x110
[ 2641.078360]  do_syscall_64+0x3f/0x90
[ 2641.078653]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2641.079028] RIP: 0033:0x7f74634d9b19
[ 2641.079303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2641.080557] RSP: 002b:00007f7460a4f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 2641.081099] RAX: ffffffffffffffda RBX: 00007f74635ecf60 RCX: 00007f74634d9b19
[ 2641.081604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 2641.082108] RBP: 00007f7460a4f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2641.082627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2641.083131] R13: 00007ffcc6f4d40f R14: 00007f7460a4f300 R15: 0000000000022000
[ 2641.083663]  </TASK>
[ 2641.088911] FAULT_INJECTION: forcing a failure.
[ 2641.088911] name failslab, interval 1, probability 0, space 0, times 0
[ 2641.089453] loop7: detected capacity change from 0 to 40
[ 2641.090810] CPU: 1 PID: 11410 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2641.092267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2641.093328] Call Trace:
[ 2641.093691]  <TASK>
[ 2641.094000]  dump_stack_lvl+0xc1/0xf0
[ 2641.094620]  should_fail_ex+0x4b4/0x5b0
[ 2641.095220]  should_failslab+0x9/0x20
[ 2641.095771]  __kmem_cache_alloc_node+0x66/0x310
[ 2641.096459]  ? alloc_pipe_info+0x10e/0x590
[ 2641.097092]  kmalloc_trace+0x26/0xc0
[ 2641.097603]  alloc_pipe_info+0x10e/0x590
[ 2641.098228]  splice_direct_to_actor+0x796/0x9d0
[ 2641.098894]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2641.099572]  ? inode_security+0x105/0x140
[ 2641.100186]  ? avc_policy_seqno+0x9/0x20
[ 2641.100752]  ? selinux_file_permission+0x9c/0x520
[ 2641.101444]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2641.102191]  ? security_file_permission+0xb5/0xe0
[ 2641.102909]  do_splice_direct+0x1bb/0x290
[ 2641.103490]  ? __pfx_do_splice_direct+0x10/0x10
[ 2641.104179]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2641.104890]  ? lock_is_held_type+0x9f/0x120
[ 2641.105555]  do_sendfile+0xb67/0x1300
[ 2641.106098]  ? __pfx_do_sendfile+0x10/0x10
[ 2641.106738]  __x64_sys_sendfile64+0x1d5/0x210
[ 2641.107385]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2641.108055]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2641.108787]  do_syscall_64+0x3f/0x90
[ 2641.109319]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2641.110023] RIP: 0033:0x7fa51deffb19
[ 2641.110559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2641.112940] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2641.113979] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2641.115221] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2641.116176] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2641.117128] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2641.118073] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2641.119059]  </TASK>
[ 2641.134082] FAULT_INJECTION: forcing a failure.
[ 2641.134082] name failslab, interval 1, probability 0, space 0, times 0
[ 2641.134932] CPU: 0 PID: 11417 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2641.135524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2641.136097] Call Trace:
[ 2641.136292]  <TASK>
[ 2641.136463]  dump_stack_lvl+0xc1/0xf0
[ 2641.136766]  should_fail_ex+0x4b4/0x5b0
[ 2641.137071]  ? copy_splice_read+0x15b/0x900
[ 2641.137404]  should_failslab+0x9/0x20
[ 2641.137690]  __kmem_cache_alloc_node+0x66/0x310
[ 2641.138042]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2641.138400]  ? copy_splice_read+0x15b/0x900
[ 2641.138737]  ? copy_splice_read+0x15b/0x900
[ 2641.139063]  __kmalloc+0x4d/0x160
[ 2641.139332]  copy_splice_read+0x15b/0x900
[ 2641.139646]  ? lock_release+0x1e3/0x680
[ 2641.139944]  ? lock_is_held_type+0x9f/0x120
[ 2641.140279]  ? __pfx_copy_splice_read+0x10/0x10
[ 2641.140641]  ? inode_security+0x105/0x140
[ 2641.140961]  ? fsnotify_perm.part.0+0x248/0x680
[ 2641.141327]  ? security_file_permission+0xb5/0xe0
[ 2641.141707]  ? __pfx_copy_splice_read+0x10/0x10
[ 2641.142071]  vfs_splice_read+0x238/0x2d0
[ 2641.142401]  splice_direct_to_actor+0x2aa/0x9d0
[ 2641.142761]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2641.143144]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2641.143536]  ? security_file_permission+0xb5/0xe0
[ 2641.143913]  do_splice_direct+0x1bb/0x290
[ 2641.144232]  ? __pfx_do_splice_direct+0x10/0x10
[ 2641.144587]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2641.144986]  ? lock_is_held_type+0x9f/0x120
[ 2641.145320]  do_sendfile+0xb67/0x1300
[ 2641.145630]  ? __pfx_do_sendfile+0x10/0x10
[ 2641.145966]  __x64_sys_sendfile64+0x1d5/0x210
[ 2641.146318]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2641.146695]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2641.147089]  do_syscall_64+0x3f/0x90
[ 2641.147385]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2641.147765] RIP: 0033:0x7f435bfddb19
[ 2641.148041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2641.149298] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2641.149839] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2641.150347] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2641.150855] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2641.151361] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2641.151860] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2641.152392]  </TASK>
03:23:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00') (fail_nth: 5)

[ 2641.188069] syz-executor.6: attempt to access beyond end of device
[ 2641.188069] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2641.190336] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2641.224727] loop3: detected capacity change from 0 to 40
03:23:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:23:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 6)

03:23:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 7)

03:23:19 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x11000000)

03:23:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00') (fail_nth: 6)

03:23:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 7)

03:23:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 2)

03:23:19 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2655.275926] loop6: detected capacity change from 0 to 40
[ 2655.317710] loop7: detected capacity change from 0 to 40
[ 2655.321430] loop4: detected capacity change from 0 to 40
[ 2655.328510] loop3: detected capacity change from 0 to 40
[ 2655.361833] FAULT_INJECTION: forcing a failure.
[ 2655.361833] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2655.363607] CPU: 0 PID: 11443 Comm: syz-executor.3 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2655.364629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2655.365646] Call Trace:
[ 2655.365994]  <TASK>
[ 2655.366302]  dump_stack_lvl+0xc1/0xf0
[ 2655.366861]  should_fail_ex+0x4b4/0x5b0
[ 2655.367401]  _copy_to_user+0x30/0xc0
[ 2655.367907]  simple_read_from_buffer+0xd0/0x170
[ 2655.368526]  proc_fail_nth_read+0x1a6/0x290
[ 2655.369103]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2655.369735]  ? security_file_permission+0xb5/0xe0
[ 2655.370409]  vfs_read+0x1de/0x8f0
[ 2655.370884]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2655.371536]  ? __pfx_vfs_read+0x10/0x10
[ 2655.372067]  ? __fget_files+0x267/0x480
[ 2655.372663]  ksys_read+0x122/0x250
[ 2655.373160]  ? __pfx_ksys_read+0x10/0x10
[ 2655.373720]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2655.374449]  do_syscall_64+0x3f/0x90
[ 2655.374978]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2655.375661] RIP: 0033:0x7f746348c69c
[ 2655.376158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2655.378431] RSP: 002b:00007f7460a4f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2655.379408] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f746348c69c
[ 2655.380317] RDX: 000000000000000f RSI: 00007f7460a4f1e0 RDI: 0000000000000006
[ 2655.381230] RBP: 00007f7460a4f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2655.382133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2655.383059] R13: 00007ffcc6f4d40f R14: 00007f7460a4f300 R15: 0000000000022000
[ 2655.384026]  </TASK>
[ 2655.397526] FAULT_INJECTION: forcing a failure.
[ 2655.397526] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 2655.399168] CPU: 0 PID: 11442 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2655.400172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2655.401175] Call Trace:
[ 2655.401510]  <TASK>
[ 2655.401818]  dump_stack_lvl+0xc1/0xf0
[ 2655.402353]  should_fail_ex+0x4b4/0x5b0
[ 2655.402886]  __should_fail_alloc_page+0xe0/0x110
[ 2655.403517]  prepare_alloc_pages+0x178/0x500
[ 2655.404116]  ? __pfx_lock_acquire+0x10/0x10
[ 2655.404685]  __alloc_pages_bulk+0x156/0x10e0
[ 2655.405280]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2655.406078]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2655.406753]  ? copy_splice_read+0x15b/0x900
[ 2655.407335]  ? kasan_set_track+0x25/0x30
[ 2655.407887]  ? __kasan_kmalloc+0x7f/0x90
03:23:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 3)

[ 2655.408465]  copy_splice_read+0x190/0x900
[ 2655.409237]  ? lock_is_held_type+0x9f/0x120
[ 2655.409841]  ? __pfx_copy_splice_read+0x10/0x10
[ 2655.410511]  ? inode_security+0x105/0x140
[ 2655.411076]  ? fsnotify_perm.part.0+0x248/0x680
[ 2655.411712]  ? security_file_permission+0xb5/0xe0
[ 2655.412372]  ? __pfx_copy_splice_read+0x10/0x10
[ 2655.413013]  vfs_splice_read+0x238/0x2d0
[ 2655.413589]  splice_direct_to_actor+0x2aa/0x9d0
[ 2655.414234]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2655.414930]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2655.415626]  ? security_file_permission+0xb5/0xe0
[ 2655.416302]  do_splice_direct+0x1bb/0x290
[ 2655.416872]  ? __pfx_do_splice_direct+0x10/0x10
[ 2655.417519]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2655.418226]  ? lock_is_held_type+0x9f/0x120
[ 2655.418843]  do_sendfile+0xb67/0x1300
[ 2655.419385]  ? __pfx_do_sendfile+0x10/0x10
[ 2655.419984]  __x64_sys_sendfile64+0x1d5/0x210
[ 2655.420599]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2655.421274]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2655.421978]  do_syscall_64+0x3f/0x90
[ 2655.422521]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2655.423197] RIP: 0033:0x7fc1c5d62b19
[ 2655.423692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2655.425944] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2655.426941] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2655.427844] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2655.428741] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2655.429647] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2655.430564] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2655.431517]  </TASK>
[ 2655.462588] syz-executor.6: attempt to access beyond end of device
[ 2655.462588] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2655.464189] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:23:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 7)

03:23:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 8)

03:23:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2655.561920] FAULT_INJECTION: forcing a failure.
[ 2655.561920] name failslab, interval 1, probability 0, space 0, times 0
[ 2655.563419] CPU: 1 PID: 11445 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2655.564451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2655.565478] Call Trace:
[ 2655.565824]  <TASK>
[ 2655.566121]  dump_stack_lvl+0xc1/0xf0
[ 2655.566669]  should_fail_ex+0x4b4/0x5b0
[ 2655.567199]  ? alloc_pipe_info+0x1e9/0x590
[ 2655.567760]  should_failslab+0x9/0x20
[ 2655.568255]  __kmem_cache_alloc_node+0x66/0x310
[ 2655.568869]  ? alloc_pipe_info+0x1e9/0x590
[ 2655.569420]  ? alloc_pipe_info+0x10e/0x590
[ 2655.569978]  ? alloc_pipe_info+0x1e9/0x590
[ 2655.570537]  __kmalloc+0x4d/0x160
[ 2655.570998]  alloc_pipe_info+0x1e9/0x590
[ 2655.571536]  splice_direct_to_actor+0x796/0x9d0
[ 2655.572164]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2655.572814]  ? inode_security+0x105/0x140
[ 2655.573357]  ? avc_policy_seqno+0x9/0x20
[ 2655.573902]  ? selinux_file_permission+0x9c/0x520
[ 2655.574579]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2655.575290]  ? security_file_permission+0xb5/0xe0
[ 2655.575965]  do_splice_direct+0x1bb/0x290
[ 2655.576538]  ? __pfx_do_splice_direct+0x10/0x10
[ 2655.577193]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2655.577915]  ? lock_is_held_type+0x9f/0x120
[ 2655.578536]  do_sendfile+0xb67/0x1300
[ 2655.579072]  ? __pfx_do_sendfile+0x10/0x10
[ 2655.579659]  __x64_sys_sendfile64+0x1d5/0x210
[ 2655.580276]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2655.580951]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2655.581658]  do_syscall_64+0x3f/0x90
[ 2655.582191]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2655.582891] RIP: 0033:0x7fa51deffb19
[ 2655.583383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2655.586162] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2655.587367] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2655.588486] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2655.589595] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2655.590725] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2655.591844] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2655.592993]  </TASK>
[ 2655.622804] loop7: detected capacity change from 0 to 40
[ 2655.661016] FAULT_INJECTION: forcing a failure.
[ 2655.661016] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2655.662578] CPU: 0 PID: 11447 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2655.663596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2655.664601] Call Trace:
[ 2655.664949]  <TASK>
03:23:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 8)

[ 2655.665263]  dump_stack_lvl+0xc1/0xf0
[ 2655.666017]  should_fail_ex+0x4b4/0x5b0
[ 2655.666568]  __should_fail_alloc_page+0xe0/0x110
[ 2655.667211]  prepare_alloc_pages+0x178/0x500
[ 2655.667806]  ? __pfx_lock_acquire+0x10/0x10
[ 2655.668380]  __alloc_pages_bulk+0x156/0x10e0
[ 2655.668980]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2655.669783]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2655.670455]  ? copy_splice_read+0x15b/0x900
[ 2655.671042]  ? kasan_set_track+0x25/0x30
[ 2655.671587]  ? __kasan_kmalloc+0x7f/0x90
[ 2655.672162]  copy_splice_read+0x190/0x900
[ 2655.672742]  ? lock_is_held_type+0x9f/0x120
[ 2655.673357]  ? __pfx_copy_splice_read+0x10/0x10
[ 2655.674005]  ? inode_security+0x105/0x140
[ 2655.674588]  ? fsnotify_perm.part.0+0x248/0x680
[ 2655.675226]  ? security_file_permission+0xb5/0xe0
[ 2655.675889]  ? __pfx_copy_splice_read+0x10/0x10
[ 2655.676542]  vfs_splice_read+0x238/0x2d0
[ 2655.677121]  splice_direct_to_actor+0x2aa/0x9d0
[ 2655.677768]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2655.678477]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2655.679184]  ? security_file_permission+0xb5/0xe0
[ 2655.679867]  do_splice_direct+0x1bb/0x290
[ 2655.680457]  ? __pfx_do_splice_direct+0x10/0x10
[ 2655.681099]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2655.681820]  ? lock_is_held_type+0x9f/0x120
[ 2655.682448]  do_sendfile+0xb67/0x1300
[ 2655.682997]  ? __pfx_do_sendfile+0x10/0x10
[ 2655.683603]  __x64_sys_sendfile64+0x1d5/0x210
[ 2655.684218]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2655.684902]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2655.685619]  do_syscall_64+0x3f/0x90
[ 2655.686146]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2655.686843] RIP: 0033:0x7f435bfddb19
[ 2655.687338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2655.689597] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2655.690581] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2655.691488] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2655.692398] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2655.693299] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2655.694204] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2655.695178]  </TASK>
[ 2655.701185] loop3: detected capacity change from 0 to 40
[ 2655.719883] loop6: detected capacity change from 0 to 40
03:23:19 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
renameat2(r1, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000040)='./file0\x00', 0x0)

[ 2655.806329] syz-executor.6: attempt to access beyond end of device
[ 2655.806329] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2655.808250] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:23:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 4)

[ 2655.834773] loop4: detected capacity change from 0 to 40
[ 2655.878636] FAULT_INJECTION: forcing a failure.
[ 2655.878636] name failslab, interval 1, probability 0, space 0, times 0
[ 2655.880694] CPU: 1 PID: 11454 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2655.881907] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2655.883110] Call Trace:
[ 2655.883507]  <TASK>
[ 2655.883857]  dump_stack_lvl+0xc1/0xf0
[ 2655.884473]  should_fail_ex+0x4b4/0x5b0
[ 2655.885093]  ? kvmalloc_node+0xaa/0x200
[ 2655.885713]  should_failslab+0x9/0x20
[ 2655.886294]  __kmem_cache_alloc_node+0x66/0x310
[ 2655.887021]  ? kvmalloc_node+0xaa/0x200
[ 2655.887661]  ? __alloc_pages_bulk+0xa29/0x10e0
[ 2655.888368]  ? kvmalloc_node+0xaa/0x200
[ 2655.888996]  __kmalloc_node+0x50/0x160
[ 2655.889590]  kvmalloc_node+0xaa/0x200
[ 2655.890203]  seq_read_iter+0x820/0x1300
[ 2655.890869]  proc_reg_read_iter+0x214/0x2f0
[ 2655.891524]  copy_splice_read+0x3ca/0x900
[ 2655.892188]  ? __pfx_copy_splice_read+0x10/0x10
[ 2655.892903]  ? inode_security+0x105/0x140
[ 2655.893551]  ? security_file_permission+0xb5/0xe0
[ 2655.894300]  ? __pfx_copy_splice_read+0x10/0x10
[ 2655.894996]  vfs_splice_read+0x238/0x2d0
[ 2655.895588]  splice_direct_to_actor+0x2aa/0x9d0
[ 2655.896258]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2655.896966]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2655.897702]  ? security_file_permission+0xb5/0xe0
[ 2655.898424]  do_splice_direct+0x1bb/0x290
[ 2655.899030]  ? __pfx_do_splice_direct+0x10/0x10
[ 2655.899698]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2655.900442]  ? lock_is_held_type+0x9f/0x120
[ 2655.901062]  do_sendfile+0xb67/0x1300
[ 2655.901621]  ? __pfx_do_sendfile+0x10/0x10
[ 2655.902227]  __x64_sys_sendfile64+0x1d5/0x210
[ 2655.902917]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2655.903653]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2655.904416]  do_syscall_64+0x3f/0x90
[ 2655.904975]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2655.905716] RIP: 0033:0x7fc1c5d62b19
[ 2655.906250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2655.906654] loop3: detected capacity change from 0 to 40
[ 2655.908724] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2655.910530] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2655.911516] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2655.912491] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2655.913467] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2655.914471] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2655.915471]  </TASK>
03:23:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 8)

[ 2656.055849] loop7: detected capacity change from 0 to 40
[ 2656.106362] FAULT_INJECTION: forcing a failure.
[ 2656.106362] name failslab, interval 1, probability 0, space 0, times 0
[ 2656.107959] CPU: 0 PID: 11461 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2656.109004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2656.109993] Call Trace:
[ 2656.110352]  <TASK>
[ 2656.110671]  dump_stack_lvl+0xc1/0xf0
[ 2656.111216]  should_fail_ex+0x4b4/0x5b0
[ 2656.111775]  ? kvmalloc_node+0xaa/0x200
[ 2656.112329]  should_failslab+0x9/0x20
[ 2656.112840]  __kmem_cache_alloc_node+0x66/0x310
[ 2656.113469]  ? kvmalloc_node+0xaa/0x200
[ 2656.114016]  ? __alloc_pages_bulk+0xa29/0x10e0
[ 2656.114685]  ? kvmalloc_node+0xaa/0x200
[ 2656.115225]  __kmalloc_node+0x50/0x160
[ 2656.115755]  kvmalloc_node+0xaa/0x200
[ 2656.116303]  seq_read_iter+0x820/0x1300
[ 2656.116885]  proc_reg_read_iter+0x214/0x2f0
[ 2656.117459]  copy_splice_read+0x3ca/0x900
[ 2656.118053]  ? __pfx_copy_splice_read+0x10/0x10
[ 2656.118689]  ? inode_security+0x105/0x140
[ 2656.119275]  ? security_file_permission+0xb5/0xe0
[ 2656.119926]  ? __pfx_copy_splice_read+0x10/0x10
[ 2656.120568]  vfs_splice_read+0x238/0x2d0
[ 2656.121109]  splice_direct_to_actor+0x2aa/0x9d0
[ 2656.121750]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2656.122415]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2656.123105]  ? security_file_permission+0xb5/0xe0
[ 2656.123777]  do_splice_direct+0x1bb/0x290
[ 2656.124345]  ? __pfx_do_splice_direct+0x10/0x10
[ 2656.124980]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2656.125686]  ? lock_is_held_type+0x9f/0x120
[ 2656.126293]  do_sendfile+0xb67/0x1300
[ 2656.126852]  ? __pfx_do_sendfile+0x10/0x10
[ 2656.127448]  __x64_sys_sendfile64+0x1d5/0x210
[ 2656.128031]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2656.128702]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2656.129398]  do_syscall_64+0x3f/0x90
[ 2656.129926]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2656.130585] RIP: 0033:0x7f435bfddb19
[ 2656.131076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2656.133288] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2656.134238] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2656.135169] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2656.136058] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2656.136950] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2656.137843] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2656.138804]  </TASK>
03:23:20 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x40000)

03:23:20 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 9)

03:23:20 executing program 3:
r0 = semget(0x3, 0x4, 0x0)
semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x488d, 0x800}, {0x1, 0x6, 0x1800}, {0x3, 0x3, 0xc00}, {0x1, 0x8, 0x1800}], 0x4, &(0x7f0000000040))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
semget(0x1, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:23:20 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 5)

03:23:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 9)

03:23:20 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x20000000)

03:23:20 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 9)

[ 2656.382769] loop7: detected capacity change from 0 to 40
[ 2656.386533] loop4: detected capacity change from 0 to 40
[ 2656.388783] loop3: detected capacity change from 0 to 40
[ 2656.396634] FAULT_INJECTION: forcing a failure.
[ 2656.396634] name failslab, interval 1, probability 0, space 0, times 0
[ 2656.397082] loop6: detected capacity change from 0 to 40
[ 2656.397892] CPU: 0 PID: 11471 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2656.397925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2656.397940] Call Trace:
[ 2656.397949]  <TASK>
[ 2656.397960]  dump_stack_lvl+0xc1/0xf0
[ 2656.398012]  should_fail_ex+0x4b4/0x5b0
[ 2656.398052]  ? copy_splice_read+0x15b/0x900
[ 2656.398097]  should_failslab+0x9/0x20
[ 2656.398131]  __kmem_cache_alloc_node+0x66/0x310
[ 2656.398169]  ? copy_splice_read+0x15b/0x900
[ 2656.398225]  ? copy_splice_read+0x15b/0x900
[ 2656.404097]  __kmalloc+0x4d/0x160
[ 2656.404498]  copy_splice_read+0x15b/0x900
[ 2656.404967]  ? lock_is_held_type+0x9f/0x120
[ 2656.405454]  ? __pfx_copy_splice_read+0x10/0x10
[ 2656.405973]  ? __cond_resched+0x46/0x70
[ 2656.406421]  ? inode_security+0x105/0x140
[ 2656.406908]  ? fsnotify_perm.part.0+0x248/0x680
[ 2656.407429]  ? security_file_permission+0xb5/0xe0
[ 2656.407986]  ? __pfx_copy_splice_read+0x10/0x10
[ 2656.408505]  vfs_splice_read+0x238/0x2d0
[ 2656.408984]  splice_direct_to_actor+0x2aa/0x9d0
[ 2656.409505]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2656.410079]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2656.410663]  ? security_file_permission+0xb5/0xe0
[ 2656.411222]  do_splice_direct+0x1bb/0x290
[ 2656.411682]  ? __pfx_do_splice_direct+0x10/0x10
[ 2656.412226]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2656.412818]  ? lock_is_held_type+0x9f/0x120
[ 2656.413331]  do_sendfile+0xb67/0x1300
[ 2656.413775]  ? __pfx_do_sendfile+0x10/0x10
[ 2656.414283]  __x64_sys_sendfile64+0x1d5/0x210
[ 2656.414801]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2656.415373]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2656.415964]  do_syscall_64+0x3f/0x90
[ 2656.416403]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2656.416964] RIP: 0033:0x7fa51deffb19
[ 2656.417370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2656.419269] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2656.420077] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2656.420834] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2656.421584] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2656.422360] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2656.423113] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2656.423903]  </TASK>
[ 2656.509617] syz-executor.6: attempt to access beyond end of device
[ 2656.509617] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2656.511258] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:23:32 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x30000, 0x168)
unlink(&(0x7f0000000180)='./file1\x00')

03:23:32 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:23:32 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 10)

03:23:32 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x40000)

03:23:32 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 6)

03:23:32 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 10)

[ 2668.411342] loop4: detected capacity change from 0 to 40
03:23:32 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x81000000)

03:23:32 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 10)

[ 2668.430949] FAULT_INJECTION: forcing a failure.
[ 2668.430949] name failslab, interval 1, probability 0, space 0, times 0
[ 2668.431805] CPU: 1 PID: 11490 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2668.432384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2668.432957] Call Trace:
[ 2668.433141]  <TASK>
[ 2668.433310]  dump_stack_lvl+0xc1/0xf0
[ 2668.433603]  should_fail_ex+0x4b4/0x5b0
[ 2668.433905]  ? iter_file_splice_write+0x162/0xcb0
[ 2668.434254]  should_failslab+0x9/0x20
[ 2668.434571]  __kmem_cache_alloc_node+0x66/0x310
[ 2668.434917]  ? mark_held_locks+0x9e/0xe0
[ 2668.435218]  ? iter_file_splice_write+0x162/0xcb0
[ 2668.435569]  ? iter_file_splice_write+0x162/0xcb0
[ 2668.435936]  __kmalloc+0x4d/0x160
[ 2668.436199]  iter_file_splice_write+0x162/0xcb0
[ 2668.436549]  ? __kmem_cache_free+0xe1/0x330
[ 2668.436873]  ? copy_splice_read+0x65b/0x900
[ 2668.437204]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2668.437580]  ? __pfx_copy_splice_read+0x10/0x10
[ 2668.437953]  ? inode_security+0x105/0x140
[ 2668.438271]  ? security_file_permission+0xb5/0xe0
[ 2668.438658]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2668.439039]  direct_splice_actor+0x119/0x180
[ 2668.439365]  splice_direct_to_actor+0x349/0x9d0
[ 2668.439724]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2668.440080]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2668.440465]  ? security_file_permission+0xb5/0xe0
[ 2668.440816]  do_splice_direct+0x1bb/0x290
[ 2668.441137]  ? __pfx_do_splice_direct+0x10/0x10
[ 2668.441496]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2668.441896]  ? lock_is_held_type+0x9f/0x120
[ 2668.442230]  do_sendfile+0xb67/0x1300
[ 2668.442541]  ? __pfx_do_sendfile+0x10/0x10
[ 2668.442878]  __x64_sys_sendfile64+0x1d5/0x210
[ 2668.443221]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2668.443597]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2668.444003]  do_syscall_64+0x3f/0x90
[ 2668.444299]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2668.444696] RIP: 0033:0x7fc1c5d62b19
[ 2668.444976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2668.446279] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2668.446863] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2668.447380] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2668.447887] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2668.448400] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2668.448918] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2668.449441]  </TASK>
[ 2668.456970] loop3: detected capacity change from 0 to 40
[ 2668.457858] loop6: detected capacity change from 0 to 40
[ 2668.466648] loop7: detected capacity change from 0 to 40
[ 2668.512324] FAULT_INJECTION: forcing a failure.
[ 2668.512324] name failslab, interval 1, probability 0, space 0, times 0
[ 2668.515322] CPU: 0 PID: 11502 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2668.516481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2668.517708] Call Trace:
[ 2668.518089]  <TASK>
[ 2668.518434]  dump_stack_lvl+0xc1/0xf0
[ 2668.519048]  should_fail_ex+0x4b4/0x5b0
[ 2668.519644]  ? iter_file_splice_write+0x162/0xcb0
[ 2668.520339]  should_failslab+0x9/0x20
[ 2668.520897]  __kmem_cache_alloc_node+0x66/0x310
[ 2668.521594]  ? mark_held_locks+0x9e/0xe0
[ 2668.522217]  ? iter_file_splice_write+0x162/0xcb0
[ 2668.522995]  ? iter_file_splice_write+0x162/0xcb0
[ 2668.523732]  __kmalloc+0x4d/0x160
[ 2668.524286]  iter_file_splice_write+0x162/0xcb0
[ 2668.524986]  ? __kmem_cache_free+0xe1/0x330
[ 2668.525670]  ? copy_splice_read+0x65b/0x900
[ 2668.526364]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2668.527153]  ? __pfx_copy_splice_read+0x10/0x10
[ 2668.527893]  ? inode_security+0x105/0x140
[ 2668.528571]  ? security_file_permission+0xb5/0xe0
[ 2668.529358]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2668.530139]  direct_splice_actor+0x119/0x180
[ 2668.530858]  splice_direct_to_actor+0x349/0x9d0
03:23:32 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2668.531610]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2668.532554]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2668.533362]  ? security_file_permission+0xb5/0xe0
[ 2668.534147]  do_splice_direct+0x1bb/0x290
[ 2668.534833]  ? __pfx_do_splice_direct+0x10/0x10
[ 2668.535580]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2668.536403]  ? lock_is_held_type+0x9f/0x120
[ 2668.537101]  do_sendfile+0xb67/0x1300
[ 2668.537726]  ? __pfx_do_sendfile+0x10/0x10
[ 2668.538422]  __x64_sys_sendfile64+0x1d5/0x210
[ 2668.539140]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2668.539931]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2668.540750]  do_syscall_64+0x3f/0x90
[ 2668.541355]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2668.542139] RIP: 0033:0x7f435bfddb19
[ 2668.542740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2668.545340] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2668.546463] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2668.547514] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2668.548556] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2668.549613] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2668.550531] syz-executor.6: attempt to access beyond end of device
[ 2668.550531] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2668.550677] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2668.552373] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2668.553404]  </TASK>
03:23:46 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:23:46 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x40000)

03:23:46 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 11)

[ 2682.406507] loop3: detected capacity change from 0 to 40
03:23:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r1, &(0x7f0000000000)='./file1\x00', 0x1c1001, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:23:46 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 7)

03:23:46 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x9a000000)

03:23:46 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 11)

03:23:46 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 11)

[ 2682.433815] loop6: detected capacity change from 0 to 40
[ 2682.436663] loop7: detected capacity change from 0 to 40
[ 2682.439248] FAULT_INJECTION: forcing a failure.
[ 2682.439248] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2682.442881] CPU: 1 PID: 11523 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2682.444004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2682.445121] Call Trace:
[ 2682.445492]  <TASK>
[ 2682.445827]  dump_stack_lvl+0xc1/0xf0
[ 2682.446402]  should_fail_ex+0x4b4/0x5b0
[ 2682.446995]  __should_fail_alloc_page+0xe0/0x110
[ 2682.447680]  prepare_alloc_pages+0x178/0x500
[ 2682.448332]  ? __pfx_lock_acquire+0x10/0x10
[ 2682.448957]  __alloc_pages_bulk+0x156/0x10e0
[ 2682.449612]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2682.450462]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2682.451169]  ? copy_splice_read+0x15b/0x900
[ 2682.451803]  ? kasan_set_track+0x25/0x30
[ 2682.452393]  ? __kasan_kmalloc+0x7f/0x90
[ 2682.452990]  copy_splice_read+0x190/0x900
[ 2682.453599]  ? lock_is_held_type+0x9f/0x120
[ 2682.454240]  ? __pfx_copy_splice_read+0x10/0x10
[ 2682.454949]  ? inode_security+0x105/0x140
[ 2682.455561]  ? fsnotify_perm.part.0+0x248/0x680
[ 2682.456241]  ? security_file_permission+0xb5/0xe0
[ 2682.456914]  ? __pfx_copy_splice_read+0x10/0x10
[ 2682.457565]  vfs_splice_read+0x238/0x2d0
[ 2682.458143]  splice_direct_to_actor+0x2aa/0x9d0
[ 2682.458821]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2682.459511]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2682.460225]  ? security_file_permission+0xb5/0xe0
[ 2682.460930]  do_splice_direct+0x1bb/0x290
[ 2682.461518]  ? __pfx_do_splice_direct+0x10/0x10
[ 2682.462177]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2682.462915]  ? lock_is_held_type+0x9f/0x120
[ 2682.463523]  do_sendfile+0xb67/0x1300
[ 2682.464063]  ? __pfx_do_sendfile+0x10/0x10
[ 2682.464658]  __x64_sys_sendfile64+0x1d5/0x210
[ 2682.465292]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2682.466003]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2682.466753]  do_syscall_64+0x3f/0x90
[ 2682.467311]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2682.468029] RIP: 0033:0x7fa51deffb19
[ 2682.468553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2682.470997] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2682.472027] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2682.473003] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2682.473977] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2682.474954] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2682.475917] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2682.476914]  </TASK>
03:23:46 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xd3000000)

[ 2682.494286] loop4: detected capacity change from 0 to 40
[ 2682.520101] syz-executor.6: attempt to access beyond end of device
[ 2682.520101] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2682.521041] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:23:46 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x40000)

03:23:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 12)

03:23:58 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x0, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:23:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 8)

03:23:58 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xeffdffff)

03:23:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef) (fail_nth: 12)

03:23:58 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f00000001c0)=[{0x9, 0x12, 0x1, 0x8}, {0x7, 0x7f, 0x33, 0x3}, {0x0, 0x8, 0x3f, 0x9}, {0x4, 0x4, 0x40, 0x81}, {0x0, 0x40, 0x0, 0xfffffffb}, {0x5, 0x4, 0x9, 0x2}, {0x4, 0x9, 0x1, 0x4}]})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x6, 0x0)
fremovexattr(r2, &(0x7f00000002c0)=@random={'os2.', 'vfat\x00'})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0400000064007366d8a02b00080101000440002000f801", 0x17, 0xfffffffffffffffe}, {0x0, 0x0, 0x2840}], 0x400, &(0x7f0000000300)=ANY=[])
link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:23:58 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x40000)

03:23:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 12)

[ 2695.057105] loop7: detected capacity change from 0 to 40
03:23:58 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2695.062415] FAULT_INJECTION: forcing a failure.
[ 2695.062415] name failslab, interval 1, probability 0, space 0, times 0
[ 2695.063529] CPU: 0 PID: 11554 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2695.064106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2695.064686] Call Trace:
[ 2695.064877]  <TASK>
[ 2695.065049]  dump_stack_lvl+0xc1/0xf0
[ 2695.065348]  should_fail_ex+0x4b4/0x5b0
[ 2695.065654]  ? kvmalloc_node+0xaa/0x200
[ 2695.065962]  should_failslab+0x9/0x20
[ 2695.066277]  __kmem_cache_alloc_node+0x66/0x310
[ 2695.066626]  ? kvmalloc_node+0xaa/0x200
[ 2695.066939]  ? __alloc_pages_bulk+0xa29/0x10e0
[ 2695.067281]  ? kvmalloc_node+0xaa/0x200
[ 2695.067585]  __kmalloc_node+0x50/0x160
[ 2695.067879]  kvmalloc_node+0xaa/0x200
[ 2695.068173]  seq_read_iter+0x820/0x1300
[ 2695.068502]  proc_reg_read_iter+0x214/0x2f0
[ 2695.068826]  copy_splice_read+0x3ca/0x900
[ 2695.069153]  ? __pfx_copy_splice_read+0x10/0x10
[ 2695.069500]  ? inode_security+0x105/0x140
[ 2695.069821]  ? security_file_permission+0xb5/0xe0
[ 2695.070195]  ? __pfx_copy_splice_read+0x10/0x10
[ 2695.070536]  vfs_splice_read+0x238/0x2d0
[ 2695.070858]  splice_direct_to_actor+0x2aa/0x9d0
[ 2695.071217]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2695.071598]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2695.071985]  ? security_file_permission+0xb5/0xe0
[ 2695.072369]  do_splice_direct+0x1bb/0x290
[ 2695.072691]  ? __pfx_do_splice_direct+0x10/0x10
[ 2695.073040]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2695.073429]  ? lock_is_held_type+0x9f/0x120
[ 2695.073764]  do_sendfile+0xb67/0x1300
[ 2695.074068]  ? __pfx_do_sendfile+0x10/0x10
[ 2695.074403]  __x64_sys_sendfile64+0x1d5/0x210
[ 2695.074737]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2695.075129]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2695.075518]  do_syscall_64+0x3f/0x90
[ 2695.075804]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2695.076183] RIP: 0033:0x7fa51deffb19
[ 2695.076456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2695.077707] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2695.078242] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2695.078741] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2695.079256] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2695.079751] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000001
[ 2695.080245] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2695.080771]  </TASK>
[ 2695.091778] loop4: detected capacity change from 0 to 40
[ 2695.107034] loop6: detected capacity change from 0 to 40
[ 2695.119652] FAULT_INJECTION: forcing a failure.
[ 2695.119652] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2695.121655] CPU: 1 PID: 11552 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2695.122693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2695.123730] Call Trace:
[ 2695.124059]  <TASK>
[ 2695.124356]  dump_stack_lvl+0xc1/0xf0
[ 2695.124869]  should_fail_ex+0x4b4/0x5b0
[ 2695.125400]  __should_fail_alloc_page+0xe0/0x110
[ 2695.126023]  prepare_alloc_pages+0x178/0x500
[ 2695.126608]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2695.127226]  __alloc_pages+0x149/0x480
[ 2695.127739]  ? lock_acquire+0x19a/0x4c0
[ 2695.128256]  ? __pfx___alloc_pages+0x10/0x10
[ 2695.128841]  ? lock_release+0x1e3/0x680
[ 2695.129360]  ? xas_start+0x14e/0x710
[ 2695.129874]  alloc_pages+0x1a0/0x260
[ 2695.130380]  filemap_alloc_folio+0x389/0x430
[ 2695.130994]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2695.131643]  __filemap_get_folio+0x285/0x8d0
[ 2695.132247]  pagecache_get_page+0x2e/0x120
[ 2695.132797]  ? __pfx_fat_get_block+0x10/0x10
[ 2695.133393]  block_write_begin+0x35/0x450
[ 2695.133933]  ? perf_trace_lock+0xc1/0x480
[ 2695.134484]  cont_write_begin+0x4fe/0x700
[ 2695.135060]  ? __pfx_fat_get_block+0x10/0x10
[ 2695.135640]  ? __pfx_cont_write_begin+0x10/0x10
[ 2695.136242]  ? lock_release+0x1e3/0x680
[ 2695.136765]  ? __pfx_lock_release+0x10/0x10
[ 2695.137333]  ? do_raw_spin_lock+0x125/0x270
[ 2695.137915]  fat_write_begin+0x89/0x180
[ 2695.138447]  ? __pfx_fat_get_block+0x10/0x10
[ 2695.139036]  generic_perform_write+0x26f/0x5e0
[ 2695.139664]  ? __pfx_generic_perform_write+0x10/0x10
[ 2695.140333]  ? __pfx_fat_update_time+0x10/0x10
[ 2695.140935]  ? __pfx_file_update_time+0x10/0x10
[ 2695.141544]  ? __pfx_generic_write_checks+0x10/0x10
[ 2695.142192]  ? direct_splice_actor+0x119/0x180
[ 2695.142839]  __generic_file_write_iter+0x160/0x1a0
[ 2695.143471]  generic_file_write_iter+0xe7/0x350
[ 2695.144094]  do_iter_readv_writev+0x217/0x3c0
[ 2695.144701]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2695.145360]  ? avc_policy_seqno+0x9/0x20
[ 2695.145913]  ? security_file_permission+0xb5/0xe0
[ 2695.146558]  do_iter_write+0x186/0x820
[ 2695.147083]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2695.147723]  ? iter_file_splice_write+0x162/0xcb0
[ 2695.148334]  ? kasan_set_track+0x25/0x30
[ 2695.148880]  vfs_iter_write+0x7a/0xb0
[ 2695.149381]  iter_file_splice_write+0x737/0xcb0
[ 2695.149991]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2695.150639]  ? __pfx_copy_splice_read+0x10/0x10
[ 2695.151263]  ? inode_security+0x105/0x140
[ 2695.151815]  ? security_file_permission+0xb5/0xe0
[ 2695.152450]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2695.153110]  direct_splice_actor+0x119/0x180
[ 2695.153711]  splice_direct_to_actor+0x349/0x9d0
[ 2695.154328]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2695.155002]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2695.155673]  ? security_file_permission+0xb5/0xe0
[ 2695.156310]  do_splice_direct+0x1bb/0x290
[ 2695.156861]  ? __pfx_do_splice_direct+0x10/0x10
[ 2695.157476]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2695.158158]  ? lock_is_held_type+0x9f/0x120
[ 2695.158728]  do_sendfile+0xb67/0x1300
[ 2695.159241]  ? __pfx_do_sendfile+0x10/0x10
[ 2695.159813]  __x64_sys_sendfile64+0x1d5/0x210
[ 2695.160405]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2695.161054]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2695.161746]  do_syscall_64+0x3f/0x90
[ 2695.162259]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2695.162942] RIP: 0033:0x7f435bfddb19
[ 2695.163421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2695.165599] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2695.166535] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2695.167417] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2695.168297] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2695.169183] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2695.170053] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2695.170968]  </TASK>
[ 2695.181612] loop3: detected capacity change from 0 to 16383
[ 2695.188282] FAT-fs (loop3): bogus number of reserved sectors
[ 2695.189021] FAT-fs (loop3): Can't find a valid FAT filesystem
03:23:59 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xff030000)

[ 2695.229333] loop3: detected capacity change from 0 to 16383
[ 2695.236841] FAT-fs (loop3): bogus number of reserved sectors
[ 2695.237711] FAT-fs (loop3): Can't find a valid FAT filesystem
03:23:59 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 13)

03:23:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 13)

03:23:59 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 9)

03:23:59 executing program 3:
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0xb8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004014}, 0x4004)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2695.353833] loop7: detected capacity change from 0 to 40
[ 2695.391931] loop4: detected capacity change from 0 to 40
03:23:59 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xffff0000)

[ 2695.490927] loop3: detected capacity change from 0 to 40
03:23:59 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 14)

[ 2695.787977] loop7: detected capacity change from 0 to 40
03:24:11 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:24:11 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x0, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:24:11 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 10)

03:24:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
openat(r0, &(0x7f0000000000)='./file1\x00', 0x40, 0x108)

03:24:11 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xfffffdef)

03:24:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 14)

03:24:11 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 15)

03:24:11 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2708.073176] loop3: detected capacity change from 0 to 40
[ 2708.084534] FAULT_INJECTION: forcing a failure.
[ 2708.084534] name failslab, interval 1, probability 0, space 0, times 0
[ 2708.085997] CPU: 1 PID: 11599 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2708.087076] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2708.088111] Call Trace:
[ 2708.088448]  <TASK>
[ 2708.088766]  dump_stack_lvl+0xc1/0xf0
[ 2708.089294]  should_fail_ex+0x4b4/0x5b0
[ 2708.089824]  ? iter_file_splice_write+0x162/0xcb0
[ 2708.090452]  should_failslab+0x9/0x20
[ 2708.090953]  __kmem_cache_alloc_node+0x66/0x310
[ 2708.091592]  ? mark_held_locks+0x9e/0xe0
[ 2708.092119]  ? iter_file_splice_write+0x162/0xcb0
[ 2708.092751]  ? iter_file_splice_write+0x162/0xcb0
[ 2708.093382]  __kmalloc+0x4d/0x160
[ 2708.093847]  iter_file_splice_write+0x162/0xcb0
[ 2708.094445]  ? __kmem_cache_free+0xe1/0x330
[ 2708.095059]  ? copy_splice_read+0x65b/0x900
[ 2708.095675]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2708.096359]  ? __pfx_copy_splice_read+0x10/0x10
[ 2708.097014]  ? inode_security+0x105/0x140
[ 2708.097602]  ? security_file_permission+0xb5/0xe0
[ 2708.098274]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2708.098961]  direct_splice_actor+0x119/0x180
[ 2708.099598]  splice_direct_to_actor+0x349/0x9d0
[ 2708.100244]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2708.100937]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2708.101659]  ? security_file_permission+0xb5/0xe0
[ 2708.101737] loop6: detected capacity change from 0 to 40
[ 2708.102338]  do_splice_direct+0x1bb/0x290
[ 2708.103737]  ? __pfx_do_splice_direct+0x10/0x10
[ 2708.104392]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2708.105105]  ? lock_is_held_type+0x9f/0x120
[ 2708.105707]  do_sendfile+0xb67/0x1300
[ 2708.106248]  ? __pfx_do_sendfile+0x10/0x10
[ 2708.106838]  __x64_sys_sendfile64+0x1d5/0x210
[ 2708.107193] loop7: detected capacity change from 0 to 40
[ 2708.107454]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2708.108899]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2708.109623]  do_syscall_64+0x3f/0x90
[ 2708.110157]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2708.110859] RIP: 0033:0x7fa51deffb19
[ 2708.111361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2708.113703] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2708.114693] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2708.115646] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2708.116583] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2708.117519] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2708.118463] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2708.119435]  </TASK>
[ 2708.135116] loop4: detected capacity change from 0 to 40
[ 2708.233457] syz-executor.6: attempt to access beyond end of device
[ 2708.233457] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2708.235259] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:24:12 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = open(&(0x7f0000000040)='./file1\x00', 0x301e00, 0x3)
openat(r1, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat2(r0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)={0x41000, 0x90, 0x1c}, 0x18)
fcntl$getflags(r1, 0x3)
acct(&(0x7f0000000000)='./file2\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x80, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:24:12 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xffffff7f)

03:24:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 15)

03:24:12 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 16)

[ 2708.398178] loop3: detected capacity change from 0 to 40
03:24:12 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 11)

03:24:12 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)
execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000180)='\x00', &(0x7f00000001c0)='@:-\\$\x00', &(0x7f0000000240)='/proc/self/attr/sockcreate\x00', &(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='&\x00', &(0x7f0000000340)='/proc/self/attr/sockcreate\x00', &(0x7f0000000380)='^)\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=':\xd7-$(\x00'], 0x1000)

[ 2708.448751] loop7: detected capacity change from 0 to 40
[ 2708.457176] loop4: detected capacity change from 0 to 40
03:24:12 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1000000000000)

[ 2708.512938] loop6: detected capacity change from 0 to 40
03:24:12 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x4040, 0x198)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2708.631525] syz-executor.6: attempt to access beyond end of device
[ 2708.631525] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2708.633197] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2708.668514] loop3: detected capacity change from 0 to 40
[ 2720.981690] loop4: detected capacity change from 0 to 40
[ 2720.983181] loop7: detected capacity change from 0 to 40
03:24:24 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:24:24 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x4000000000000)

03:24:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 16)

03:24:24 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 17)

03:24:24 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 12)

03:24:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:24:24 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x0, 0x4, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2721.009925] FAULT_INJECTION: forcing a failure.
[ 2721.009925] name failslab, interval 1, probability 0, space 0, times 0
[ 2721.011064] loop3: detected capacity change from 0 to 40
[ 2721.011084] CPU: 1 PID: 11654 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2721.012085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2721.012674] Call Trace:
[ 2721.012863]  <TASK>
[ 2721.013032]  dump_stack_lvl+0xc1/0xf0
[ 2721.013330]  should_fail_ex+0x4b4/0x5b0
[ 2721.013633]  ? jbd2__journal_start+0x194/0x810
[ 2721.013980]  should_failslab+0x9/0x20
[ 2721.014282]  kmem_cache_alloc+0x61/0x390
[ 2721.014594]  ? lock_is_held_type+0x9f/0x120
[ 2721.014934]  jbd2__journal_start+0x194/0x810
[ 2721.015281]  __ext4_journal_start_sb+0x3d7/0x560
[ 2721.015638]  ? ext4_dirty_inode+0xa5/0x130
[ 2721.015963]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 2721.016309]  ext4_dirty_inode+0xa5/0x130
[ 2721.016619]  __mark_inode_dirty+0x1aa/0xc10
[ 2721.016950]  generic_update_time+0x261/0x310
[ 2721.017294]  file_modified_flags+0x2d4/0x330
[ 2721.017631]  ? __pfx_file_modified_flags+0x10/0x10
[ 2721.018012]  ext4_buffered_write_iter+0xfd/0x3d0
[ 2721.018375]  ? iter_file_splice_write+0x162/0xcb0
[ 2721.018737]  ext4_file_write_iter+0x36d/0x19b0
[ 2721.019091]  ? iter_file_splice_write+0x162/0xcb0
[ 2721.019465]  ? kasan_save_stack+0x32/0x50
[ 2721.019773]  ? kasan_save_stack+0x22/0x50
[ 2721.020085]  ? kasan_set_track+0x25/0x30
[ 2721.020390]  ? __kasan_kmalloc+0x7f/0x90
[ 2721.020694]  ? __kmalloc+0x5d/0x160
[ 2721.020969]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2721.021329]  ? do_splice_direct+0x1bb/0x290
[ 2721.021652]  ? do_sendfile+0xb67/0x1300
[ 2721.021946]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2721.022291]  ? do_syscall_64+0x3f/0x90
[ 2721.022592]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2721.022984]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2721.023336]  ? lock_is_held_type+0x9f/0x120
[ 2721.023667]  do_iter_readv_writev+0x217/0x3c0
[ 2721.024014]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2721.024390]  ? avc_policy_seqno+0x9/0x20
[ 2721.024711]  ? security_file_permission+0xb5/0xe0
[ 2721.025085]  do_iter_write+0x186/0x820
[ 2721.025374]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2721.025740]  ? iter_file_splice_write+0x162/0xcb0
[ 2721.026094]  ? kasan_set_track+0x25/0x30
[ 2721.026404]  vfs_iter_write+0x7a/0xb0
[ 2721.026694]  iter_file_splice_write+0x737/0xcb0
[ 2721.027047]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2721.027430]  ? __pfx_copy_splice_read+0x10/0x10
[ 2721.027791]  ? inode_security+0x105/0x140
[ 2721.028107]  ? security_file_permission+0xb5/0xe0
[ 2721.028469]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2721.028847]  direct_splice_actor+0x119/0x180
[ 2721.029190]  splice_direct_to_actor+0x349/0x9d0
[ 2721.029547]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2721.029920]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2721.030303]  ? security_file_permission+0xb5/0xe0
[ 2721.030673]  do_splice_direct+0x1bb/0x290
[ 2721.030993]  ? __pfx_do_splice_direct+0x10/0x10
[ 2721.031365]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2721.031753]  ? lock_is_held_type+0x9f/0x120
[ 2721.032083]  do_sendfile+0xb67/0x1300
[ 2721.032377]  ? __pfx_do_sendfile+0x10/0x10
[ 2721.032705]  __x64_sys_sendfile64+0x1d5/0x210
[ 2721.033041]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2721.033409]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2721.033797]  do_syscall_64+0x3f/0x90
[ 2721.034084]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2721.034460] RIP: 0033:0x7fa51deffb19
[ 2721.034735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2721.036009] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2721.036547] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2721.037055] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2721.037559] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2721.038056] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2721.038561] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2721.039076]  </TASK>
03:24:24 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x1004001, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2721.089926] loop6: detected capacity change from 0 to 40
03:24:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r1, &(0x7f0000000000)='./file0\x00', 0x330700, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000180))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

03:24:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 18)

03:24:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 17)

03:24:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 13)

[ 2721.172714] loop3: detected capacity change from 0 to 40
[ 2721.173092] loop4: detected capacity change from 0 to 40
[ 2721.195974] loop7: detected capacity change from 0 to 40
03:24:25 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0xffffffff, 0x3, &(0x7f0000000480)=[{&(0x7f0000000240)="69e66f5d0ac8fd8b6738cf566afb7b16824b1aac8d73c6acdf245fde19c5540e8c6b62a6f61addcb78ee64b47a22eedf3f523050e6318adbd230413b05ee7db1e70a22cf9dcddc8e47038fcaf00dd5541683efbf306d1797c0da0a3197c69dbb6f4b69386db2b7edf78f6380679cef5a2bdb3711d717576075d85c7c30956120666778239d70db9661c6db91ecd28fd0b7f38198f6959c1958af7a99663e012568c9f524b62cb0c8e49f6645fa8552c10edf9c9d865dc7b4cce0da0c32a7478ca8966ca79ba60e686f383394df9bffecd7dabbf7fc982f72e02dded7dd73f22d65", 0xe1, 0x7}, {&(0x7f0000000340)="66d9d9fe498ce370d6881544f28456e9d77714e09340e75a1e9300b32598779753857f26e9640dddf4a5bf5b99a19a94402e9b663fc64531dce2f681f7992baa22064ef9afadcc9fd7b4072b11c1c5018c5bdf762a5ae5f4a3942ebac240f6649545b87605a7f8e8c3d13368a2fa13816aac2c9036d4", 0x76, 0x8}, {&(0x7f00000003c0)="17bb40c155e117b02b6259973452d54776bbf9ece4b14429b99bbb401725a0efb85e27dd9baee2dea95d9e75265ac8a4c03e386819222c832fe8bd857e0b10bcab771a5fd08e32930fb5d9b31d1457587a4cfb520ba83a49d795110645fe5b88c6fa81c9d6d82bb33841cd4f3a658766f05bf264d40bc56d5a2c8ac38d11921b5169659b6f8125410714fa2fe1b780753bde723a5139", 0x96, 0x400000000}], 0x2015001, &(0x7f0000000500)={[{@nodots}, {@dots}, {@fat=@discard}], [{@smackfsdef={'smackfsdef', 0x3d, '/proc/self/attr/sockcreate\x00'}}, {@fsname={'fsname', 0x3d, ':#]'}}]})
pread64(r2, &(0x7f00000001c0)=""/61, 0x3d, 0x2)

03:24:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 18)

03:24:25 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 19)

[ 2721.311099] loop6: detected capacity change from 0 to 40
[ 2721.362884] loop4: detected capacity change from 0 to 40
[ 2721.382223] loop7: detected capacity change from 0 to 40
03:24:25 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 14)

[ 2721.392092] syz-executor.6: attempt to access beyond end of device
[ 2721.392092] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2721.393159] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2721.409509] FAULT_INJECTION: forcing a failure.
[ 2721.409509] name failslab, interval 1, probability 0, space 0, times 0
[ 2721.410379] CPU: 0 PID: 11678 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2721.410964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2721.411590] Call Trace:
[ 2721.411779]  <TASK>
[ 2721.411950]  dump_stack_lvl+0xc1/0xf0
[ 2721.412247]  should_fail_ex+0x4b4/0x5b0
[ 2721.412548]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2721.412894]  should_failslab+0x9/0x20
[ 2721.413175]  kmem_cache_alloc+0x61/0x390
[ 2721.413504]  fat_cache_add.part.0+0x5b4/0xb50
[ 2721.413854]  fat_get_cluster+0x922/0xd40
[ 2721.414178]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2721.414548]  fat_get_mapped_cluster+0x216/0x4a0
[ 2721.414905]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2721.415316]  fat_bmap+0x1fc/0x460
[ 2721.415589]  fat_get_block+0x33e/0x9f0
[ 2721.415891]  ? __pfx_fat_get_block+0x10/0x10
[ 2721.416246]  __block_write_begin_int+0x3f5/0x1530
[ 2721.416601]  ? __pfx_fat_get_block+0x10/0x10
[ 2721.416942]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2721.417334]  ? __pfx_fat_get_block+0x10/0x10
[ 2721.417659]  block_write_begin+0xb9/0x450
[ 2721.417973]  cont_write_begin+0x4fe/0x700
[ 2721.418293]  ? __pfx_fat_get_block+0x10/0x10
[ 2721.418618]  ? __pfx_cont_write_begin+0x10/0x10
[ 2721.418960]  ? lock_release+0x1e3/0x680
[ 2721.419285]  ? __pfx_lock_release+0x10/0x10
[ 2721.419615]  ? do_raw_spin_lock+0x125/0x270
[ 2721.419953]  fat_write_begin+0x89/0x180
[ 2721.420256]  ? __pfx_fat_get_block+0x10/0x10
[ 2721.420605]  generic_perform_write+0x26f/0x5e0
[ 2721.420976]  ? __pfx_generic_perform_write+0x10/0x10
[ 2721.421356]  ? __pfx_fat_update_time+0x10/0x10
[ 2721.421565] syz-executor.6: attempt to access beyond end of device
[ 2721.421565] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2721.421695]  ? __pfx_file_update_time+0x10/0x10
[ 2721.423299] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2721.423586]  ? __pfx_generic_write_checks+0x10/0x10
[ 2721.424894]  ? direct_splice_actor+0x119/0x180
[ 2721.425250]  __generic_file_write_iter+0x160/0x1a0
[ 2721.425605]  generic_file_write_iter+0xe7/0x350
[ 2721.425948]  do_iter_readv_writev+0x217/0x3c0
[ 2721.426291]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2721.426677]  ? avc_policy_seqno+0x9/0x20
[ 2721.427004]  ? security_file_permission+0xb5/0xe0
[ 2721.427400]  do_iter_write+0x186/0x820
[ 2721.427696]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2721.428063]  ? iter_file_splice_write+0x162/0xcb0
[ 2721.428422]  ? kasan_set_track+0x25/0x30
[ 2721.428735]  vfs_iter_write+0x7a/0xb0
[ 2721.429024]  iter_file_splice_write+0x737/0xcb0
[ 2721.429389]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2721.429766]  ? __pfx_copy_splice_read+0x10/0x10
[ 2721.430125]  ? inode_security+0x105/0x140
[ 2721.430448]  ? security_file_permission+0xb5/0xe0
[ 2721.430814]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2721.431203]  direct_splice_actor+0x119/0x180
[ 2721.431551]  splice_direct_to_actor+0x349/0x9d0
[ 2721.431910]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2721.432290]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2721.432681]  ? security_file_permission+0xb5/0xe0
[ 2721.433058]  do_splice_direct+0x1bb/0x290
[ 2721.433380]  ? __pfx_do_splice_direct+0x10/0x10
[ 2721.433738]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2721.434134]  ? lock_is_held_type+0x9f/0x120
[ 2721.434467]  do_sendfile+0xb67/0x1300
[ 2721.434778]  ? __pfx_do_sendfile+0x10/0x10
[ 2721.435114]  __x64_sys_sendfile64+0x1d5/0x210
[ 2721.435465]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2721.435840]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2721.436230]  do_syscall_64+0x3f/0x90
[ 2721.436522]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2721.436902] RIP: 0033:0x7f435bfddb19
[ 2721.437177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2721.438447] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2721.438998] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2721.439520] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2721.440020] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2721.440531] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2721.441042] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2721.441582]  </TASK>
03:24:39 executing program 6:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x5, 0x7, 0x4, 0x8, 0x4})
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:24:39 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:24:39 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
linkat(r0, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000240)='./file1\x00', 0x1000)
chdir(&(0x7f0000000000)='./file1\x00')
unlink(&(0x7f0000000180)='./file1\x00')

03:24:39 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x8000000000000)

03:24:39 executing program 5:
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2736.021443] loop7: detected capacity change from 0 to 40
03:24:39 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 20)

03:24:39 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 15)

03:24:39 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 19)

[ 2736.028817] loop6: detected capacity change from 0 to 40
[ 2736.030962] loop4: detected capacity change from 0 to 40
[ 2736.034674] loop3: detected capacity change from 0 to 40
03:24:40 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x81, 0xff, 0x0, 0x81, 0x0, 0x10000, 0x1008, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x47}, 0x1, 0xffffffff, 0x3, 0x3, 0x1ab, 0x800, 0xfff9, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8)
write(r0, &(0x7f0000000340)="97f22342bd8d716cce21645c3b06cc2014c793e174988fcc88663b08f2544b512839078d0ed0ec8c1182f9553b5b11ffd9cea6ed30978bf46acfc74677cfcd5b793cbad84bd73c7ba65519c47e8a1d60833dd4948755a83f38a8991de3e4ddcd0bdae3a1e9bcda6a9c874325bb7cb427536ef1", 0x73)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x0)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x4, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4010, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0xd71b854fb6ee4ed2, 0x7fff, 0x93f, 0x8, 0x7, 0x101, 0x401, 0x0, 0x7fff, 0x0, 0x4}, r1, 0xc, r2, 0x1a)

03:24:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 21)

03:24:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 20)

[ 2736.146634] syz-executor.6: attempt to access beyond end of device
[ 2736.146634] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2736.148684] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2736.178451] syz-executor.6: attempt to access beyond end of device
[ 2736.178451] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2736.180255] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:24:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 16)

[ 2736.208795] loop3: detected capacity change from 0 to 40
[ 2736.220917] loop7: detected capacity change from 0 to 40
[ 2736.225514] FAT-fs (loop3): invalid media value (0x00)
[ 2736.226318] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2736.230871] loop4: detected capacity change from 0 to 40
03:24:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xff, 0x7f, 0x3, 0x7, 0x0, 0x3, 0x80, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xb, @perf_config_ext={0x8000, 0x20}, 0x422, 0x5, 0x2, 0x8, 0x200000000000, 0x1, 0x400, 0x0, 0xff, 0x0, 0x9}, 0x0, 0x2, r2, 0x0)

[ 2736.258829] FAULT_INJECTION: forcing a failure.
[ 2736.258829] name failslab, interval 1, probability 0, space 0, times 0
[ 2736.260799] CPU: 1 PID: 11717 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2736.261914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2736.263025] Call Trace:
[ 2736.263408]  <TASK>
[ 2736.263745]  dump_stack_lvl+0xc1/0xf0
[ 2736.264321]  should_fail_ex+0x4b4/0x5b0
[ 2736.264910]  ? ext4_find_extent+0xa41/0xd30
[ 2736.265528]  should_failslab+0x9/0x20
[ 2736.266074]  __kmem_cache_alloc_node+0x66/0x310
[ 2736.266755]  ? ext4_find_extent+0xa41/0xd30
[ 2736.267395]  ? mark_lock.part.0+0xef/0x2f50
[ 2736.268020]  ? ext4_find_extent+0xa41/0xd30
[ 2736.268646]  __kmalloc+0x4d/0x160
[ 2736.269154]  ext4_find_extent+0xa41/0xd30
[ 2736.269756]  ? __lock_acquire+0x19b1/0x6340
[ 2736.270349]  ext4_ext_map_blocks+0x1c7/0x5940
[ 2736.271021]  ? __pfx___lock_acquire+0x10/0x10
[ 2736.271638]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2736.272307]  ? perf_trace_lock+0xc1/0x480
[ 2736.272897]  ? __pfx_register_lock_class+0x10/0x10
[ 2736.273607]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 2736.274311]  ? lock_acquire+0x19a/0x4c0
[ 2736.274888]  ? ext4_da_get_block_prep+0x5e0/0x1150
[ 2736.275637]  ? __pfx_lock_acquire+0x10/0x10
[ 2736.276256]  ? ext4_es_lookup_extent+0x48c/0xad0
[ 2736.276953]  ? lock_release+0x1e3/0x680
[ 2736.277528]  ? lock_is_held_type+0x9f/0x120
[ 2736.278170]  ? down_read+0x1b4/0x470
[ 2736.278690]  ? __pfx_down_read+0x10/0x10
[ 2736.279288]  ? ext4_es_lookup_extent+0xc8/0xad0
[ 2736.279992]  ext4_da_get_block_prep+0xc7a/0x1150
[ 2736.280684]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2736.281415]  ? __block_write_begin_int+0x121b/0x1530
[ 2736.282143]  ? __pfx_lock_release+0x10/0x10
[ 2736.282784]  __block_write_begin_int+0x3f5/0x1530
[ 2736.283496]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2736.284250]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2736.284907]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2736.285643]  ? __filemap_get_folio+0x1d3/0x8d0
[ 2736.286318]  ext4_da_write_begin+0x30b/0x840
[ 2736.286970]  ? __pfx_ext4_da_write_begin+0x10/0x10
[ 2736.287699]  generic_perform_write+0x26f/0x5e0
[ 2736.288373]  ? __pfx_generic_perform_write+0x10/0x10
[ 2736.289108]  ? __pfx_file_modified_flags+0x10/0x10
[ 2736.289822]  ext4_buffered_write_iter+0x123/0x3d0
[ 2736.290503]  ? iter_file_splice_write+0x162/0xcb0
[ 2736.291184]  ext4_file_write_iter+0x36d/0x19b0
[ 2736.291845]  ? iter_file_splice_write+0x162/0xcb0
[ 2736.292519]  ? kasan_save_stack+0x32/0x50
[ 2736.293124]  ? kasan_save_stack+0x22/0x50
[ 2736.293724]  ? kasan_set_track+0x25/0x30
[ 2736.294312]  ? __kasan_kmalloc+0x7f/0x90
[ 2736.294865]  ? __kmalloc+0x5d/0x160
[ 2736.295407]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2736.296112]  ? do_splice_direct+0x1bb/0x290
[ 2736.296734]  ? do_sendfile+0xb67/0x1300
[ 2736.297299]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2736.297958]  ? do_syscall_64+0x3f/0x90
[ 2736.298538]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2736.299277]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2736.299949]  ? lock_is_held_type+0x9f/0x120
[ 2736.300581]  do_iter_readv_writev+0x217/0x3c0
[ 2736.301242]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2736.301960]  ? avc_policy_seqno+0x9/0x20
[ 2736.302542]  ? security_file_permission+0xb5/0xe0
[ 2736.303271]  do_iter_write+0x186/0x820
[ 2736.303849]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2736.304554]  ? iter_file_splice_write+0x162/0xcb0
[ 2736.305234]  ? kasan_set_track+0x25/0x30
[ 2736.305835]  vfs_iter_write+0x7a/0xb0
[ 2736.306388]  iter_file_splice_write+0x737/0xcb0
[ 2736.307068]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2736.307817]  ? __pfx_copy_splice_read+0x10/0x10
[ 2736.308505]  ? inode_security+0x105/0x140
[ 2736.309116]  ? security_file_permission+0xb5/0xe0
[ 2736.309816]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2736.310543]  direct_splice_actor+0x119/0x180
[ 2736.311195]  splice_direct_to_actor+0x349/0x9d0
[ 2736.311894]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2736.312615]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2736.313366]  ? security_file_permission+0xb5/0xe0
[ 2736.314074]  do_splice_direct+0x1bb/0x290
[ 2736.314686]  ? __pfx_do_splice_direct+0x10/0x10
[ 2736.315386]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2736.316147]  ? lock_is_held_type+0x9f/0x120
[ 2736.316784]  do_sendfile+0xb67/0x1300
[ 2736.317354]  ? __pfx_do_sendfile+0x10/0x10
[ 2736.317938]  __x64_sys_sendfile64+0x1d5/0x210
[ 2736.318590]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2736.319324]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2736.320035]  do_syscall_64+0x3f/0x90
[ 2736.320592]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2736.321324] RIP: 0033:0x7fa51deffb19
[ 2736.321858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2736.324307] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2736.325344] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2736.326313] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2736.327283] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2736.328264] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2736.329237] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2736.330242]  </TASK>
[ 2736.347432] loop3: detected capacity change from 0 to 40
[ 2736.361834] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
03:24:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 22)

03:24:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 21)

[ 2736.415338] loop6: detected capacity change from 0 to 40
03:24:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, @in_args={0x2}}, './file0\x00'})
close_range(r2, r1, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2736.478536] loop4: detected capacity change from 0 to 40
[ 2736.482485] loop7: detected capacity change from 0 to 40
03:24:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
openat(r1, &(0x7f0000000040)='./file0\x00', 0x341800, 0x80)
stat(&(0x7f0000000280)='./file2\x00', &(0x7f00000002c0))
openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x210080, 0x4)
fallocate(r2, 0xa, 0x7f, 0x80000000000)

03:24:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 22)

[ 2736.628548] loop6: detected capacity change from 0 to 40
[ 2736.699661] syz-executor.6: attempt to access beyond end of device
[ 2736.699661] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2736.701358] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2736.739914] syz-executor.6: attempt to access beyond end of device
[ 2736.739914] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2736.741458] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2736.756373] loop4: detected capacity change from 0 to 40
03:24:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 23)

03:24:53 executing program 5:
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:24:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/115, 0x73, 0x2001, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7121}, 0x605, 0x5, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:24:53 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0x0, 0x2, 0x10001, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
openat(r0, &(0x7f0000000000)='./file0\x00', 0x20000, 0x140)
unlink(&(0x7f0000000180)='./file1\x00')

03:24:53 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 17)

03:24:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 23)

03:24:53 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x20000000000000)

03:24:53 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2749.184041] loop6: detected capacity change from 0 to 40
[ 2749.201802] loop7: detected capacity change from 0 to 40
[ 2749.222350] loop4: detected capacity change from 0 to 40
[ 2749.240799] syz-executor.6: attempt to access beyond end of device
[ 2749.240799] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2749.241600] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2749.254791] loop3: detected capacity change from 0 to 40
[ 2749.269970] syz-executor.6: attempt to access beyond end of device
[ 2749.269970] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2749.272023] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:24:53 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 18)

03:24:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 24)

03:24:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = pidfd_getfd(r0, r1, 0x0)
openat(r2, &(0x7f0000000040)='./file1\x00', 0x40000, 0x6)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2749.364097] loop4: detected capacity change from 0 to 40
[ 2749.394006] FAULT_INJECTION: forcing a failure.
[ 2749.394006] name failslab, interval 1, probability 0, space 0, times 0
[ 2749.396549] CPU: 0 PID: 11767 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2749.397917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2749.398529] loop6: detected capacity change from 0 to 40
[ 2749.399295] Call Trace:
[ 2749.400163]  <TASK>
[ 2749.400570]  dump_stack_lvl+0xc1/0xf0
[ 2749.401277]  should_fail_ex+0x4b4/0x5b0
[ 2749.401996]  ? __es_insert_extent+0xed1/0x1370
[ 2749.402799]  should_failslab+0x9/0x20
[ 2749.403484]  kmem_cache_alloc+0x61/0x390
[ 2749.404223]  ? __pfx___es_remove_extent+0x10/0x10
[ 2749.405086]  __es_insert_extent+0xed1/0x1370
[ 2749.405887]  ? __pfx_do_raw_write_lock+0x10/0x10
[ 2749.406765]  ext4_es_insert_extent+0x2b4/0xc50
[ 2749.407618]  ? __pfx_ext4_es_insert_extent+0x10/0x10
[ 2749.408544]  ? __pfx_lock_release+0x10/0x10
[ 2749.409295]  ? kasan_set_track+0x25/0x30
[ 2749.410041]  ? __pfx_ext4_es_is_delayed+0x10/0x10
[ 2749.410903]  ? __es_find_extent_range+0x197/0x4b0
[ 2749.411618]  ? do_raw_read_unlock+0x44/0xe0
[ 2749.412392]  ext4_ext_map_blocks+0x18eb/0x5940
[ 2749.413090]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2749.413983]  ? __pfx___lock_acquire+0x10/0x10
[ 2749.414641]  ? finish_task_switch.isra.0+0x293/0x830
[ 2749.415383]  ? __switch_to+0x5c6/0xeb0
[ 2749.415979]  ? __schedule+0x9b1/0x2b00
[ 2749.416575]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 2749.417287]  ? lock_acquire+0x19a/0x4c0
[ 2749.417977]  ? ext4_da_get_block_prep+0x5e0/0x1150
[ 2749.418721]  ? __pfx_lock_acquire+0x10/0x10
[ 2749.419351]  ? ext4_es_lookup_extent+0x48c/0xad0
[ 2749.420090]  ? lock_is_held_type+0x9f/0x120
[ 2749.420766]  ? down_read+0x1b4/0x470
[ 2749.421337]  ? __pfx_down_read+0x10/0x10
[ 2749.421948]  ? ext4_es_lookup_extent+0xc8/0xad0
[ 2749.422797]  ext4_da_get_block_prep+0xc7a/0x1150
[ 2749.423526]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2749.424455]  ? __block_write_begin_int+0x121b/0x1530
[ 2749.425207]  ? __pfx_lock_release+0x10/0x10
[ 2749.426012]  __block_write_begin_int+0x3f5/0x1530
[ 2749.426722]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2749.427499]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2749.428181]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2749.428936]  ? __filemap_get_folio+0x1d3/0x8d0
[ 2749.429641]  ext4_da_write_begin+0x30b/0x840
[ 2749.430316]  ? __pfx_ext4_da_write_begin+0x10/0x10
[ 2749.431065]  generic_perform_write+0x26f/0x5e0
[ 2749.431794]  ? __pfx_generic_perform_write+0x10/0x10
[ 2749.432539]  ? __pfx_file_modified_flags+0x10/0x10
[ 2749.433418]  ext4_buffered_write_iter+0x123/0x3d0
[ 2749.434108]  ? iter_file_splice_write+0x162/0xcb0
[ 2749.434813]  ext4_file_write_iter+0x36d/0x19b0
[ 2749.435484]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2749.436243]  ? iter_file_splice_write+0x162/0xcb0
[ 2749.436932]  ? kasan_save_stack+0x32/0x50
[ 2749.437541]  ? kasan_save_stack+0x22/0x50
[ 2749.438152]  ? kasan_set_track+0x25/0x30
[ 2749.438755]  ? __kasan_kmalloc+0x7f/0x90
[ 2749.439358]  ? __kmalloc+0x5d/0x160
[ 2749.440048]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2749.440766]  ? do_splice_direct+0x1bb/0x290
[ 2749.441531]  ? do_sendfile+0xb67/0x1300
[ 2749.442110]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2749.442916]  ? do_syscall_64+0x3f/0x90
[ 2749.443517]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2749.444280]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2749.445067]  ? lock_is_held_type+0x9f/0x120
[ 2749.445738]  do_iter_readv_writev+0x217/0x3c0
[ 2749.446423]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2749.447163]  ? avc_policy_seqno+0x9/0x20
[ 2749.447808]  ? security_file_permission+0xb5/0xe0
[ 2749.448545]  do_iter_write+0x186/0x820
[ 2749.449120]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2749.449973]  ? iter_file_splice_write+0x162/0xcb0
[ 2749.450671]  ? kasan_set_track+0x25/0x30
[ 2749.451290]  vfs_iter_write+0x7a/0xb0
[ 2749.451875]  iter_file_splice_write+0x737/0xcb0
[ 2749.452597]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2749.453332]  ? __pfx_copy_splice_read+0x10/0x10
[ 2749.454038]  ? inode_security+0x105/0x140
[ 2749.454814]  ? security_file_permission+0xb5/0xe0
[ 2749.455554]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2749.456299]  direct_splice_actor+0x119/0x180
[ 2749.456976]  splice_direct_to_actor+0x349/0x9d0
[ 2749.457678]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2749.458551]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2749.459319]  ? security_file_permission+0xb5/0xe0
[ 2749.460062]  do_splice_direct+0x1bb/0x290
[ 2749.460687]  ? __pfx_do_splice_direct+0x10/0x10
[ 2749.461384]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2749.462162]  ? lock_is_held_type+0x9f/0x120
[ 2749.462819]  do_sendfile+0xb67/0x1300
[ 2749.463409]  ? __pfx_do_sendfile+0x10/0x10
[ 2749.464093]  __x64_sys_sendfile64+0x1d5/0x210
[ 2749.464764]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2749.465653]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2749.466427]  do_syscall_64+0x3f/0x90
[ 2749.467094]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2749.467845] RIP: 0033:0x7fa51deffb19
[ 2749.468488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2749.470920] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2749.472202] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2749.473188] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2749.474168] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2749.475148] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2749.476145] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2749.477186]  </TASK>
03:24:53 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 24)

03:24:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = socket$packet(0x11, 0x3, 0x300)
dup(r0)

[ 2749.527833] syz-executor.6: attempt to access beyond end of device
[ 2749.527833] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2749.528700] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:24:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 25)

[ 2749.582072] loop3: detected capacity change from 0 to 40
[ 2749.608550] loop7: detected capacity change from 0 to 40
03:24:53 executing program 5:
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:24:53 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{0x0, 0xff, 0x9d, 0x3}, {0x3, 0x4, 0x2, 0x100}, {0x3, 0x1f, 0x7f, 0x1ff}, {0x0, 0x1, 0x3, 0x20}]}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2749.709008] loop6: detected capacity change from 0 to 40
[ 2749.840663] syz-executor.6: attempt to access beyond end of device
[ 2749.840663] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2749.842627] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2764.747626] loop7: detected capacity change from 0 to 40
03:25:08 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40030000000000)

03:25:08 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000240)="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", 0x245}, {0x0, 0x0, 0x2840}], 0xa0000, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0])
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file1\x00'})
r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x8000, 0x4)
openat(r2, &(0x7f00000001c0)='./file1/file0\x00', 0x40000, 0x88)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:25:08 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:25:08 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 19)

03:25:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 26)

03:25:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 25)

03:25:08 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:25:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000180)='./file1\x00')
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2764.787716] loop3: detected capacity change from 0 to 40
[ 2764.800695] loop6: detected capacity change from 0 to 40
[ 2764.813900] loop3: detected capacity change from 0 to 40
[ 2764.814665] loop4: detected capacity change from 0 to 40
03:25:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 26)

03:25:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x90)
clock_gettime(0x0, &(0x7f0000005b80)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000001640), 0x6e, &(0x7f0000003940)=[{&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/91, 0x5b}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/78, 0x4e}, {&(0x7f0000003840)=""/203, 0xcb}], 0x6, &(0x7f00000039c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003ac0)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000003b40)=""/176, 0xb0}, {&(0x7f0000003c00)=""/236, 0xec}, {&(0x7f0000003d00)=""/189, 0xbd}], 0x4}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003e40)=""/27, 0x1b}, {&(0x7f0000003e80)=""/222, 0xde}, {&(0x7f0000003f80)=""/81, 0x51}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/245, 0xf5}, {&(0x7f0000005100)=""/149, 0x95}], 0x6}}, {{&(0x7f0000005240), 0x6e, &(0x7f00000053c0)=[{&(0x7f00000052c0)=""/151, 0x97}, {&(0x7f0000005380)=""/19, 0x13}], 0x2, &(0x7f0000005400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f00000054c0), 0x6e, &(0x7f0000005840)=[{&(0x7f0000005540)=""/164, 0xa4}, {&(0x7f0000005600)=""/138, 0x8a}, {&(0x7f00000056c0)=""/106, 0x6a}, {&(0x7f0000005740)=""/218, 0xda}], 0x4, &(0x7f0000005880)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}], 0x6, 0x101, &(0x7f0000005bc0)={r1, r2+60000000})
openat(r3, &(0x7f0000005c00)='./file0\x00', 0x8000, 0x88)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2764.904035] syz-executor.6: attempt to access beyond end of device
[ 2764.904035] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2764.905670] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2764.907044] loop7: detected capacity change from 0 to 40
[ 2764.941759] syz-executor.6: attempt to access beyond end of device
[ 2764.941759] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2764.943497] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2764.957237] loop3: detected capacity change from 0 to 40
03:25:08 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 20)

03:25:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 27)

03:25:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 27)

[ 2765.078896] FAULT_INJECTION: forcing a failure.
[ 2765.078896] name failslab, interval 1, probability 0, space 0, times 0
[ 2765.079787] CPU: 0 PID: 11820 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2765.080375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2765.080964] Call Trace:
[ 2765.081161]  <TASK>
[ 2765.081332]  dump_stack_lvl+0xc1/0xf0
[ 2765.081631]  should_fail_ex+0x4b4/0x5b0
[ 2765.081941]  ? __es_insert_extent+0xed1/0x1370
[ 2765.082293]  should_failslab+0x9/0x20
[ 2765.082575]  kmem_cache_alloc+0x61/0x390
[ 2765.082880]  ? ext4_es_can_be_merged.isra.0+0x16d/0x190
[ 2765.083288]  __es_insert_extent+0xed1/0x1370
[ 2765.083654]  ext4_es_insert_delayed_block+0x265/0x590
[ 2765.084057]  ? __pfx_ext4_es_insert_delayed_block+0x10/0x10
[ 2765.084475]  ? percpu_counter_add_batch+0xc8/0x180
[ 2765.084847]  ? do_raw_spin_unlock+0x53/0x220
[ 2765.085188]  ? _raw_spin_unlock+0x1e/0x40
[ 2765.085502]  ? ext4_da_reserve_space+0xf8/0x3d0
[ 2765.085874]  ext4_da_get_block_prep+0x943/0x1150
[ 2765.086249]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2765.086642]  ? __block_write_begin_int+0x121b/0x1530
[ 2765.087031]  ? __pfx_lock_release+0x10/0x10
[ 2765.087389]  __block_write_begin_int+0x3f5/0x1530
[ 2765.087774]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2765.088173]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2765.088530]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2765.088934]  ? __filemap_get_folio+0x1d3/0x8d0
[ 2765.089304]  ext4_da_write_begin+0x30b/0x840
[ 2765.089656]  ? __pfx_ext4_da_write_begin+0x10/0x10
[ 2765.090050]  generic_perform_write+0x26f/0x5e0
[ 2765.090421]  ? __pfx_generic_perform_write+0x10/0x10
[ 2765.090807]  ? __pfx_file_modified_flags+0x10/0x10
[ 2765.091208]  ext4_buffered_write_iter+0x123/0x3d0
[ 2765.091569]  ? iter_file_splice_write+0x162/0xcb0
[ 2765.091936]  ext4_file_write_iter+0x36d/0x19b0
[ 2765.092285]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2765.092681]  ? iter_file_splice_write+0x162/0xcb0
[ 2765.093049]  ? kasan_save_stack+0x32/0x50
[ 2765.093374]  ? kasan_save_stack+0x22/0x50
[ 2765.093697]  ? kasan_set_track+0x25/0x30
[ 2765.094010]  ? __kasan_kmalloc+0x7f/0x90
[ 2765.094323]  ? __kmalloc+0x5d/0x160
[ 2765.094601]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2765.094972]  ? do_splice_direct+0x1bb/0x290
[ 2765.095306]  ? do_sendfile+0xb67/0x1300
[ 2765.095611]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2765.095962]  ? do_syscall_64+0x3f/0x90
[ 2765.096271]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2765.096664]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2765.097017]  ? lock_is_held_type+0x9f/0x120
[ 2765.097370]  do_iter_readv_writev+0x217/0x3c0
[ 2765.097725]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2765.098115]  ? avc_policy_seqno+0x9/0x20
[ 2765.098454]  ? security_file_permission+0xb5/0xe0
[ 2765.098839]  do_iter_write+0x186/0x820
[ 2765.099123]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2765.099497]  ? iter_file_splice_write+0x162/0xcb0
[ 2765.099847]  ? kasan_set_track+0x25/0x30
[ 2765.100167]  vfs_iter_write+0x7a/0xb0
[ 2765.100463]  iter_file_splice_write+0x737/0xcb0
[ 2765.100839]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2765.101222]  ? __pfx_copy_splice_read+0x10/0x10
[ 2765.101587]  ? inode_security+0x105/0x140
[ 2765.101917]  ? security_file_permission+0xb5/0xe0
[ 2765.102291]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2765.102679]  direct_splice_actor+0x119/0x180
[ 2765.102693] loop4: detected capacity change from 0 to 40
[ 2765.103023]  splice_direct_to_actor+0x349/0x9d0
[ 2765.104163]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2765.104551]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2765.104949]  ? security_file_permission+0xb5/0xe0
[ 2765.105342]  do_splice_direct+0x1bb/0x290
[ 2765.105675]  ? __pfx_do_splice_direct+0x10/0x10
[ 2765.106044]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2765.106455]  ? lock_is_held_type+0x9f/0x120
[ 2765.106805]  do_sendfile+0xb67/0x1300
[ 2765.107115]  ? __pfx_do_sendfile+0x10/0x10
[ 2765.107460]  __x64_sys_sendfile64+0x1d5/0x210
[ 2765.107790]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2765.108177]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2765.108576]  do_syscall_64+0x3f/0x90
[ 2765.108873]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2765.109257] RIP: 0033:0x7fa51deffb19
[ 2765.109536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2765.110819] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2765.111376] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2765.111900] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2765.112415] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2765.112934] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2765.113446] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2765.113988]  </TASK>
03:25:08 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r0, &(0x7f0000000580)='./file0\x00', 0x1a5080, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000500)={{'\x00', 0x3}, {0x4}, 0x100, 0x0, 0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)="26163aedb8a6a4754658d38e76f1755a3847f08cd9b9e9a5653a7e057c8f10bc1a3f9b4b70d24c7079af749c397d485ab41a2e1df41ed11fb5c8b9925c386a61", 0x40, 0x0, &(0x7f00000002c0)={0x2, 0x195, {0x1, 0xc, 0x90, "b5e4bf3a22900a8f961f594eefc4f7dfbecb40192c49c14bdaeedef09f26b941e82ca69b3fb9aa61feb7ea5a2383d9467eb3ac23287beb5e29bd5588937833c8ceeb0918948650ee87b20793e71787efa196e42d4dcb1f861548e19dbb19724bc293f87cc79396f4d48841cdfe5daee33d96b7b045841f128484ff0b0ca418c2ee7154193adae2c82bd84793c376f2f4", 0xf8, "8d6e2c9a3b44bdf76ea3655c431783092c5fd7d27796e36a25e57f2b461cbd61f9a2f24254b34ffb3e1eab7d3de930971cb195730c80632067b44c5ab3b94545cb9e4882e8df36f8f68ca5a2f3d46a202a15e719bc72693f24b50c32795d33881a803a6ccf54ff7427df925210492ca717986e14b0580007fb1fd1b77983b91d7ed322c5ef498f7dbf54130840ee79771144fe683b146b44388382066055a21a52e8c2506d40909b8c5446d21848a1fbce8306a8ecdfb27c6f2bb02e55ee09610a8c6eec377cb25e68a783dc6ab60b97d069a092a1c906fa33b5918dbcc431cde74a3a63abdb849811a0c594ff2c2033db83b238d63f1c07"}, 0x9c, "6a78fded9fa81f32be3e48e35a361d7ec04106a3fc2bffddb4d9e4563e029e8bb4150e96e8fdb5a6511f76075317ad4a2c8f91d8c86b6604eccdf5f9ef1fea3fa5a6f7715170a96aa2e9c1dc6f075d82d4f6e057c54046e23eb1e642f131a3a2e1b0d77864b1f95333eab94772642f5a9bb7eca9fcbdedb567789bd98cc3e35f5b404488b4e924ef6cef17297f1642e8d7775befc912f00c4a133b49"}, 0x23d})
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)

03:25:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000440002000f80100"/23, 0x17, 0x7fc}, {0x0, 0x0, 0xc95f}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f00000001c0)='./file3\x00', 0x400000, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file2\x00', 0x4c0240, 0x191)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2765.141961] loop7: detected capacity change from 0 to 40
[ 2765.164323] loop6: detected capacity change from 0 to 40
03:25:09 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 28)

[ 2765.246083] loop3: detected capacity change from 0 to 201
[ 2765.274449] FAT-fs (loop3): bogus number of reserved sectors
[ 2765.275298] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 2765.286287] loop7: detected capacity change from 0 to 40
[ 2765.313385] loop3: detected capacity change from 0 to 201
[ 2765.326013] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
[ 2765.333241] syz-executor.6: attempt to access beyond end of device
[ 2765.333241] loop6: rw=2049, sector=48, nr_sectors = 4 limit=40
[ 2765.361364] syz-executor.6: attempt to access beyond end of device
[ 2765.361364] loop6: rw=2049, sector=48, nr_sectors = 4 limit=40
03:25:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 29)

03:25:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 28)

03:25:21 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:25:21 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x100000000000000)

[ 2777.267462] loop6: detected capacity change from 0 to 40
03:25:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r1 = accept4(r0, &(0x7f0000000000)=@ll, &(0x7f00000001c0)=0x80, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
sendfile(r1, r2, 0x0, 0x5)

03:25:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
mknod(&(0x7f0000000180)='./file0\x00', 0xc000, 0x3)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:25:21 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:25:21 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 21)

[ 2777.278554] loop7: detected capacity change from 0 to 40
[ 2777.289358] loop4: detected capacity change from 0 to 40
[ 2777.333972] loop3: detected capacity change from 0 to 40
03:25:21 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 22)

[ 2777.384787] syz-executor.6: attempt to access beyond end of device
[ 2777.384787] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2777.386570] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:25:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 30)

03:25:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 29)

[ 2777.458056] FAULT_INJECTION: forcing a failure.
[ 2777.458056] name failslab, interval 1, probability 0, space 0, times 0
[ 2777.458984] CPU: 0 PID: 11862 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2777.459571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2777.460159] Call Trace:
[ 2777.460355]  <TASK>
[ 2777.460529]  dump_stack_lvl+0xc1/0xf0
[ 2777.460828]  should_fail_ex+0x4b4/0x5b0
[ 2777.461136]  ? jbd2__journal_start+0x194/0x810
[ 2777.461486]  should_failslab+0x9/0x20
[ 2777.461772]  kmem_cache_alloc+0x61/0x390
[ 2777.462080]  ? lock_is_held_type+0x9f/0x120
[ 2777.462421]  jbd2__journal_start+0x194/0x810
[ 2777.462758]  __ext4_journal_start_sb+0x3d7/0x560
[ 2777.463104]  ? ext4_dirty_inode+0xa5/0x130
[ 2777.463426]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 2777.463774]  ext4_dirty_inode+0xa5/0x130
[ 2777.464091]  __mark_inode_dirty+0x1aa/0xc10
[ 2777.464427]  generic_write_end+0x319/0x3d0
[ 2777.464748]  ext4_da_write_end+0x1e4/0xb10
[ 2777.465079]  generic_perform_write+0x333/0x5e0
[ 2777.465448]  ? __pfx_generic_perform_write+0x10/0x10
[ 2777.465827]  ? __pfx_file_modified_flags+0x10/0x10
[ 2777.466210]  ext4_buffered_write_iter+0x123/0x3d0
[ 2777.466565]  ? iter_file_splice_write+0x162/0xcb0
[ 2777.466923]  ext4_file_write_iter+0x36d/0x19b0
[ 2777.467264]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2777.467650]  ? iter_file_splice_write+0x162/0xcb0
[ 2777.468019]  ? kasan_save_stack+0x32/0x50
[ 2777.468333]  ? kasan_save_stack+0x22/0x50
[ 2777.468645]  ? kasan_set_track+0x25/0x30
[ 2777.468948]  ? __kasan_kmalloc+0x7f/0x90
[ 2777.469252]  ? __kmalloc+0x5d/0x160
[ 2777.469529]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2777.469888]  ? do_splice_direct+0x1bb/0x290
[ 2777.470214]  ? do_sendfile+0xb67/0x1300
[ 2777.470513]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2777.470856]  ? do_syscall_64+0x3f/0x90
[ 2777.471153]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2777.471543]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2777.471913]  ? lock_is_held_type+0x9f/0x120
[ 2777.472250]  do_iter_readv_writev+0x217/0x3c0
[ 2777.472597]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2777.472975]  ? avc_policy_seqno+0x9/0x20
[ 2777.473300]  ? security_file_permission+0xb5/0xe0
[ 2777.473682]  do_iter_write+0x186/0x820
[ 2777.473977]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2777.474337]  ? iter_file_splice_write+0x162/0xcb0
[ 2777.474687]  ? kasan_set_track+0x25/0x30
[ 2777.474995]  vfs_iter_write+0x7a/0xb0
[ 2777.475293]  iter_file_splice_write+0x737/0xcb0
[ 2777.475658]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2777.476059]  ? __pfx_copy_splice_read+0x10/0x10
[ 2777.476423]  ? inode_security+0x105/0x140
[ 2777.476757]  ? security_file_permission+0xb5/0xe0
[ 2777.477126]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2777.477501]  direct_splice_actor+0x119/0x180
[ 2777.477839]  splice_direct_to_actor+0x349/0x9d0
[ 2777.478197]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2777.478588]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2777.478974]  ? security_file_permission+0xb5/0xe0
[ 2777.479360]  do_splice_direct+0x1bb/0x290
[ 2777.479677]  ? __pfx_do_splice_direct+0x10/0x10
[ 2777.480044]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2777.480444]  ? lock_is_held_type+0x9f/0x120
[ 2777.480790]  do_sendfile+0xb67/0x1300
[ 2777.481091]  ? __pfx_do_sendfile+0x10/0x10
[ 2777.481433]  __x64_sys_sendfile64+0x1d5/0x210
[ 2777.481771]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2777.481952] loop7: detected capacity change from 0 to 40
[ 2777.482152]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2777.482188]  do_syscall_64+0x3f/0x90
[ 2777.483552]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2777.483950] RIP: 0033:0x7fa51deffb19
[ 2777.484226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2777.485517] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2777.486052] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2777.486573] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2777.487093] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2777.487631] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2777.488163] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2777.488719]  </TASK>
03:25:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1, &(0x7f0000000340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000440)=""/116, 0x74}, {&(0x7f00000004c0)=""/84, 0x54}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/185, 0xb9}], 0x5, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f00000008c0)}, {&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000a00)=""/37, 0x25}, {&(0x7f0000000a40)=""/69, 0x45}], 0x4}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b80)=""/13, 0xd}, {&(0x7f0000000bc0)=""/54, 0x36}, {&(0x7f0000000c00)=""/9, 0x9}, {&(0x7f0000000c40)=""/235, 0xeb}, {&(0x7f0000000d40)=""/86, 0x56}, {&(0x7f0000000dc0)=""/7, 0x7}, {&(0x7f0000000e00)=""/231, 0xe7}], 0x7, &(0x7f0000000f80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x160}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002280)=[{&(0x7f0000001180)}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/186, 0xba}], 0x3, &(0x7f00000022c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x5, 0x20, &(0x7f00000024c0)={0x0, 0x3938700})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2777.512406] loop4: detected capacity change from 0 to 40
[ 2777.558427] loop3: detected capacity change from 0 to 40
03:25:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x101000000000000)

03:25:34 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:25:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 31)

03:25:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 30)

03:25:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 23)

03:25:34 executing program 3:
r0 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000340)=""/137, 0x89)
add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="a52d38e962c11635abf6960e8962b2eaeedd30ea251264dc73280174f4ea2c62fb110c358087884b560e3d8a23471194cf82b9bb7c8225090116912b4d1fdf3a6815e438faf1ceeb1c015bd586c898045077e1c3480676a3d38c4c33cbce4d6f1f65fa64818f5cefc5a53b8e9914bc2dbee2f1ee25ba08576db0d7bc68b804aac02dcfdc4495fdd754a6883b71d9617f5071a87b6fbb62d2f9b1fc5b4b9151d529c48242131b751d507e68", 0xab, r0)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='%}\x00', 0xffffffffffffffff)
openat(r1, &(0x7f0000000440)='./file1\x00', 0x0, 0x111)
chdir(&(0x7f0000000140)='./file0\x00')
request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)='%}\x00', 0xfffffffffffffff9)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:25:34 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:25:34 executing program 6:
r0 = pkey_alloc(0x0, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, r0)
pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, r0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 2790.281545] loop7: detected capacity change from 0 to 40
[ 2790.298657] loop6: detected capacity change from 0 to 40
[ 2790.300472] loop3: detected capacity change from 0 to 40
[ 2790.322317] loop4: detected capacity change from 0 to 40
03:25:34 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000300)='./file0\x00', 0x10b000, 0x20)
unlink(&(0x7f0000000180)='./file1\x00')
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1, 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="b0c3c72b28d5426b25b4a2364691e940ff7bc05f5b7f4019fd0b1a497aa529d095ecb29f996e94422272eb6161d43b3b06f3d1b60f51", 0x36, 0xffff}, {&(0x7f0000000240)="8cd8d0cdf3632d8a24e2c03ad5a7b9e6e65f937d062a7de6eba489a7161186bcdd46dcf001c8aee8722bcef011aff301983b92c550c26b41fb45f4581f8a2b610e879d07e711ac8f4cf366558b6b852a1fc288d21858bbb0bfa72a46cc39118a6edfa907c2ed8ee434130f13028da60be212", 0x72, 0x800}], 0x1000, &(0x7f0000000400)=ANY=[@ANYBLOB="687567653d0800776179732cf6b65fdf691deea708676d643d5fe10687bec201585ae7d7ac00899a721b786d5908d748", @ANYRESHEX=0xee00, @ANYBLOB=',huge=within_size,huge=never,nr_inodes=,mode=01777777777777777777773,mpol=prefer,appraise_type=imasig,subj_role=Z,,obj_type=vfat\x00,\x00'])

[ 2790.420563] syz-executor.6: attempt to access beyond end of device
[ 2790.420563] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2790.422395] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:25:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 32)

03:25:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 24)

[ 2790.449755] loop3: detected capacity change from 0 to 40
[ 2790.463746] syz-executor.6: attempt to access beyond end of device
[ 2790.463746] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2790.465433] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:25:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 31)

[ 2790.507741] loop7: detected capacity change from 0 to 40
03:25:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000540)={{'\x00', 0x3}, {}, 0x8, 0x0, 0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)="6f6ac5c62a378ea495ff84945107f404858f6803d29cbb15aa4e9971a1ba75b75e92c1b33a1de58c9e7dedae83eb6004cb13014fd4b7065a8d120e29069f79555701c8fa84b84b54fe7d4b910666b17e5c51de6e07c4103c993f19a5cf3838e0df7a88d4ebc79e2c5aef5f5e92e786a24f5a736f74c0bdadfc2c20a33991617f79d8ff5dae2b46541990573f823b9afc6d52e11aa6c7691d70356cef9a565c6e5d41acb463355160d919892f16b63f6b96df", 0xb2, 0x0, &(0x7f0000000300)={0x2, 0x10d, {0x1, 0xc, 0xb1, "4080e5308cdc36f918e4de8b43b0b8cd3a7def9993543f620795d45d5f620d4ea34cdf9e9fdf40083d2f5382f223b9245e6fbf51866216b4d7d7051c7465ee863c93b80d43f2cfd080e66dbd981a7c506ad8af49e8d924961bfa12ba918c19101a2aa357dad90c5c403f28aafde3874ebcd808504bc138a5ec76f6c74931e8194489d0c1f67461e75a0911fc70af3454abaca59a9acb0295704830b4fb9ce2307a122f87d80a969ade20776de2aa183e15", 0x4f, "bcc51d36c2a15cd02f92a25cccf00be05eb59b9eadb84ad0a94630fea10b6cb3f38638b74abe78c151353200df538ed18c66dffadd74d9a0dda71fc30448e16d7934c978e7cb9bb4e13c5cbcc36e94"}, 0xf8, "f9018061e03f00b0d914524c4518c8a1630c1402f0cf44bef4619f60d50cf5c269d9d1de1287a79b44890691fe3f287bada1a1aca4a4598a9950971982e03a4c1d84d370a6d51ac166c4d13330662bc38d2db9a66780c3571e83ec86b42a9b3695e7b22f46969a3af339767f0959360691b89956c41ea8a44e0fbb3b30c7827a6537eb2638dd1b6aa4207b7a3a173afc4004890759d2add35935edabf56cf777d7203b6d5b36736842a031e1b40f64367bdc902502e2f21429f85466d786ce0a317d7bc8845596ee151e40d9ba9f8fccbfb966b1ae081e88b0a0bd10af3472526cdb8fb813b8fd7a9c8a317d2be494373ee53c4bbce3e164"}, 0x211})
unlink(&(0x7f0000000180)='./file1\x00')

[ 2790.552785] FAULT_INJECTION: forcing a failure.
[ 2790.552785] name failslab, interval 1, probability 0, space 0, times 0
[ 2790.554858] CPU: 1 PID: 11905 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2790.555938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2790.557020] Call Trace:
[ 2790.557373]  <TASK>
[ 2790.557687]  dump_stack_lvl+0xc1/0xf0
[ 2790.558233]  should_fail_ex+0x4b4/0x5b0
[ 2790.558792]  ? ext4_init_io_end+0x27/0x180
[ 2790.559390]  should_failslab+0x9/0x20
[ 2790.559917]  kmem_cache_alloc+0x61/0x390
[ 2790.560513]  ext4_init_io_end+0x27/0x180
[ 2790.561085]  ext4_do_writepages+0xb2f/0x3150
[ 2790.561726]  ? lock_acquire+0x19a/0x4c0
[ 2790.562300]  ? do_writepages+0x1ad/0x650
[ 2790.562871]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2790.563553]  ? lock_is_held_type+0x9f/0x120
[ 2790.564170]  ext4_writepages+0x2fc/0x760
[ 2790.564730]  ? __pfx_ext4_writepages+0x10/0x10
[ 2790.565361]  ? perf_trace_lock+0xc1/0x480
[ 2790.565929]  ? perf_trace_lock+0xc1/0x480
[ 2790.566537]  ? find_held_lock+0x2c/0x110
[ 2790.567119]  ? __pfx_ext4_writepages+0x10/0x10
[ 2790.567749]  do_writepages+0x1ad/0x650
[ 2790.568327]  ? __pfx_do_writepages+0x10/0x10
[ 2790.568949]  ? do_raw_spin_lock+0x125/0x270
[ 2790.569564]  ? do_raw_spin_unlock+0x53/0x220
[ 2790.570196]  ? _raw_spin_unlock+0x1e/0x40
[ 2790.570783]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2790.571543]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2790.572226]  __filemap_fdatawrite_range+0xba/0x100
[ 2790.572943]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2790.573721]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2790.574395]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2790.575090]  ? lock_release+0x1e3/0x680
[ 2790.575659]  file_write_and_wait_range+0xd2/0x140
[ 2790.576376]  ext4_sync_file+0x25a/0xde0
[ 2790.576942]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2790.577577]  vfs_fsync_range+0x147/0x240
[ 2790.578155]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2790.578817]  ? iter_file_splice_write+0x162/0xcb0
[ 2790.579508]  ext4_file_write_iter+0x36d/0x19b0
[ 2790.580168]  ? iter_file_splice_write+0x162/0xcb0
[ 2790.580848]  ? kasan_save_stack+0x32/0x50
[ 2790.581438]  ? kasan_save_stack+0x22/0x50
[ 2790.582029]  ? kasan_set_track+0x25/0x30
[ 2790.582622]  ? __kasan_kmalloc+0x7f/0x90
[ 2790.583203]  ? __kmalloc+0x5d/0x160
[ 2790.583725]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2790.584419]  ? do_splice_direct+0x1bb/0x290
[ 2790.585044]  ? do_sendfile+0xb67/0x1300
[ 2790.585599]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2790.586271]  ? do_syscall_64+0x3f/0x90
[ 2790.586838]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2790.587578]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2790.588247]  ? lock_is_held_type+0x9f/0x120
[ 2790.588873]  do_iter_readv_writev+0x217/0x3c0
[ 2790.589542]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2790.590260]  ? avc_policy_seqno+0x9/0x20
[ 2790.590857]  ? security_file_permission+0xb5/0xe0
[ 2790.591563]  do_iter_write+0x186/0x820
[ 2790.592137]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2790.592823]  ? iter_file_splice_write+0x162/0xcb0
[ 2790.593494]  ? kasan_set_track+0x25/0x30
[ 2790.594090]  vfs_iter_write+0x7a/0xb0
[ 2790.594627]  iter_file_splice_write+0x737/0xcb0
[ 2790.595313]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2790.596019]  ? __pfx_copy_splice_read+0x10/0x10
[ 2790.596690]  ? inode_security+0x105/0x140
[ 2790.597287]  ? security_file_permission+0xb5/0xe0
[ 2790.597969]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2790.598670]  direct_splice_actor+0x119/0x180
[ 2790.599292]  splice_direct_to_actor+0x349/0x9d0
[ 2790.599944]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2790.600675]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2790.601400]  ? security_file_permission+0xb5/0xe0
[ 2790.601688] loop3: detected capacity change from 0 to 40
[ 2790.602096]  do_splice_direct+0x1bb/0x290
[ 2790.603071]  ? __pfx_do_splice_direct+0x10/0x10
[ 2790.603752]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2790.604510]  ? lock_is_held_type+0x9f/0x120
[ 2790.605140]  do_sendfile+0xb67/0x1300
[ 2790.605700]  ? __pfx_do_sendfile+0x10/0x10
[ 2790.606318]  __x64_sys_sendfile64+0x1d5/0x210
[ 2790.606962]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2790.607710]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2790.608537]  do_syscall_64+0x3f/0x90
[ 2790.609086]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2790.609800] RIP: 0033:0x7fa51deffb19
[ 2790.610324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2790.612729] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2790.613748] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2790.614700] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2790.615648] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2790.616605] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2790.617559] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2790.618545]  </TASK>
03:25:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 33)

[ 2790.659113] loop4: detected capacity change from 0 to 40
[ 2790.675431] loop7: detected capacity change from 0 to 40
03:25:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xbf5}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
sendmmsg$sock(r3, &(0x7f0000005280)=[{{&(0x7f00000029c0)=@isdn={0x22, 0x7f, 0x0, 0x7, 0xb5}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002a40)="d0ac3d3aeaf582c2ca4bee94eea350e4c0a85864c22d947f726a244b205891917a0def9308741e3accb58d680aed550e6a61bb4d770dbd9508dd941d29f7e973b25ae84795d2e8c8051daeb5d58d9850ef4b80543ec3c8bc625b89fc344123560f1df845fa883f84d6ca12303062026106a183edfa1508315e02774cb6d2195ed7c828f151723aae49de5077419d4b0f87d9501d50", 0x95}, {&(0x7f0000002b00)="9cf43b577090aeeecf814efc09402668792fa860b66db8798f2b79", 0x1b}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="a5bd85d2b5bf95423aca99f8f1d9d865870b2ab6e40fff720b6817519f029c146c43b0dfb329111be814e451bf693c7081eedd0b44530d5fd3a39f005da0609143e3bcdf720a541d9d5d79316739581cd8", 0x51}], 0x4, &(0x7f0000003c00)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14}}], 0x48}}, {{&(0x7f0000003c80)=@qipcrtr={0x2a, 0x1, 0xbfff}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003d00)="cf64a80318ea7351ca25a968aec86907228bc632078a6eef1134da5a7721b4293918e6413bded23e156f1610370e8e630dab2666239d8f4ae710ce6edf9d863db635deaa3100f7528ce1debd7842dab6a3f88d54a394704d50d6e2fbab8e5229730840656a1a50bf90bd2f161a8235ee9b", 0x71}, {&(0x7f0000003d80)="bc880b5d5bc31cbd258171e1b0bdf3720b37c5060c704bdd427d37debd1b00adc4c6ea32d78a1acaf4376a040722088c7487e58d3ea3afe4384980bbd0fe579621f92f7adfaf5c39b1d5796581f18ac317c71691e08430f634ae158b7bf3e7b8258fec02a2ab61ca07e784d5b9e7f7749d4571ad472e2aa92b71ab8538dc9005e380d224804998f8f23b57025253f8fa9bf39661bcd48410c3ee6c00c103f06cb73fedaa9793d8950489271e1356927cb84d81f57f9c9ab59b83bd8334d427394a4a8d59ac27d4a3c3", 0xc9}, {&(0x7f0000003e80)="6f3debb39cfb202d58fa44dab49012bfad1c155200fb01d0435ae3cceaadb3f4700d50bbb072fc2926f047943c7c4d9dde5ffe4ac497edb99c504cd0ae7a64c394afa05eff7a2344f9d1e7161299cf8efdf8e620c9fd87fafd080193ce8e5c62abc637a728f032ba68cd2a734596efdf01d328996957aead56a4d62586f8ab1c8c3066910a39769760991acfc2d0eedd21624824ea8219b08ed5c3593cb9db982af3de8be27635a9887460215f4a214f6eb2d9d14d03cd7cd8fe1339a89e7c149c8a7c92a2f8ed15d45ffdc1090d236be6a41362360c75853ec819d81e22c110a0c26191cd4983d1677606e3ea2226859845becbd4d5260a5c7be5f77dc0f98a5be9bb1f1523799523c0ab62eddcc9bff965dc63e64c0ded23abe6cfebc802e22356202d3c744ccbf5edc2919554b5d57f374057461e610e5d014abfb6f0a686b5c5a1392996d50329b36084df3cde726fbb16c4fb8fc40b55c740c6b498d685c3dba31721c04f13dbdcc679d5a845ff5a381adb3b993d82914ac9d60297c062e7413992b4b9163e6b85baf0a8bbe7473625fa22191596d25b7d563f5134b19f9b15d5545cb0882520dab305d7739899b32aa0a251cca80c34a33f5558ca4e2871773e4d5832910b1f87e34c8329594d12f4209e8cd172ccc53198ae978372a55d71672b294d9d560a6fbe4d8734ae3d03877a8620b94b257cc8400dca6ff7e06d8fb95c1146836d388624106829453167ebef9f9fe747f9dfbcb99d9d44de1b13f25f77577dadcac2a8bcaabd58c9c3e513c2d86d2a1ee35ece82c71abc72c82c11b3f8a4c714e0abf8b6e6437374da5addffec84b6ef822afd5623a7540a4db05a6fb3c01cbc1d0699a2f457c65784a2d82ea3132291926ebea9b026899cb60daaf4cb4d38c26473d9df05534f349fc2e68cfd2aa173b38eb756686b0d7e7cf7d684fa9d3d5a90a4429468d820c3ae9882359e51e4aa862e226e819433d6435fead1c992848711d95f1685ec47a950fc9a10a8a507e0e7aff6ac69442e45e57e78852bd70369d365df015b7e86619308a69652ad42fe2c2bcdc9fb0763ccd830e1135dfd5562d49adde99f58ecbe66924661065fdec25b6c4cc0ccaee53de2bbe47d91978cfd1c59dd7ec3aac1b0c5c026549583cc03ec92db80dbcc7f69698646a58f21f0fb865a64b16de940420a0eebdd88cecad1715b90ef34a63cfdcfc416fc140ffd4c1343d56043ff701403b28cbd56ffcd0adfc8ec698ebd59a97bdac2066a185fed867f31503e04dc5f1ced4d023aeaaf461f65bd9895f6f9d6ea64631fb59400a49c66ef3b35a5497fee380d9b80896149af58e5094901afa5878a3b9a575ea0f78662f49b442ada33307c7ac60d62d006185ca335191cacaa9191362dc461bc454c6d6ae754242c767b0a789b9f416ed5c551bc1e52903025fca9ddfaf30335681f07ded2a06f9ffc8002d184652aa6619677da334269a71430ddd094ba39f1e9e2e34f9843f5073250d6dc820a630a59c24df28b16471d660d3627517de321220d5b5129080f7bbd6cf101cdc6496d16784e9a727bdce120af9ac847eece52380af880a1585eec6e65bab3b59cfc57f72cd0fd72fe87de8c27f5120414d4ad98cc88859627e7871d8e8f9d9b749537434c5402f96afb76a58c2ea146a702ff90f1181ba3dc086ad431c86350a46c8482cf9abc13e389af963049a7c15b9d467e4f49fada61105833485fb8dfad79f03366450ca4c2cec79040da70461345253479f23ba88969514c6c771d345866d56fd403c4d35361a3a86d528f7338dc9bfe7908e525f77253dfbe7ede7b4bd7adbb9641756067d445e25b6bd49b17e9b1b73bf58e5f1f8913f711caee7939c11ad899d890b8dc723bedb0c95c08590dcdddbfa14e4d0a9ca8b06eb3cd7afec0e14d4eda254c306bdc53ee4e045eca1cab41b156383acb679a47b2f5fccfa6cc91ada456b94c4f3d9bce2a4938454d29f97350094fc01dc038a44c4d4aa888e1d7992ba8086163a750f0a3d5342dbc6490bd9db1066fe2ab3d81b3770b291571d371ec8207504a19063a9847c4785fa2b998c6a4fb0013549eb349bd06fdc029a726473cb38997bbb9d40e0b6623f70d6777b298954aa89e2ee37d8eddab30c38c459a378bd09e823f3cb0d097d3c8580b72d5c43ff9799ce191e07bed0ffc9a254b565f122f26a718da69f91835daebcf341e8bdcb98a4107755fd631e1fde8f0ca14df2ba87ccc33a58848f8b3dbf507664604c0e5dc09e9b6f72964fb49c8e3932e7cc0a0dd3ac2a45a4baec07d342900542dadc5bbd0685c56c0d36988707e42b98b897aa4727cca258389b60897b67390f3eefd425770eba507cb43a85782bbc0429565083a2646db749fc88ba904e4f57cd21170de65bde1a4a2fb76297b090c3824814cc3ccec1c7bbef9f867aadd696c2360ae36876bf54cfd6174b799e568c316fa88f1e0c5a95bc11bd16ec174aecdd2da701ed84763aca6dab92e50b3cbb59100461f43ba111ed484ad30537d5db5db67d90957700414203b404ddada0d92d72383293312da873c48ac431975945139733f7edb613a22d9c6afca1e35792a2f9e8852d14850cf1c4527231c6abd4f87b411cd189f1ca67c5019b064dc6a0ad813467fb15608879c9dd7e4c65d9b14a1b7133019802338c7f9972bf0c041c98d149900b3c4c72a5bea533a28b93847eaa804b8698e9513fdc3772370504c21abcb6f7d4420b4020f25507634425d0f90a001b0eb95faa8ee9e896cf652bf1bc9037d4d32530be6036d17226b2c5f4573efe9e60b7fe2184a65c689144f3422b9729d4a05b2b42e914a8a6e2aeaefb78434bac0962d13f30349fda908ec1cb72e3682c10f7c1d98da633f4aecee65d12574ac84a1f6321c48e9f681a13fff65062580df44f0b8c98c80def9e5a17e0992eb7721dd7dcfe185fd71546960b147dad02ef853e96ca046d0d31741d1ce0f75d83cb6354fd72d7b4d08b368b6a1482026375109c96fb37a45a825233aa0aa0351b0281192d2f6969937fd301dbcad43c75e2b0b837a3c6ea1e4665f0e4b1d831856a176129af80c58d243053c9864ef6674375df2d68dc6d8b87e8ab6550c0688d458343c4a19fd58ed330963be1daf6ddac45545e1a8686bd2b26d4a7f6ce084d3e5a98813df508bdd956524b7e8bf186165b130036cce53fd7dfca543231ffbca0d35abb980713aa10d29eb2c841d8c6ee10671a2b2bb8ff2018dfe68efc89f15e77ef121c093508cbb53f827895371387870be72f1164050a05e0aab22c5b55c084b393cb52a013778de4d6495031add58e786d990fd576b33c9182e84224bef0740b696137bffff23ca0d876010bcf88070476eabb2287e5b31c66c7caffa308ec20ddd90efba9283ff30cc78cd877be33beb1a0f3f43dd5073c46ef52082463a8c45a653021e6c039cd9397bbc0b6a28eac7e2b73e337cefadc28c201801348dd7799953dee0891d5bf4c02d1f4d0886af3cc3e7b7d53db490a4785fd5c29ef445787ea8a1ff97c373ae140d817a8587aa71b36fc9a3c6054e9d6ba291c4d0cbf44743002f46776dcd48c6efee8f790f2eeaadc8a5c2b0d55087fabc241e3c5a770019915044fbe9534d1931f246ec473b8ad7242daa73f8e7b23d9a783c5843f853d7bc57ddca65f0932d649563ff62ba0068cd00b46f6262ce05e8cabdda7386fa79dcdafa00731fe5cf5cbba50cff835d4e7076bb49eb1230dfacd4bc409a76a363b695a8a91f9a302b73a230da747e7ad76a10ceb478247e395f6345a958610acd9f0cb09846b1240c49c54f7b9923f9e6ec24d535aed56be9af54f9c1a078c1f45d0446e7e4a64e0aac4750523e56472d14998605ac58fb9fc47fcf75191882335a81efd36dd14c52bb2634eea978bfb5ed4a8666f6d2becc9725d71cfc99446abfc79ce6cb42e7015b0906fb2dbecbd50ad9e8c501242355cc77c3e8ad4b7804ab2192f6b9390ea4aa2affe391a058a881fd23f76833d3b9f9b6c62c95d04f6927b00b3fd81c9f9bfdb3daa20a74fbbfa510545ac70b33b64c606071350d7480d907a1c2994d8f522274389fe1e428ad356bcdfc8d7188d598fbd08d8bf0a41ee1c103769de339b9331e0c35b158e8957af7e649082a4653f128fe3925aebb30016b484693c688133c79409d90df3a9bcaf678e3615edfa92f95b556bb4fba0c61ec23f800bb5ccbf96b4c7932e7e66da68582a118aa12cbbaa678de144c34d71dce2c0a04dc25746d4cfbb3b0043291729d5e4046324041733e6d6e7bef1e12b70bb78903d00b3a88a3900006c37bfca8f3448c938dce081a5d3e93d3a7571eb3ea620620f6e55074197f4998ea0e60bc815e46875eb16e7a6dc9f4280a1e014a8194e66a1748e03b743c4dd60684be33ca76118e7588422cc183a69651b8fceeec87c22810d222a5dbda6fa020bb3c259cb8771220484b7741b09316e2fdb9fe7967b650db8bbac8dfe718c916c8c94c8c34fb5e5021d4326f76502d042fa5ec57c14c399b57aae9552761f425168830b5daaaa861cb71ddfa54b4248b581775c5f6ec03472e3b64d5a2b4da199e2a831d360e0b309b09a0b6abe6f0d64b9d024f2fa23c49d6866eeb80ec5d8f239ee8eb83a42e821684d8b2f55315bbd1d29e2336a5f16b3f8a07c2ba069274d50a368c40655e6eb9bb8e82653078c8b7d800eedb2832e2977a4f6ab07ce91ad46cb83aef0e5e1b96a9d0448f98611a1d69e1ab54cc17d4b16d95ae5b726ce7bf0b4cd0e88ab929e3e006139038e71b714386d0b141537677e34b32bdb1646126c2d5d7b189e74b659f9968c487ba1924675db79271b021c5f276772442336f8a7fb72170d0ea239484708e0b7de91980f07957cc0c17fdeb1f870c1281c429c3d5b641b189576c52a40b49c65c6f68a6f090d17873f737b4eee5169a36984d388d8242c1845e8b1cc73735622ea57e3780eb8693d3f244e9ce27adeb5c3fd96bc595e99837cc829cc7ae6d24a69b18c0240a3031166ab79653fe195086324f569cc817079704d1146e1fbd1975564c8137f75a854020bb39b327dafb97175f355e5e8390f3d345ae5221c849c5c81df2f23be444f3eb839003f6cbf8409d94ac90073feb9afe581624ac021dd7618afa76160359eb5bc5636c83961396fb62171937cb5c44cf217e92408ac59158bc80daac37ddd17fcc9cdab919b25c72c979e1e8bcfd1ad0618f3f5f3f6b4c4d5270d4014b08dae73203d0f8addce2846dd8b3bbf0695a829f3f18e10bb3a9d27c26b2c13d04da99298ef780e5b8667c2ba5cb8c48498a9440832b3096aab01896073607eaf8115fe945e5a61e4e2c446d48830c2082f22313191c3e9efd19616e7e581d5735d1d3242d861cd6ce19ccb2a1f0dae4dada773628734e52cd75128b66cb61bf040adf320d7943c271f38ef57704542d689070bbc4da69d3c1ec6d62fc38ad8d25cc3da9cb1c3da2b5a654ebbcdaddbe887276020868b6eb1f0dfb6f664ab33de4dd053de21ee76609af4c379531035768b8591480f1eee8c68c5fb33a180712f38f27669ccefcf006afab2d2838149b463bed15766c1e49b2147690325a8c3d8815ee81ce25eebbb2d7340c5dbca5ead5c104ca1209e389e5c3fdf5b15f846c31bcd1f9838b4b9ebc170bf93efb8972c7eb25fec92860446d737fa19202821fbaf9ab5932faa255d9dd1fa216be5877bae234f46eb673b19c3745c45dc2dbd92c99ef0f33a029501fc243244434", 0x1000}, {&(0x7f0000004e80)="8c3e25c939cfe3323d8172a231c25258d2122b250e8ae88866c24a19e90e22436296fbf944aea6f01672c575638be8005bd55a8aeb87543000c5d928912146c4f24fda717a89624850bf1410c60a0fd4f32a0c5506810672515d520c2f62bad5e8af1aac02db00db5ffccd6e8c8b8997887493c7a7ccea80deeb9512999b9706c7d4d5b8be9646b6cfcd9e1f631d588f31bf7d196c3717894fa82220399a78d8866e04a67a270c9214612e8374bffed53086673796a0f720e126150ee82ae1b100de508cc416113014d48bd4eb33664446b7c2d8824112a0e03df9837bbe8039", 0xe0}], 0x4, &(0x7f0000004fc0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1a}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f0000005040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x80, &(0x7f0000005180)=[{&(0x7f00000050c0)="dcfaf23f69d706729ea979b6cd1d4a1f884aaf68273d2f7a0bdded12955755a53499a0fcc98120d40734a34cdbe09f63fdd23484ba4982830dda246eee77c88a856e916f443145e8571898177d608e50577b14026005eaabe4e94b295380a3584f7b85ddc31d6dee66c5b41bbc93efc54cf3695574d2c3baf3190844386d317b8ed6ee41e7cdc026c1644370a0f2f6604bed0abb8978fd21a6cb0534c7e6cf58572585bf0e6dd4777f56dd", 0xab}], 0x1, &(0x7f00000051c0)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0x4f4}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x90}}], 0x3, 0x440c4)
bind$unix(r0, &(0x7f00000002c0)=@file={0x0, './file2\x00'}, 0x6e)
acct(&(0x7f00000001c0)='./file2\x00')
r4 = syz_open_dev$mouse(&(0x7f0000002940), 0x1, 0x10000)
openat(r4, &(0x7f0000002980)='./file3\x00', 0x80, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1e5002, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
[ 2790.714849] loop6: detected capacity change from 0 to 40
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file3\x00', 0x9, 0xa, &(0x7f00000027c0)=[{&(0x7f0000000340)="5655a19450169f28524fe775ed398e7d63ba6df8464514a925d9ec4c3c5db459b1f3a12c26ea25386c97774de2c0a950", 0x30, 0x9}, {&(0x7f0000000380)="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", 0x1000, 0x10000}, {&(0x7f0000001380)="b6f81bf5f30f57a0ff015ce9770c", 0xe, 0x8}, {&(0x7f00000013c0)="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", 0x1000, 0x8001}, {&(0x7f00000023c0)="40f8400abf1728f66b9ee31f5f6e18d0d9baa659fa0330075efba6d4b79f18c83e74d3efda97b4b8e6ebe3c01e6d", 0x2e, 0x5}, {&(0x7f0000002400)="a35e9246d23e8949e05fd8d79518aeb495a45b66c69bec3518cbb7281de9357bb8caf57c0a3fce32cac968e16d9bf6557d7ae032e2f82b484b1865c21ba144d6863bb4b7a96e43f87e625f7ec6e134ce0e71916ea3694d16e83500c9770b5f16ef57b66db22c3a5022cda6e2165bff0a938b0b860fe056856a980abcb83527109fa40e6cc466f4de2030b9aaa988c32c504bceb427d2873169eafb5ec673a193162c90adaa78d3bf1e5b293a530d5abe583a5fcb6272bc3e05bdb0f3566ee3beaabf242a0f2aa6", 0xc7, 0x9}, {&(0x7f0000002500)="d20f359b7e5d1cb20d4fba2d009d", 0xe, 0xfffffffffffffffc}, {&(0x7f0000002540)="1e4ecca6264ddaa8b95d33f6bb57e47240293d384170500bd89d864e9f47c8e793051359dc3803ea0800e7bc18f01bc89813d02694d9b3afff9607f517b5573a70ac8b1a55f5a7ee74d826e46f90e553538ece125a97078e0afd93774feba145346c60a181d182a9df3b", 0x6a}, {&(0x7f00000025c0)="a07576cafc179c470426e331d0687850c12286978697b1b28a76c7274d6d614c80eba6eee58730e3cd491e3bd8dfbdc6299357202e3a91347cdd011f9d7e7edf759cb5937603f1a588cdd7114a1fb58ee58c95cde537eb8fa3514eb613738441ec8773a1b2124d57ac115abed41be90c5a54cda9401171bceff58da41400d0a4cc88ab3bc04f5a600130e1eca94875271d00bc612a01d8e210a8c73e602963da0e14254b7964e3f9107b8373fbed31b4ea68fe8484a4ede48f76934bd82c4950de98461d980e9c31fef6e05b7a499385ea280d66c319abf009551e1e0e21f61d8f0bfa3225ce6295ced32a1577efe1f92745", 0xf2}, {&(0x7f00000026c0)="d82a2b07d18d28f58bce3e3c95e21205039aee0a8b79467cea55d5a2d3adb4f5b9bc888d362f133df73a514faeb49be8062e911dca77a11bb3b66f56c7f5ccd923c6981c0ac2b5f271df6f86f156327952643cd45528ec236e1a17f2f4cad3da57dc49a3b9c21fdbfc74caceaeaff7efba41a66c8125b17b3da940479528a957b6a5e5ca5b2aca62e0be65b3fdcaa6e4ff9432b380c43698aba8dbf56bf8e3242e802dba5d6f48af4f69a65c89c74b83a3bef4cf0ed3dbaece328075b4b8f153ced3bed3c750a471286dbc3577fb5bc74d20526f023b74f78026a7f40320aa040e2c7cd9d865469339e33a66602ffbe8df6ba3d9783f44ea36", 0xf9, 0x7}], 0x10, &(0x7f00000028c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel}]})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'})
sendfile(r1, r0, 0x0, 0xfffffdef)

03:25:34 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1a0400, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
quotactl(0x8, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)="9b51dbd54fb3c06e87117f6de8525a02e385ed024d7d6f04497a2fb7148f315d654623bf2c2e6f0462f93cfeeed97fd81cffe35859078edbf92ab1a2b1f6f18b891ab35edaf6ce68117512b41697b89fc327d18a450b0708d7502704a4c32f8ad44abac41bf3f99d018719cce8f7d5e5d2c1d78617a09bc8073319abf01909")
openat(r1, &(0x7f00000001c0)='./file0\x00', 0xf9aa84057ebbea5f, 0x10)
unlink(&(0x7f0000000180)='./file1\x00')
r2 = getpgid(0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r3, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, r2, 0x6, r3, 0xb)
r4 = signalfd4(r0, &(0x7f0000000340)={[0x400]}, 0x8, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x7f, 0x0, 0x1, 0x0, 0x1, 0x140, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xefb, 0x5}, 0x4, 0x7fff, 0xffffffe0, 0x8, 0x4, 0x2, 0x3, 0x0, 0x5, 0x0, 0x1}, r2, 0xb, r4, 0x1)

[ 2790.778103] FAULT_INJECTION: forcing a failure.
[ 2790.778103] name failslab, interval 1, probability 0, space 0, times 0
[ 2790.779781] CPU: 1 PID: 11912 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2790.780839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2790.781890] Call Trace:
[ 2790.782224]  <TASK>
[ 2790.782540]  dump_stack_lvl+0xc1/0xf0
[ 2790.783071]  should_fail_ex+0x4b4/0x5b0
[ 2790.783600]  ? copy_splice_read+0x15b/0x900
[ 2790.784203]  should_failslab+0x9/0x20
[ 2790.784701]  __kmem_cache_alloc_node+0x66/0x310
[ 2790.785338]  ? copy_splice_read+0x15b/0x900
[ 2790.785911]  ? __kmem_cache_free+0xe1/0x330
[ 2790.786508]  ? copy_splice_read+0x15b/0x900
[ 2790.787076]  __kmalloc+0x4d/0x160
[ 2790.787563]  copy_splice_read+0x15b/0x900
[ 2790.788144]  ? lock_is_held_type+0x9f/0x120
[ 2790.788743]  ? __pfx_copy_splice_read+0x10/0x10
[ 2790.789369]  ? inode_security+0x105/0x140
[ 2790.789936]  ? fsnotify_perm.part.0+0x248/0x680
[ 2790.790553]  ? security_file_permission+0xb5/0xe0
[ 2790.791230]  ? __pfx_copy_splice_read+0x10/0x10
[ 2790.791852]  vfs_splice_read+0x238/0x2d0
[ 2790.792439]  splice_direct_to_actor+0x2aa/0x9d0
[ 2790.793055]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2790.793743]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2790.794415]  ? security_file_permission+0xb5/0xe0
[ 2790.795096]  do_splice_direct+0x1bb/0x290
[ 2790.795644]  ? __pfx_do_splice_direct+0x10/0x10
[ 2790.796305]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2790.796981]  ? lock_is_held_type+0x9f/0x120
[ 2790.797575]  do_sendfile+0xb67/0x1300
[ 2790.798092]  ? __pfx_do_sendfile+0x10/0x10
[ 2790.798680]  __x64_sys_sendfile64+0x1d5/0x210
[ 2790.799287]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2790.799961]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2790.800675]  do_syscall_64+0x3f/0x90
[ 2790.801198]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2790.801862] RIP: 0033:0x7f435bfddb19
[ 2790.802358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2790.804596] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2790.805584] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2790.806484] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2790.807418] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2790.808329] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2790.809251] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2790.810167]  </TASK>
[ 2803.310469] loop3: detected capacity change from 0 to 40
03:25:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 32)

03:25:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 25)

03:25:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r2 = getpgid(0xffffffffffffffff)
kcmp(0xffffffffffffffff, r2, 0x5, r0, r1)
getsockname$unix(r0, &(0x7f0000000000), &(0x7f00000001c0)=0x6e)

03:25:47 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:25:47 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:25:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
mknodat$null(r0, &(0x7f0000000180)='./file0\x00', 0x8000, 0x103)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)

03:25:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 34)

[ 2803.334272] loop6: detected capacity change from 0 to 40
03:25:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x200000000000000)

[ 2803.350477] loop4: detected capacity change from 0 to 40
[ 2803.358506] loop7: detected capacity change from 0 to 40
03:25:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 26)

03:25:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
statx(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@version_L}, {@fscache}, {@uname={'uname', 0x3d, '[^%'}}, {@version_9p2000}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_gt={'euid>', r1}}, {@euid_lt={'euid<', 0xffffffffffffffff}}]}})

03:25:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 35)

03:25:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:25:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 33)

[ 2803.455418] loop3: detected capacity change from 0 to 40
[ 2803.475671] FAULT_INJECTION: forcing a failure.
[ 2803.475671] name failslab, interval 1, probability 0, space 0, times 0
[ 2803.476505] CPU: 0 PID: 11950 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2803.477062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2803.477619] Call Trace:
[ 2803.477808]  <TASK>
[ 2803.477982]  dump_stack_lvl+0xc1/0xf0
[ 2803.478278]  should_fail_ex+0x4b4/0x5b0
[ 2803.478575]  ? ext4_init_io_end+0x27/0x180
[ 2803.478890]  should_failslab+0x9/0x20
[ 2803.479171]  kmem_cache_alloc+0x61/0x390
[ 2803.479482]  ext4_init_io_end+0x27/0x180
[ 2803.479783]  ext4_do_writepages+0xc31/0x3150
[ 2803.480131]  ? lock_acquire+0x19a/0x4c0
[ 2803.480453]  ? do_writepages+0x1ad/0x650
[ 2803.480763]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2803.481129]  ? lock_is_held_type+0x9f/0x120
[ 2803.481451]  ext4_writepages+0x2fc/0x760
[ 2803.481748]  ? __pfx_ext4_writepages+0x10/0x10
[ 2803.482110]  ? find_held_lock+0x2c/0x110
[ 2803.482426]  ? __pfx_ext4_writepages+0x10/0x10
[ 2803.482758]  do_writepages+0x1ad/0x650
[ 2803.483053]  ? __pfx_do_writepages+0x10/0x10
[ 2803.483382]  ? do_raw_spin_lock+0x125/0x270
[ 2803.483702]  ? do_raw_spin_unlock+0x53/0x220
[ 2803.484034]  ? _raw_spin_unlock+0x1e/0x40
[ 2803.484345]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2803.484750]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2803.485111]  __filemap_fdatawrite_range+0xba/0x100
[ 2803.485489]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2803.485918]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2803.486288]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2803.486666]  ? lock_release+0x1e3/0x680
[ 2803.486983]  file_write_and_wait_range+0xd2/0x140
[ 2803.487374]  ext4_sync_file+0x25a/0xde0
[ 2803.487689]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2803.488036]  vfs_fsync_range+0x147/0x240
[ 2803.488355]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2803.488719]  ? iter_file_splice_write+0x162/0xcb0
[ 2803.489074]  ext4_file_write_iter+0x36d/0x19b0
[ 2803.489430]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2803.489814]  ? iter_file_splice_write+0x162/0xcb0
[ 2803.490177]  ? kasan_save_stack+0x32/0x50
[ 2803.490483]  ? kasan_save_stack+0x22/0x50
[ 2803.490797]  ? kasan_set_track+0x25/0x30
[ 2803.491095]  ? __kasan_kmalloc+0x7f/0x90
[ 2803.491414]  ? __kmalloc+0x5d/0x160
[ 2803.491684]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2803.492056]  ? do_splice_direct+0x1bb/0x290
[ 2803.492390]  ? do_sendfile+0xb67/0x1300
[ 2803.492688]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2803.493034]  ? do_syscall_64+0x3f/0x90
[ 2803.493335]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2803.493715]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2803.494068]  ? lock_is_held_type+0x9f/0x120
[ 2803.494400]  do_iter_readv_writev+0x217/0x3c0
[ 2803.494755]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2803.495122]  ? avc_policy_seqno+0x9/0x20
[ 2803.495455]  ? security_file_permission+0xb5/0xe0
[ 2803.495820]  do_iter_write+0x186/0x820
[ 2803.496128]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2803.496494]  ? iter_file_splice_write+0x162/0xcb0
[ 2803.496858]  ? kasan_set_track+0x25/0x30
[ 2803.497184]  vfs_iter_write+0x7a/0xb0
[ 2803.497475]  iter_file_splice_write+0x737/0xcb0
[ 2803.497848]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2803.498245]  ? __pfx_copy_splice_read+0x10/0x10
[ 2803.498610]  ? inode_security+0x105/0x140
[ 2803.498933]  ? security_file_permission+0xb5/0xe0
[ 2803.499302]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2803.499692]  direct_splice_actor+0x119/0x180
[ 2803.500036]  splice_direct_to_actor+0x349/0x9d0
[ 2803.500408]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2803.500794]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2803.501196]  ? security_file_permission+0xb5/0xe0
[ 2803.501589]  do_splice_direct+0x1bb/0x290
[ 2803.501915]  ? __pfx_do_splice_direct+0x10/0x10
[ 2803.501953] loop7: detected capacity change from 0 to 40
[ 2803.502281]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2803.503118]  ? lock_is_held_type+0x9f/0x120
[ 2803.503449]  do_sendfile+0xb67/0x1300
[ 2803.503753]  ? __pfx_do_sendfile+0x10/0x10
[ 2803.504081]  __x64_sys_sendfile64+0x1d5/0x210
[ 2803.504433]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2803.504612] loop6: detected capacity change from 0 to 40
[ 2803.504804]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2803.505596]  do_syscall_64+0x3f/0x90
[ 2803.505893]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2803.506278] RIP: 0033:0x7fa51deffb19
[ 2803.506544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2803.507842] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2803.508375] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2803.508897] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2803.509407] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2803.509923] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2803.510441] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2803.510989]  </TASK>
[ 2803.520697] loop4: detected capacity change from 0 to 40
03:25:47 executing program 3:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x6, &(0x7f0000000040)=[{0xff, 0x27, 0x3, 0x4}, {0x9, 0x80, 0x6a, 0x2}, {0x8, 0x5, 0x5}, {0x3, 0x6, 0x0, 0xffffffd2}, {0xc52, 0x81, 0x5, 0x1}, {0x0, 0x20, 0x4}]}, 0x10)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1030c2, 0xb0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008, 0x0, 0x0, 0x0, 0x60000001}, 0x0, 0x2000000000000, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2803.531297] FAULT_INJECTION: forcing a failure.
[ 2803.531297] name failslab, interval 1, probability 0, space 0, times 0
[ 2803.532244] CPU: 1 PID: 11954 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2803.532814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2803.533393] Call Trace:
[ 2803.533580]  <TASK>
[ 2803.533744]  dump_stack_lvl+0xc1/0xf0
[ 2803.534037]  should_fail_ex+0x4b4/0x5b0
[ 2803.534340]  ? copy_splice_read+0x15b/0x900
[ 2803.534653]  should_failslab+0x9/0x20
[ 2803.534936]  __kmem_cache_alloc_node+0x66/0x310
[ 2803.535294]  ? copy_splice_read+0x15b/0x900
[ 2803.535611]  ? __kmem_cache_free+0xe1/0x330
[ 2803.535923]  ? copy_splice_read+0x15b/0x900
[ 2803.536266]  __kmalloc+0x4d/0x160
[ 2803.536528]  copy_splice_read+0x15b/0x900
[ 2803.536834]  ? lock_is_held_type+0x9f/0x120
[ 2803.537170]  ? __pfx_copy_splice_read+0x10/0x10
[ 2803.537509]  ? inode_security+0x105/0x140
[ 2803.537811]  ? fsnotify_perm.part.0+0x248/0x680
[ 2803.538160]  ? security_file_permission+0xb5/0xe0
[ 2803.538515]  ? __pfx_copy_splice_read+0x10/0x10
[ 2803.538856]  vfs_splice_read+0x238/0x2d0
[ 2803.539166]  splice_direct_to_actor+0x2aa/0x9d0
[ 2803.539518]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2803.539875]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2803.540264]  ? security_file_permission+0xb5/0xe0
[ 2803.540631]  do_splice_direct+0x1bb/0x290
[ 2803.540953]  ? __pfx_do_splice_direct+0x10/0x10
[ 2803.541306]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2803.541704]  ? lock_is_held_type+0x9f/0x120
[ 2803.542021]  do_sendfile+0xb67/0x1300
[ 2803.542336]  ? __pfx_do_sendfile+0x10/0x10
[ 2803.542651]  __x64_sys_sendfile64+0x1d5/0x210
[ 2803.543009]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2803.543380]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2803.543775]  do_syscall_64+0x3f/0x90
[ 2803.544063]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2803.544469] RIP: 0033:0x7f435bfddb19
[ 2803.544733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2803.546039] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2803.546605] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2803.547137] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2803.547724] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2803.548371] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2803.548991] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2803.549634]  </TASK>
[ 2803.562157] syz-executor.6: attempt to access beyond end of device
[ 2803.562157] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2803.563031] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2803.579188] syz-executor.6: attempt to access beyond end of device
[ 2803.579188] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2803.581371] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2803.596798] loop3: detected capacity change from 0 to 40
03:25:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 34)

03:25:47 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRES32=r1])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x126)
r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x101042, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r5, 0x5441, 0x0)
ioctl$TCFLSH(r4, 0x540b, 0x0)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r4, r2, 0x0, 0xfffffdef)

03:25:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000040)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2803.669467] loop4: detected capacity change from 0 to 40
03:25:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 36)

[ 2803.713930] FAT-fs (loop6): Unrecognized mount option "00000000000000000000004" or missing value
03:25:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 27)

[ 2803.750561] loop7: detected capacity change from 0 to 40
[ 2803.755401] FAT-fs (loop6): Unrecognized mount option "00000000000000000000004" or missing value
[ 2816.086373] loop4: detected capacity change from 0 to 40
[ 2816.119039] FAULT_INJECTION: forcing a failure.
[ 2816.119039] name failslab, interval 1, probability 0, space 0, times 0
[ 2816.120029] CPU: 0 PID: 11987 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2816.120610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2816.121172] Call Trace:
[ 2816.121366]  <TASK>
[ 2816.121538]  dump_stack_lvl+0xc1/0xf0
[ 2816.121852]  should_fail_ex+0x4b4/0x5b0
[ 2816.122157]  ? copy_splice_read+0x15b/0x900
[ 2816.122489]  should_failslab+0x9/0x20
[ 2816.122771]  __kmem_cache_alloc_node+0x66/0x310
[ 2816.123132]  ? copy_splice_read+0x15b/0x900
[ 2816.123449]  ? __kmem_cache_free+0xe1/0x330
[ 2816.123793]  ? copy_splice_read+0x15b/0x900
[ 2816.124112]  __kmalloc+0x4d/0x160
[ 2816.124388]  copy_splice_read+0x15b/0x900
[ 2816.124708]  ? lock_is_held_type+0x9f/0x120
[ 2816.125048]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.125403]  ? inode_security+0x105/0x140
[ 2816.125727]  ? fsnotify_perm.part.0+0x248/0x680
[ 2816.126075]  ? security_file_permission+0xb5/0xe0
[ 2816.126450]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.126801]  vfs_splice_read+0x238/0x2d0
[ 2816.127129]  splice_direct_to_actor+0x2aa/0x9d0
[ 2816.127483]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2816.127870]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2816.128250]  ? security_file_permission+0xb5/0xe0
[ 2816.128648]  do_splice_direct+0x1bb/0x290
[ 2816.128981]  ? __pfx_do_splice_direct+0x10/0x10
[ 2816.129349]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2816.129762]  ? lock_is_held_type+0x9f/0x120
[ 2816.130106]  do_sendfile+0xb67/0x1300
[ 2816.130413]  ? __pfx_do_sendfile+0x10/0x10
[ 2816.130764]  __x64_sys_sendfile64+0x1d5/0x210
[ 2816.131115]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2816.131496]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2816.131901]  do_syscall_64+0x3f/0x90
[ 2816.132200]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.132603] RIP: 0033:0x7fc1c5d62b19
[ 2816.132887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2816.134178] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2816.134729] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2816.135253] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2816.135777] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2816.136272] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2816.136803] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2816.137356]  </TASK>
[ 2816.141198] loop3: detected capacity change from 0 to 40
[ 2816.144837] loop7: detected capacity change from 0 to 40
[ 2816.152660] FAULT_INJECTION: forcing a failure.
03:25:59 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x201000000000000)

03:25:59 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:25:59 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 37)

03:25:59 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 28)

03:25:59 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:25:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 35)

03:25:59 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
[ 2816.152660] name failslab, interval 1, probability 0, space 0, times 0
[ 2816.153802] CPU: 0 PID: 11996 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2816.154384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2816.154959] Call Trace:
[ 2816.155166]  <TASK>
[ 2816.155333]  dump_stack_lvl+0xc1/0xf0
[ 2816.155632]  should_fail_ex+0x4b4/0x5b0
[ 2816.155932]  ? jbd2__journal_start+0x194/0x810
[ 2816.156275]  should_failslab+0x9/0x20
[ 2816.156564]  kmem_cache_alloc+0x61/0x390
[ 2816.156873]  jbd2__journal_start+0x194/0x810
[ 2816.157212]  __ext4_journal_start_sb+0x3d7/0x560
[ 2816.157562]  ? ext4_do_writepages+0xdae/0x3150
[ 2816.157893]  ? ext4_meta_trans_blocks+0x252/0x310
[ 2816.158257]  ext4_do_writepages+0xdae/0x3150
[ 2816.158619]  ? lock_acquire+0x19a/0x4c0
[ 2816.158922]  ? do_writepages+0x1ad/0x650
[ 2816.159245]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2816.159588]  ? perf_trace_lock+0x2d5/0x480
[ 2816.159914]  ? lock_is_held_type+0x9f/0x120
[ 2816.160243]  ext4_writepages+0x2fc/0x760
[ 2816.160559]  ? __pfx_ext4_writepages+0x10/0x10
[ 2816.160904]  ? do_writepages+0x50d/0x650
[ 2816.161249]  ? __pfx_ext4_writepages+0x10/0x10
[ 2816.161591]  do_writepages+0x1ad/0x650
[ 2816.161886]  ? __pfx_do_writepages+0x10/0x10
[ 2816.162225]  ? do_raw_spin_lock+0x125/0x270
[ 2816.162555]  ? do_raw_spin_unlock+0x53/0x220
[ 2816.162899]  ? _raw_spin_unlock+0x1e/0x40
[ 2816.163204]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2816.163618]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2816.163974]  __filemap_fdatawrite_range+0xba/0x100
[ 2816.164367]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2816.164774]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2816.165145]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2816.165525]  ? lock_release+0x1e3/0x680
[ 2816.165842]  file_write_and_wait_range+0xd2/0x140
[ 2816.166220]  ext4_sync_file+0x25a/0xde0
[ 2816.166519]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2816.166865]  vfs_fsync_range+0x147/0x240
[ 2816.167186]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2816.167546]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.167917]  ext4_file_write_iter+0x36d/0x19b0
[ 2816.168273]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2816.168665]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.169027]  ? kasan_save_stack+0x32/0x50
[ 2816.169347]  ? kasan_save_stack+0x22/0x50
[ 2816.169668]  ? kasan_set_track+0x25/0x30
[ 2816.169985]  ? __kasan_kmalloc+0x7f/0x90
[ 2816.170300]  ? __kmalloc+0x5d/0x160
[ 2816.170581]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2816.170952]  ? do_splice_direct+0x1bb/0x290
[ 2816.171283]  ? do_sendfile+0xb67/0x1300
[ 2816.171585]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2816.171931]  ? do_syscall_64+0x3f/0x90
[ 2816.172239]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.172631]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2816.172977]  ? lock_is_held_type+0x9f/0x120
[ 2816.173312]  do_iter_readv_writev+0x217/0x3c0
[ 2816.173672]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2816.174044]  ? avc_policy_seqno+0x9/0x20
[ 2816.174370]  ? security_file_permission+0xb5/0xe0
[ 2816.174737]  do_iter_write+0x186/0x820
[ 2816.175037]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2816.175393]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.175753]  ? kasan_set_track+0x25/0x30
[ 2816.176064]  vfs_iter_write+0x7a/0xb0
[ 2816.176370]  iter_file_splice_write+0x737/0xcb0
[ 2816.176747]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2816.177129]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.177497]  ? inode_security+0x105/0x140
[ 2816.177829]  ? security_file_permission+0xb5/0xe0
[ 2816.178203]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2816.178589]  direct_splice_actor+0x119/0x180
[ 2816.178941]  splice_direct_to_actor+0x349/0x9d0
[ 2816.179305]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2816.179693]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2816.180098]  ? security_file_permission+0xb5/0xe0
[ 2816.180484]  do_splice_direct+0x1bb/0x290
[ 2816.180814]  ? __pfx_do_splice_direct+0x10/0x10
[ 2816.181175]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2816.181577]  ? lock_is_held_type+0x9f/0x120
[ 2816.181917]  do_sendfile+0xb67/0x1300
[ 2816.182231]  ? __pfx_do_sendfile+0x10/0x10
[ 2816.182573]  __x64_sys_sendfile64+0x1d5/0x210
[ 2816.182922]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2816.183301]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2816.183709]  do_syscall_64+0x3f/0x90
[ 2816.184005]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.184409] RIP: 0033:0x7fa51deffb19
[ 2816.184687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2816.186003] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2816.186568] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2816.187086] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2816.187609] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2816.188138] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2816.188673] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2816.189231]  </TASK>
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3, 0x7, &(0x7f0000001680)=[{&(0x7f0000000240)="00e38e42cd784d7d66675e9e711a8f3b8fc1bc07b0ab8018713edcebf33f00694400dad107f04ed0edf8cf168b22cb0997f622ed678287f857e731de02477a5606085f9b0af2a137fc4558aae3938088c2f201bee83af8529e71fa34d6a7fc2b222800249f4dc3adb8a34288d5e9e9b3cd37252fbe0af68f4ce7dcd0316158df36315efaa46e28dc235952233e683b1dae1b2c787aef52c9aabe79c80715f1d121fef480db42e8d0f0dd28faab314038b358d7c4fb5fe597757459083b328625a6f2e10c3bc6ea040bedd8fbebbda188968b07b01a", 0xd5, 0x2}, {&(0x7f0000000340)="c0967111606b81486bd88d94726628844199fae5c96d8b92d89915eeed3a29bf8e9723f958e14963596f7555299b90c3441af15358b32d651a52493d9517ff8cdf7c1316e485056ea5ab4ecd55b25df3dd794fe20709db97", 0x58, 0x3}, {&(0x7f00000003c0)="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", 0x1000, 0x7}, {&(0x7f00000013c0)="ed4002ff105d1f0c087a0348fe84b4064aeef1880360405e01721360ff75a4fc45fe68279bc2cf1714e5f93efdf26680fd6c6a4daf595b1b31443e644f1b52a8b2c415e6211972ed528918a0bfd5f769ade05150f6038cf24869e51a652c69f56ece03029b73353401939a577b1fd5d7ed6ee97e8989b84a2ff5ab69a0f679ed2f0324667611be", 0x87, 0x81}, {&(0x7f0000001480)="5888f17dc93f44801ee954718774f825f33d86f60cb8771afdf64467f6ea666fc248585edc2188993ebe09bbdea4213d93fc67c477062f2dd58ab6e26445263fec99", 0x42, 0x4}, {&(0x7f0000001500)="9c41b7249b1203835e5cb35d69f7fee9fc27149521f9984429086d1e453756a5230d8389439c2678dc699711a2612d304e60d55dfee7a59ec1091179d412717eea006c8b6e8845ee1ed81f605d97", 0x4e, 0x1}, {&(0x7f0000001580)="35b495acef48fb1feb3f8c6a91b10744464cc8fef67acdc163d6063173570e93b03919ec5ff615c5aadd4e5c97cb224e4209cbfda8a1f88973ab6ce5329c2c804951753c615202588c26dd9def5a69d0a44fa9cf8ae6fe0c6d066f185197bbf3eff6043045296c0118be45a59ab56a2189e67c5839d3e31fb5bf76dc5700f0ccf4ad2f121a5b91aa00155f8f44080cfff9d4ece53d3bc6c79ba9379131a05b784a2974c0a3efe0fce31dc65ec9714729a9d138d0760f7b78f1f1ed2fe455c82f1fd53f7fae6b59bc33544e9e9d868a1dafac", 0xd2}], 0x900c48, &(0x7f0000001740)={[{@huge_always}, {@huge_within_size}, {@size={'size', 0x3d, [0x31, 0x30, 0x70, 0x36, 0x33, 0x39, 0x74, 0x35]}}], [{@obj_type={'obj_type', 0x3d, ']^,.!^,:}!'}}, {@smackfsdef={'smackfsdef', 0x3d, '{{\v'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2816.190378] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16011; err -12
[ 2816.209869] FAULT_INJECTION: forcing a failure.
[ 2816.209869] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2816.210887] CPU: 0 PID: 11997 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2816.211489] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2816.212126] Call Trace:
[ 2816.212331]  <TASK>
[ 2816.212505]  dump_stack_lvl+0xc1/0xf0
[ 2816.212812]  should_fail_ex+0x4b4/0x5b0
[ 2816.213134]  __should_fail_alloc_page+0xe0/0x110
[ 2816.213506]  prepare_alloc_pages+0x178/0x500
[ 2816.213863]  ? __pfx_lock_acquire+0x10/0x10
[ 2816.214196]  __alloc_pages_bulk+0x156/0x10e0
[ 2816.214549]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2816.215016]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2816.215413]  ? copy_splice_read+0x15b/0x900
[ 2816.215753]  ? kasan_set_track+0x25/0x30
[ 2816.216066]  ? __kasan_kmalloc+0x7f/0x90
[ 2816.216410]  copy_splice_read+0x190/0x900
[ 2816.216751]  ? lock_is_held_type+0x9f/0x120
[ 2816.217104]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.217471]  ? inode_security+0x105/0x140
[ 2816.217828]  ? fsnotify_perm.part.0+0x248/0x680
[ 2816.218188]  ? security_file_permission+0xb5/0xe0
[ 2816.218583]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.218959]  vfs_splice_read+0x238/0x2d0
[ 2816.219291]  splice_direct_to_actor+0x2aa/0x9d0
[ 2816.219666]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2816.220052]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2816.220463]  ? security_file_permission+0xb5/0xe0
[ 2816.220845]  do_splice_direct+0x1bb/0x290
[ 2816.221177]  ? __pfx_do_splice_direct+0x10/0x10
[ 2816.221555]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2816.221961]  ? lock_is_held_type+0x9f/0x120
[ 2816.222312]  do_sendfile+0xb67/0x1300
[ 2816.222627]  ? __pfx_do_sendfile+0x10/0x10
[ 2816.222974]  __x64_sys_sendfile64+0x1d5/0x210
[ 2816.223339]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2816.223722]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2816.224129]  do_syscall_64+0x3f/0x90
[ 2816.224445]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.224838] RIP: 0033:0x7f435bfddb19
[ 2816.225122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2816.226465] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2816.227028] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2816.227548] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2816.228071] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2816.228599] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2816.229129] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2816.229681]  </TASK>
03:26:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 36)

[ 2816.313379] loop4: detected capacity change from 0 to 40
[ 2816.340668] FAULT_INJECTION: forcing a failure.
[ 2816.340668] name failslab, interval 1, probability 0, space 0, times 0
[ 2816.341705] CPU: 0 PID: 12001 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2816.342417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2816.343019] Call Trace:
[ 2816.343258]  <TASK>
[ 2816.343461]  dump_stack_lvl+0xc1/0xf0
[ 2816.343819]  should_fail_ex+0x4b4/0x5b0
[ 2816.344199]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.344655]  should_failslab+0x9/0x20
[ 2816.344997]  __kmem_cache_alloc_node+0x66/0x310
[ 2816.345423]  ? mark_held_locks+0x9e/0xe0
[ 2816.345794]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.346237]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.346668]  __kmalloc+0x4d/0x160
[ 2816.346996]  iter_file_splice_write+0x162/0xcb0
[ 2816.347344]  ? __kmem_cache_free+0xe1/0x330
[ 2816.347748]  ? copy_splice_read+0x65b/0x900
[ 2816.348098]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2816.348569]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.348944]  ? inode_security+0x105/0x140
[ 2816.349327]  ? security_file_permission+0xb5/0xe0
[ 2816.349717]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2816.350118]  direct_splice_actor+0x119/0x180
[ 2816.350531]  splice_direct_to_actor+0x349/0x9d0
[ 2816.350908]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2816.351357]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2816.351751]  ? security_file_permission+0xb5/0xe0
[ 2816.352203]  do_splice_direct+0x1bb/0x290
[ 2816.352558]  ? __pfx_do_splice_direct+0x10/0x10
[ 2816.352979]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2816.353393]  ? lock_is_held_type+0x9f/0x120
[ 2816.353752]  do_sendfile+0xb67/0x1300
[ 2816.354092]  ? __pfx_do_sendfile+0x10/0x10
[ 2816.354435]  __x64_sys_sendfile64+0x1d5/0x210
[ 2816.354839]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2816.355300]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2816.355705]  do_syscall_64+0x3f/0x90
[ 2816.356053]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.356453] RIP: 0033:0x7fc1c5d62b19
[ 2816.356780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2816.358075] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2816.358643] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2816.359167] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2816.359689] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2816.360212] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2816.360737] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2816.361289]  </TASK>
03:26:00 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 38)

03:26:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 29)

03:26:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '){\x00'}, &(0x7f00000001c0)=']\\\x00', 0x3, 0x3)
unlink(&(0x7f0000000180)='./file1\x00')

03:26:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 37)

[ 2816.478465] loop7: detected capacity change from 0 to 40
[ 2816.503852] loop3: detected capacity change from 0 to 40
[ 2816.517450] loop4: detected capacity change from 0 to 40
[ 2816.545953] FAULT_INJECTION: forcing a failure.
[ 2816.545953] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2816.546908] CPU: 0 PID: 12010 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2816.547515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2816.548035] Call Trace:
[ 2816.548209]  <TASK>
[ 2816.548380]  dump_stack_lvl+0xc1/0xf0
[ 2816.548656]  should_fail_ex+0x4b4/0x5b0
[ 2816.548934]  __should_fail_alloc_page+0xe0/0x110
[ 2816.549259]  prepare_alloc_pages+0x178/0x500
[ 2816.549568]  ? __pfx_lock_acquire+0x10/0x10
[ 2816.549869]  __alloc_pages_bulk+0x156/0x10e0
[ 2816.550210]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2816.550627]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2816.550995]  ? copy_splice_read+0x15b/0x900
[ 2816.551301]  ? kasan_set_track+0x25/0x30
[ 2816.551610]  ? __kasan_kmalloc+0x7f/0x90
[ 2816.551906]  copy_splice_read+0x190/0x900
[ 2816.552197]  ? lock_is_held_type+0x9f/0x120
[ 2816.552536]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.552859]  ? __cond_resched+0x46/0x70
[ 2816.553161]  ? inode_security+0x105/0x140
[ 2816.553468]  ? fsnotify_perm.part.0+0x248/0x680
[ 2816.553818]  ? security_file_permission+0xb5/0xe0
[ 2816.554174]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.554525]  vfs_splice_read+0x238/0x2d0
[ 2816.554838]  splice_direct_to_actor+0x2aa/0x9d0
[ 2816.555164]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2816.555538]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2816.555887]  ? security_file_permission+0xb5/0xe0
[ 2816.556253]  do_splice_direct+0x1bb/0x290
[ 2816.556552]  ? __pfx_do_splice_direct+0x10/0x10
[ 2816.556896]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2816.557255]  ? lock_is_held_type+0x9f/0x120
[ 2816.557584]  do_sendfile+0xb67/0x1300
[ 2816.557863]  ? __pfx_do_sendfile+0x10/0x10
[ 2816.558197]  __x64_sys_sendfile64+0x1d5/0x210
[ 2816.558510]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2816.558882]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2816.559241]  do_syscall_64+0x3f/0x90
[ 2816.559533]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.559874] RIP: 0033:0x7fc1c5d62b19
[ 2816.560144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2816.561275] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2816.561764] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2816.562209] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2816.562664] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2816.563114] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2816.563565] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2816.564041]  </TASK>
03:26:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x10000027f)
faccessat(r3, &(0x7f00000001c0)='./file0/file0\x00', 0x80)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file1\x00'})

03:26:00 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 39)

[ 2816.635714] loop3: detected capacity change from 0 to 40
03:26:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 30)

03:26:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 38)

[ 2816.719716] syz-executor.3: attempt to access beyond end of device
[ 2816.719716] loop3: rw=2049, sector=52, nr_sectors = 8 limit=40
[ 2816.731353] loop7: detected capacity change from 0 to 40
[ 2816.744546] loop4: detected capacity change from 0 to 40
[ 2816.767333] FAULT_INJECTION: forcing a failure.
[ 2816.767333] name failslab, interval 1, probability 0, space 0, times 0
[ 2816.769047] CPU: 1 PID: 12022 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2816.770135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2816.771211] Call Trace:
[ 2816.771569]  <TASK>
[ 2816.771892]  dump_stack_lvl+0xc1/0xf0
[ 2816.772452]  should_fail_ex+0x4b4/0x5b0
[ 2816.773020]  ? jbd2__journal_start+0x24a/0x810
[ 2816.773664]  should_failslab+0x9/0x20
[ 2816.774194]  kmem_cache_alloc+0x61/0x390
[ 2816.774770]  jbd2__journal_start+0x24a/0x810
[ 2816.775396]  __ext4_journal_start_sb+0x3d7/0x560
[ 2816.776052]  ? ext4_do_writepages+0xdae/0x3150
[ 2816.776704]  ? ext4_meta_trans_blocks+0x252/0x310
[ 2816.777383]  ext4_do_writepages+0xdae/0x3150
[ 2816.778027]  ? lock_acquire+0x19a/0x4c0
[ 2816.778592]  ? do_writepages+0x1ad/0x650
[ 2816.779165]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2816.779841]  ? lock_is_held_type+0x9f/0x120
[ 2816.780456]  ext4_writepages+0x2fc/0x760
[ 2816.781014]  ? __pfx_ext4_writepages+0x10/0x10
[ 2816.781646]  ? perf_trace_lock+0xc1/0x480
[ 2816.782223]  ? perf_trace_lock+0xc1/0x480
[ 2816.782824]  ? find_held_lock+0x2c/0x110
[ 2816.783426]  ? __pfx_ext4_writepages+0x10/0x10
[ 2816.784049]  do_writepages+0x1ad/0x650
[ 2816.784627]  ? __pfx_do_writepages+0x10/0x10
[ 2816.785239]  ? do_raw_spin_lock+0x125/0x270
[ 2816.785873]  ? do_raw_spin_unlock+0x53/0x220
[ 2816.786491]  ? _raw_spin_unlock+0x1e/0x40
[ 2816.787089]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2816.787812]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2816.788505]  __filemap_fdatawrite_range+0xba/0x100
[ 2816.789191]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2816.789983]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2816.790636]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2816.791363]  ? lock_release+0x1e3/0x680
[ 2816.791932]  file_write_and_wait_range+0xd2/0x140
[ 2816.792648]  ext4_sync_file+0x25a/0xde0
[ 2816.793196]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2816.793825]  vfs_fsync_range+0x147/0x240
[ 2816.794392]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2816.795048]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.795707]  ext4_file_write_iter+0x36d/0x19b0
[ 2816.796364]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.797025]  ? kasan_save_stack+0x32/0x50
[ 2816.797607]  ? kasan_save_stack+0x22/0x50
[ 2816.798191]  ? kasan_set_track+0x25/0x30
[ 2816.798764]  ? __kasan_kmalloc+0x7f/0x90
[ 2816.799339]  ? __kmalloc+0x5d/0x160
[ 2816.799840]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2816.800517]  ? do_splice_direct+0x1bb/0x290
[ 2816.801134]  ? do_sendfile+0xb67/0x1300
[ 2816.801670]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2816.802306]  ? do_syscall_64+0x3f/0x90
[ 2816.802877]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.803605]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2816.804236]  ? lock_is_held_type+0x9f/0x120
[ 2816.804861]  do_iter_readv_writev+0x217/0x3c0
[ 2816.805497]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2816.806200]  ? avc_policy_seqno+0x9/0x20
[ 2816.806785]  ? security_file_permission+0xb5/0xe0
[ 2816.807474]  do_iter_write+0x186/0x820
[ 2816.808008]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2816.808706]  ? iter_file_splice_write+0x162/0xcb0
[ 2816.809361]  ? kasan_set_track+0x25/0x30
[ 2816.809946]  vfs_iter_write+0x7a/0xb0
[ 2816.810476]  iter_file_splice_write+0x737/0xcb0
[ 2816.811137]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2816.811831]  ? __pfx_copy_splice_read+0x10/0x10
[ 2816.812508]  ? inode_security+0x105/0x140
[ 2816.813090]  ? security_file_permission+0xb5/0xe0
[ 2816.813791]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2816.814491]  direct_splice_actor+0x119/0x180
[ 2816.815139]  splice_direct_to_actor+0x349/0x9d0
[ 2816.815795]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2816.816531]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2816.817246]  ? security_file_permission+0xb5/0xe0
[ 2816.817948]  do_splice_direct+0x1bb/0x290
[ 2816.818552]  ? __pfx_do_splice_direct+0x10/0x10
[ 2816.819240]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2816.819984]  ? lock_is_held_type+0x9f/0x120
[ 2816.820595]  do_sendfile+0xb67/0x1300
[ 2816.821171]  ? __pfx_do_sendfile+0x10/0x10
[ 2816.821762]  __x64_sys_sendfile64+0x1d5/0x210
[ 2816.822419]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2816.823111]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2816.823853]  do_syscall_64+0x3f/0x90
[ 2816.824423]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2816.825154] RIP: 0033:0x7fa51deffb19
[ 2816.825657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2816.828081] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2816.829127] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2816.830102] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2816.831062] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2816.832020] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2816.833002] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2816.833996]  </TASK>
[ 2816.834597] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 16013; err -12
[ 2829.668254] loop6: detected capacity change from 0 to 40
[ 2829.688588] loop7: detected capacity change from 0 to 40
03:26:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:26:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
mount(&(0x7f0000000040)=@md0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='iso9660\x00', 0x240010, &(0x7f0000000280)='$[]:.\x00')

03:26:13 executing program 5:
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:26:13 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=<r4=>0x0)
statx(r2, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getgid()
r7 = getgid()
r8 = getgid()
setresgid(r6, r7, r8)
fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000001440)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xffffffffffffffff}], {0x4, 0x7}, [{0x8, 0x1, r5}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r6}], {0x10, 0x3}, {0x20, 0x1}}, 0x44, 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @struct, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000300000000000078551f000101720000000000f8ffffffffffffff000000000000070003000000000000005b00000000000000ffffffff0000000000100000000000000400000000000000030000000000001236"]}, @devid=r9})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000240)={{r1}, r4, 0x1e, @unused=[0x0, 0x9, 0x0, 0x7], @devid=r9})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:26:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x300000000000000)

03:26:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 39)

03:26:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 40)

03:26:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 31)

[ 2829.720807] loop3: detected capacity change from 0 to 40
[ 2829.732605] syz-executor.6: attempt to access beyond end of device
[ 2829.732605] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2829.734284] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2829.743523] loop4: detected capacity change from 0 to 40
[ 2829.791869] FAULT_INJECTION: forcing a failure.
[ 2829.791869] name failslab, interval 1, probability 0, space 0, times 0
[ 2829.793458] CPU: 0 PID: 12037 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2829.794532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2829.795585] Call Trace:
[ 2829.795943]  <TASK>
[ 2829.796266]  dump_stack_lvl+0xc1/0xf0
[ 2829.796841]  should_fail_ex+0x4b4/0x5b0
[ 2829.797417]  ? fat_cache_add.part.0+0x5b4/0xb50
[ 2829.798072]  should_failslab+0x9/0x20
[ 2829.798604]  kmem_cache_alloc+0x61/0x390
[ 2829.799200]  fat_cache_add.part.0+0x5b4/0xb50
[ 2829.799856]  fat_get_cluster+0x922/0xd40
[ 2829.800464]  ? __pfx_fat_get_cluster+0x10/0x10
[ 2829.801179]  fat_get_mapped_cluster+0x216/0x4a0
[ 2829.801842]  ? __pfx_fat_get_mapped_cluster+0x10/0x10
[ 2829.802546]  ? perf_trace_lock+0x2d5/0x480
[ 2829.803132]  ? perf_tp_event+0x96d/0x1280
[ 2829.803747]  fat_bmap+0x1fc/0x460
[ 2829.804264]  fat_get_block+0x33e/0x9f0
[ 2829.804839]  ? __pfx_fat_get_block+0x10/0x10
[ 2829.805487]  __block_write_begin_int+0x3f5/0x1530
[ 2829.806157]  ? __pfx_fat_get_block+0x10/0x10
[ 2829.806781]  ? folio_wait_stable+0x96/0xe0
[ 2829.807356]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2829.808086]  ? __pfx_fat_get_block+0x10/0x10
[ 2829.808711]  block_write_begin+0xb9/0x450
[ 2829.809302]  cont_write_begin+0x4fe/0x700
[ 2829.809896]  ? __pfx_fat_get_block+0x10/0x10
[ 2829.810514]  ? __pfx_cont_write_begin+0x10/0x10
[ 2829.811162]  ? lock_release+0x1e3/0x680
[ 2829.811727]  ? __pfx_lock_release+0x10/0x10
[ 2829.812328]  ? do_raw_spin_lock+0x125/0x270
[ 2829.812961]  fat_write_begin+0x89/0x180
[ 2829.813518]  ? __pfx_fat_get_block+0x10/0x10
[ 2829.814148]  generic_perform_write+0x26f/0x5e0
[ 2829.814812]  ? __pfx_generic_perform_write+0x10/0x10
[ 2829.815505]  ? __pfx_fat_update_time+0x10/0x10
[ 2829.816134]  ? __pfx_file_update_time+0x10/0x10
[ 2829.816784]  ? __pfx_generic_write_checks+0x10/0x10
[ 2829.817464]  ? direct_splice_actor+0x119/0x180
[ 2829.818115]  __generic_file_write_iter+0x160/0x1a0
[ 2829.818788]  generic_file_write_iter+0xe7/0x350
[ 2829.819440]  do_iter_readv_writev+0x217/0x3c0
[ 2829.820080]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2829.820796]  ? avc_policy_seqno+0x9/0x20
[ 2829.821388]  ? security_file_permission+0xb5/0xe0
[ 2829.822079]  do_iter_write+0x186/0x820
[ 2829.822623]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2829.823307]  ? iter_file_splice_write+0x162/0xcb0
[ 2829.823968]  ? kasan_set_track+0x25/0x30
[ 2829.824557]  vfs_iter_write+0x7a/0xb0
[ 2829.825093]  iter_file_splice_write+0x737/0xcb0
[ 2829.825770]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2829.826461]  ? __pfx_copy_splice_read+0x10/0x10
[ 2829.827121]  ? inode_security+0x105/0x140
[ 2829.827720]  ? security_file_permission+0xb5/0xe0
[ 2829.828405]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2829.829109]  direct_splice_actor+0x119/0x180
[ 2829.829745]  splice_direct_to_actor+0x349/0x9d0
[ 2829.830418]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2829.831122]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2829.831842]  ? security_file_permission+0xb5/0xe0
[ 2829.832559]  do_splice_direct+0x1bb/0x290
[ 2829.833146]  ? __pfx_do_splice_direct+0x10/0x10
[ 2829.833808]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2829.834538]  ? lock_is_held_type+0x9f/0x120
[ 2829.835154]  do_sendfile+0xb67/0x1300
[ 2829.835710]  ? __pfx_do_sendfile+0x10/0x10
[ 2829.836338]  __x64_sys_sendfile64+0x1d5/0x210
[ 2829.836914]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2829.837606]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2829.838326]  do_syscall_64+0x3f/0x90
[ 2829.838869]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2829.839567] RIP: 0033:0x7f435bfddb19
[ 2829.840076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2829.842381] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2829.843386] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2829.844314] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2829.845259] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2829.846179] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2829.847095] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2829.848065]  </TASK>
03:26:13 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000040)='^)\xc6(\x00', &(0x7f0000000180)='./file0/file0\x00', r3)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:26:13 executing program 3:
perf_event_open(&(0x7f0000000240)={0x171cdf50bbfa7729, 0x80, 0xfc, 0x7, 0x3f, 0x2, 0x0, 0x1, 0xa8008, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x201, 0x0, 0x53, 0x8, 0x7ff, 0x9, 0x7, 0x0, 0x10000, 0x0, 0x1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xfb, 0x7, 0x20, 0xff, 0x0, 0x8, 0x410, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x1, 0x200000000000000}, 0x4080, 0x6, 0xe9aa, 0x3, 0x2, 0x80000000, 0x5, 0x0, 0xffffffff, 0x0, 0x20}, 0xffffffffffffffff, 0x2, r1, 0x8)
personality(0x400000d)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mount$cgroup2(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x3200811, &(0x7f00000002c0)={[{@memory_recursiveprot}, {}, {}], [{@obj_type={'obj_type', 0x3d, '\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#]}\'^'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x66, 0x32, 0x665519d100e81141, 0x65, 0x64, 0x32, 0x64], 0x2d, [0x37, 0x37, 0x64, 0x7], 0x2d, [0x65, 0x32, 0x63, 0x31], 0x2d, [0x64, 0x39, 0x62, 0x35], 0x2d, [0x32, 0x64, 0x39, 0x31, 0x36, 0x39, 0x36, 0x35]}}}, {@seclabel}, {@euid_eq={'euid', 0x3d, 0xee01}}]})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:26:13 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 32)

03:26:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 40)

[ 2830.003596] loop6: detected capacity change from 0 to 40
03:26:13 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 41)

[ 2830.058721] loop3: detected capacity change from 0 to 40
[ 2830.096546] syz-executor.6: attempt to access beyond end of device
[ 2830.096546] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2830.098342] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2830.111792] loop4: detected capacity change from 0 to 40
[ 2830.132758] cgroup2: Unknown parameter 'obj_type'
[ 2830.134957] FAULT_INJECTION: forcing a failure.
[ 2830.134957] name failslab, interval 1, probability 0, space 0, times 0
[ 2830.136851] CPU: 0 PID: 12059 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2830.137916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2830.138973] Call Trace:
[ 2830.139330]  <TASK>
[ 2830.139654]  dump_stack_lvl+0xc1/0xf0
[ 2830.140219]  should_fail_ex+0x4b4/0x5b0
[ 2830.140809]  ? ext4_alloc_io_end_vec+0x23/0x130
[ 2830.141446]  should_failslab+0x9/0x20
[ 2830.141978]  kmem_cache_alloc+0x61/0x390
[ 2830.142561]  ext4_alloc_io_end_vec+0x23/0x130
[ 2830.143185]  ext4_do_writepages+0x1606/0x3150
[ 2830.143854]  ? do_writepages+0x1ad/0x650
[ 2830.144427]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2830.145175]  ? lock_is_held_type+0x9f/0x120
[ 2830.145784]  ext4_writepages+0x2fc/0x760
[ 2830.146341]  ? __pfx_ext4_writepages+0x10/0x10
[ 2830.147017]  ? find_held_lock+0x2c/0x110
[ 2830.147606]  ? __pfx_ext4_writepages+0x10/0x10
[ 2830.148226]  do_writepages+0x1ad/0x650
[ 2830.148814]  ? __pfx_do_writepages+0x10/0x10
[ 2830.149438]  ? do_raw_spin_lock+0x125/0x270
[ 2830.150050]  ? do_raw_spin_unlock+0x53/0x220
[ 2830.150668]  ? _raw_spin_unlock+0x1e/0x40
[ 2830.151239]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2830.151968]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2830.152623]  __filemap_fdatawrite_range+0xba/0x100
[ 2830.153067] loop7: detected capacity change from 0 to 40
[ 2830.153287]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2830.154733]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2830.155406]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2830.156076]  ? lock_release+0x1e3/0x680
[ 2830.156653]  file_write_and_wait_range+0xd2/0x140
[ 2830.157338]  ext4_sync_file+0x25a/0xde0
[ 2830.157888]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2830.158508]  vfs_fsync_range+0x147/0x240
[ 2830.159083]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2830.159734]  ? iter_file_splice_write+0x162/0xcb0
[ 2830.160402]  ext4_file_write_iter+0x36d/0x19b0
[ 2830.161015]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2830.161721]  ? iter_file_splice_write+0x162/0xcb0
[ 2830.162376]  ? kasan_save_stack+0x32/0x50
[ 2830.162957]  ? kasan_save_stack+0x22/0x50
[ 2830.163544]  ? kasan_set_track+0x25/0x30
[ 2830.164105]  ? __kasan_kmalloc+0x7f/0x90
[ 2830.164687]  ? __kmalloc+0x5d/0x160
[ 2830.165193]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2830.165854]  ? do_splice_direct+0x1bb/0x290
[ 2830.166446]  ? do_sendfile+0xb67/0x1300
[ 2830.166970]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2830.167590]  ? do_syscall_64+0x3f/0x90
[ 2830.168101]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2830.168789]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2830.169402]  ? lock_is_held_type+0x9f/0x120
[ 2830.170000]  do_iter_readv_writev+0x217/0x3c0
[ 2830.170610]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2830.171276]  ? avc_policy_seqno+0x9/0x20
[ 2830.171846]  ? security_file_permission+0xb5/0xe0
[ 2830.172518]  do_iter_write+0x186/0x820
[ 2830.173044]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2830.173682]  ? iter_file_splice_write+0x162/0xcb0
[ 2830.174280]  ? kasan_set_track+0x25/0x30
[ 2830.174831]  vfs_iter_write+0x7a/0xb0
[ 2830.175342]  iter_file_splice_write+0x737/0xcb0
[ 2830.175993]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2830.176661]  ? __pfx_copy_splice_read+0x10/0x10
[ 2830.177301]  ? inode_security+0x105/0x140
[ 2830.177884]  ? security_file_permission+0xb5/0xe0
[ 2830.178539]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2830.179216]  direct_splice_actor+0x119/0x180
[ 2830.179832]  splice_direct_to_actor+0x349/0x9d0
[ 2830.180435]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2830.181136]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2830.181829]  ? security_file_permission+0xb5/0xe0
[ 2830.182506]  do_splice_direct+0x1bb/0x290
[ 2830.183066]  ? __pfx_do_splice_direct+0x10/0x10
[ 2830.183710]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2830.184421]  ? lock_is_held_type+0x9f/0x120
[ 2830.185033]  do_sendfile+0xb67/0x1300
[ 2830.185564]  ? __pfx_do_sendfile+0x10/0x10
[ 2830.186160]  __x64_sys_sendfile64+0x1d5/0x210
[ 2830.186731]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2830.187391]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2830.188090]  do_syscall_64+0x3f/0x90
[ 2830.188619]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2830.189274] RIP: 0033:0x7fa51deffb19
[ 2830.189757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2830.191942] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2830.192901] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2830.193775] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2830.194664] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2830.195532] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2830.196402] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2830.197338]  </TASK>
[ 2830.218003] cgroup2: Unknown parameter 'obj_type'
[ 2830.239938] FAULT_INJECTION: forcing a failure.
[ 2830.239938] name failslab, interval 1, probability 0, space 0, times 0
[ 2830.241489] CPU: 0 PID: 12060 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2830.242520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2830.243551] Call Trace:
[ 2830.243900]  <TASK>
[ 2830.244210]  dump_stack_lvl+0xc1/0xf0
[ 2830.244749]  should_fail_ex+0x4b4/0x5b0
[ 2830.245296]  ? iter_file_splice_write+0x162/0xcb0
[ 2830.245928]  should_failslab+0x9/0x20
[ 2830.246436]  __kmem_cache_alloc_node+0x66/0x310
[ 2830.247061]  ? mark_held_locks+0x9e/0xe0
[ 2830.247601]  ? iter_file_splice_write+0x162/0xcb0
[ 2830.248249]  ? iter_file_splice_write+0x162/0xcb0
[ 2830.248910]  __kmalloc+0x4d/0x160
[ 2830.249393]  iter_file_splice_write+0x162/0xcb0
[ 2830.249997]  ? __kmem_cache_free+0xe1/0x330
[ 2830.250585]  ? copy_splice_read+0x65b/0x900
[ 2830.251190]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2830.251847]  ? __pfx_copy_splice_read+0x10/0x10
[ 2830.252505]  ? inode_security+0x105/0x140
[ 2830.253080]  ? security_file_permission+0xb5/0xe0
[ 2830.253749]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2830.254427]  direct_splice_actor+0x119/0x180
[ 2830.255037]  splice_direct_to_actor+0x349/0x9d0
[ 2830.255677]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2830.256378]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2830.257088]  ? security_file_permission+0xb5/0xe0
[ 2830.257772]  do_splice_direct+0x1bb/0x290
[ 2830.258333]  ? __pfx_do_splice_direct+0x10/0x10
[ 2830.258957]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2830.259656]  ? lock_is_held_type+0x9f/0x120
[ 2830.260251]  do_sendfile+0xb67/0x1300
[ 2830.260809]  ? __pfx_do_sendfile+0x10/0x10
[ 2830.261398]  __x64_sys_sendfile64+0x1d5/0x210
[ 2830.262004]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2830.262664]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2830.263364]  do_syscall_64+0x3f/0x90
[ 2830.263876]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2830.264544] RIP: 0033:0x7fc1c5d62b19
[ 2830.265022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2830.267242] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2830.268215] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2830.269125] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2830.270025] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2830.270920] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2830.271803] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2830.272750]  </TASK>
03:26:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa181, 0x0)
openat(r2, &(0x7f0000000180)='./file0\x00', 0x20000, 0x88)

03:26:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a0a300080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2830.338993] loop6: detected capacity change from 0 to 40
[ 2830.456415] syz-executor.6: attempt to access beyond end of device
[ 2830.456415] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2830.458048] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:26:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 42)

03:26:26 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:26:26 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x400000000000000)

03:26:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 33)

03:26:26 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:26:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 41)

03:26:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
open$dir(&(0x7f0000000000)='./file0\x00', 0x442081, 0x80)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x200)
unlink(&(0x7f0000000180)='./file1\x00')

03:26:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x101842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2842.852890] loop3: detected capacity change from 0 to 40
[ 2842.855436] loop7: detected capacity change from 0 to 40
[ 2842.899782] loop4: detected capacity change from 0 to 40
[ 2842.932311] loop6: detected capacity change from 0 to 40
03:26:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
clock_gettime(0x0, &(0x7f0000003580))
clock_gettime(0x0, &(0x7f00000003c0)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000001440)=[{&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f0000003600)=""/107, 0x6b}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001580)=""/195, 0xc3}, {&(0x7f0000001680)=""/110, 0x6e}, {&(0x7f0000001700)=""/147, 0x93}, {&(0x7f00000017c0)=""/68, 0x44}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/156, 0x9c}], 0x6}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/224, 0xe0}, {&(0x7f0000001b40)=""/44, 0x2c}], 0x2, &(0x7f0000001bc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001d00)=""/47, 0x2f}, {&(0x7f0000001d40)=""/123, 0x7b}, {&(0x7f0000001dc0)=""/115, 0x73}], 0x3, &(0x7f0000001e80)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000003380)=[{&(0x7f0000001fc0)=""/227, 0xe3}, {&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000002180)=""/231, 0xe7}, {&(0x7f0000002280)=""/234, 0xea}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x5, &(0x7f0000003400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x5, 0x12100, &(0x7f00000035c0)={r0, r1+60000000})
chdir(&(0x7f0000000140)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2842.991526] loop3: detected capacity change from 0 to 40
03:26:26 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 43)

03:26:26 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 34)

03:26:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 42)

03:26:26 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x40)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2843.077113] loop7: detected capacity change from 0 to 40
[ 2843.093237] FAULT_INJECTION: forcing a failure.
[ 2843.093237] name failslab, interval 1, probability 0, space 0, times 0
[ 2843.094332] CPU: 0 PID: 12107 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2843.094893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2843.095463] Call Trace:
[ 2843.095654]  <TASK>
[ 2843.095828]  dump_stack_lvl+0xc1/0xf0
[ 2843.096120]  should_fail_ex+0x4b4/0x5b0
[ 2843.096427]  ? ext4_find_extent+0xa41/0xd30
[ 2843.096754]  should_failslab+0x9/0x20
[ 2843.097039]  __kmem_cache_alloc_node+0x66/0x310
[ 2843.097397]  ? ext4_find_extent+0xa41/0xd30
[ 2843.097721]  ? __pfx_perf_tp_event+0x10/0x10
[ 2843.098058]  ? ext4_find_extent+0xa41/0xd30
[ 2843.098373]  __kmalloc+0x4d/0x160
[ 2843.098637]  ext4_find_extent+0xa41/0xd30
[ 2843.098969]  ext4_ext_map_blocks+0x1c7/0x5940
[ 2843.099326]  ? __pfx___lock_acquire+0x10/0x10
[ 2843.099658]  ? perf_trace_lock+0x2d5/0x480
[ 2843.099986]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2843.100325]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 2843.100705]  ? ext4_map_blocks+0x6f1/0x1970
[ 2843.101041]  ? __pfx_lock_acquire+0x10/0x10
[ 2843.101359]  ? lock_release+0x1e3/0x680
[ 2843.101654]  ? __pfx_lock_release+0x10/0x10
[ 2843.101972]  ? lock_is_held_type+0x9f/0x120
[ 2843.102315]  ? down_write+0x11a/0x1f0
[ 2843.102608]  ? __pfx_down_write+0x10/0x10
[ 2843.102923]  ? ext4_es_lookup_extent+0xc8/0xad0
[ 2843.103279]  ? kmem_cache_alloc+0x21f/0x390
[ 2843.103624]  ext4_map_blocks+0x763/0x1970
[ 2843.103965]  ? __pfx_ext4_map_blocks+0x10/0x10
[ 2843.104356]  ext4_do_writepages+0x1817/0x3150
[ 2843.104752]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2843.105135]  ? lock_is_held_type+0x9f/0x120
[ 2843.105473]  ext4_writepages+0x2fc/0x760
[ 2843.105786]  ? __pfx_ext4_writepages+0x10/0x10
[ 2843.106164]  ? find_held_lock+0x2c/0x110
[ 2843.106490]  ? __pfx_ext4_writepages+0x10/0x10
[ 2843.106834]  do_writepages+0x1ad/0x650
[ 2843.107147]  ? __pfx_do_writepages+0x10/0x10
[ 2843.107488]  ? do_raw_spin_lock+0x125/0x270
[ 2843.107823]  ? do_raw_spin_unlock+0x53/0x220
[ 2843.108174]  ? _raw_spin_unlock+0x1e/0x40
[ 2843.108490]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2843.108919]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2843.109283]  __filemap_fdatawrite_range+0xba/0x100
[ 2843.109662]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2843.110078]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2843.110452]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2843.110831]  ? lock_release+0x1e3/0x680
[ 2843.111147]  file_write_and_wait_range+0xd2/0x140
[ 2843.111530]  ext4_sync_file+0x25a/0xde0
[ 2843.111838]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2843.112182]  vfs_fsync_range+0x147/0x240
[ 2843.112504]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2843.112875]  ? iter_file_splice_write+0x162/0xcb0
[ 2843.113236]  ext4_file_write_iter+0x36d/0x19b0
[ 2843.113582]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2843.113969]  ? iter_file_splice_write+0x162/0xcb0
[ 2843.114330]  ? kasan_save_stack+0x32/0x50
[ 2843.114654]  ? kasan_save_stack+0x22/0x50
[ 2843.114969]  ? kasan_set_track+0x25/0x30
[ 2843.115280]  ? __kasan_kmalloc+0x7f/0x90
[ 2843.115602]  ? __kmalloc+0x5d/0x160
[ 2843.115881]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2843.116247]  ? do_splice_direct+0x1bb/0x290
[ 2843.116581]  ? do_sendfile+0xb67/0x1300
[ 2843.116885]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2843.117238]  ? do_syscall_64+0x3f/0x90
[ 2843.117546]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2843.117943]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2843.118297]  ? lock_is_held_type+0x9f/0x120
[ 2843.118643]  do_iter_readv_writev+0x217/0x3c0
[ 2843.118999]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2843.119370]  ? avc_policy_seqno+0x9/0x20
[ 2843.119698]  ? security_file_permission+0xb5/0xe0
[ 2843.120079]  do_iter_write+0x186/0x820
[ 2843.120363]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2843.120752]  ? iter_file_splice_write+0x162/0xcb0
[ 2843.121113]  ? kasan_set_track+0x25/0x30
[ 2843.121431]  vfs_iter_write+0x7a/0xb0
[ 2843.121716]  iter_file_splice_write+0x737/0xcb0
[ 2843.122087]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2843.122460]  ? __pfx_copy_splice_read+0x10/0x10
[ 2843.122817]  ? inode_security+0x105/0x140
[ 2843.123142]  ? security_file_permission+0xb5/0xe0
[ 2843.123518]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2843.123902]  direct_splice_actor+0x119/0x180
[ 2843.124250]  splice_direct_to_actor+0x349/0x9d0
[ 2843.124600]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2843.124991]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2843.125382]  ? security_file_permission+0xb5/0xe0
[ 2843.125764]  do_splice_direct+0x1bb/0x290
[ 2843.126076]  ? __pfx_do_splice_direct+0x10/0x10
[ 2843.126431]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2843.126822]  ? lock_is_held_type+0x9f/0x120
[ 2843.127152]  do_sendfile+0xb67/0x1300
[ 2843.127448]  ? __pfx_do_sendfile+0x10/0x10
[ 2843.127777]  __x64_sys_sendfile64+0x1d5/0x210
[ 2843.128115]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2843.128497]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2843.128896]  do_syscall_64+0x3f/0x90
[ 2843.129201]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2843.129573] RIP: 0033:0x7fa51deffb19
[ 2843.129853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2843.131062] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2843.131619] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2843.132145] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2843.132664] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2843.133183] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2843.133703] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2843.134251]  </TASK>
[ 2843.170799] loop4: detected capacity change from 0 to 40
03:26:27 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 44)

[ 2843.204659] loop6: detected capacity change from 0 to 40
[ 2843.224266] FAULT_INJECTION: forcing a failure.
[ 2843.224266] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2843.226096] CPU: 0 PID: 12111 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2843.227209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2843.228317] Call Trace:
[ 2843.228692]  <TASK>
[ 2843.229025]  dump_stack_lvl+0xc1/0xf0
[ 2843.229597]  should_fail_ex+0x4b4/0x5b0
[ 2843.230191]  __should_fail_alloc_page+0xe0/0x110
[ 2843.230882]  prepare_alloc_pages+0x178/0x500
[ 2843.231527]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2843.232185]  ? __pfx_mark_lock.part.0+0x10/0x10
[ 2843.232894]  __alloc_pages+0x149/0x480
[ 2843.233431]  ? lock_acquire+0x19a/0x4c0
[ 2843.234048]  ? __pfx___alloc_pages+0x10/0x10
[ 2843.234700]  ? lock_release+0x1e3/0x680
[ 2843.235296]  ? xas_start+0x14e/0x710
[ 2843.235883]  alloc_pages+0x1a0/0x260
[ 2843.236433]  filemap_alloc_folio+0x389/0x430
[ 2843.237100]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2843.237803]  ? perf_trace_lock+0x2d5/0x480
[ 2843.238441]  __filemap_get_folio+0x285/0x8d0
[ 2843.239116]  pagecache_get_page+0x2e/0x120
[ 2843.239720]  ? __pfx_fat_get_block+0x10/0x10
[ 2843.240351]  block_write_begin+0x35/0x450
[ 2843.240950]  ? lock_release+0x1e3/0x680
[ 2843.241511]  cont_write_begin+0x4fe/0x700
[ 2843.242147]  ? __block_commit_write+0x214/0x260
[ 2843.242837]  ? __pfx_fat_get_block+0x10/0x10
[ 2843.243483]  ? __pfx_cont_write_begin+0x10/0x10
[ 2843.244142]  ? __mark_inode_dirty+0x68c/0xc10
[ 2843.244825]  ? generic_write_end+0x1fe/0x3d0
[ 2843.245474]  fat_write_begin+0x89/0x180
[ 2843.246035]  ? __pfx_fat_get_block+0x10/0x10
[ 2843.246682]  generic_perform_write+0x26f/0x5e0
[ 2843.247372]  ? __pfx_generic_perform_write+0x10/0x10
[ 2843.248088]  ? __pfx_fat_update_time+0x10/0x10
[ 2843.248753]  ? __pfx_file_update_time+0x10/0x10
[ 2843.249415]  ? __pfx_generic_write_checks+0x10/0x10
[ 2843.250129]  ? direct_splice_actor+0x119/0x180
[ 2843.250814]  __generic_file_write_iter+0x160/0x1a0
[ 2843.251519]  generic_file_write_iter+0xe7/0x350
[ 2843.252230]  do_iter_readv_writev+0x217/0x3c0
[ 2843.252896]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2843.253606]  ? avc_policy_seqno+0x9/0x20
[ 2843.254211]  ? security_file_permission+0xb5/0xe0
[ 2843.254929]  do_iter_write+0x186/0x820
[ 2843.255479]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2843.256176]  ? iter_file_splice_write+0x162/0xcb0
[ 2843.256864]  ? kasan_set_track+0x25/0x30
[ 2843.257459]  vfs_iter_write+0x7a/0xb0
[ 2843.258002]  iter_file_splice_write+0x737/0xcb0
[ 2843.258693]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2843.259399]  ? __pfx_copy_splice_read+0x10/0x10
[ 2843.260074]  ? inode_security+0x105/0x140
[ 2843.260694]  ? security_file_permission+0xb5/0xe0
[ 2843.261399]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2843.262112]  direct_splice_actor+0x119/0x180
[ 2843.262769]  splice_direct_to_actor+0x349/0x9d0
[ 2843.263449]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2843.264170]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2843.264917]  ? security_file_permission+0xb5/0xe0
[ 2843.265631]  do_splice_direct+0x1bb/0x290
[ 2843.266235]  ? __pfx_do_splice_direct+0x10/0x10
[ 2843.266888] syz-executor.6: attempt to access beyond end of device
[ 2843.266888] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2843.266914]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2843.268551] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2843.269205]  ? lock_is_held_type+0x9f/0x120
[ 2843.270816]  do_sendfile+0xb67/0x1300
[ 2843.271397]  ? __pfx_do_sendfile+0x10/0x10
[ 2843.272040]  __x64_sys_sendfile64+0x1d5/0x210
[ 2843.272699]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2843.273421]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2843.274162]  do_syscall_64+0x3f/0x90
[ 2843.274727]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2843.275445] RIP: 0033:0x7fc1c5d62b19
[ 2843.275975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2843.278413] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2843.279478] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2843.280492] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2843.281498] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2843.282480] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2843.283471] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2843.284528]  </TASK>
[ 2843.354445] FAULT_INJECTION: forcing a failure.
[ 2843.354445] name failslab, interval 1, probability 0, space 0, times 0
[ 2843.356330] CPU: 0 PID: 12116 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2843.357495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2843.358638] Call Trace:
[ 2843.359026]  <TASK>
[ 2843.359370]  dump_stack_lvl+0xc1/0xf0
[ 2843.359965]  should_fail_ex+0x4b4/0x5b0
[ 2843.360566]  ? copy_splice_read+0x15b/0x900
[ 2843.361237]  should_failslab+0x9/0x20
[ 2843.361811]  __kmem_cache_alloc_node+0x66/0x310
[ 2843.362512]  ? copy_splice_read+0x15b/0x900
[ 2843.363114]  ? __kmem_cache_free+0xe1/0x330
[ 2843.363688]  ? copy_splice_read+0x15b/0x900
[ 2843.364280]  __kmalloc+0x4d/0x160
[ 2843.364771]  copy_splice_read+0x15b/0x900
[ 2843.365337]  ? lock_is_held_type+0x9f/0x120
[ 2843.365936]  ? __pfx_copy_splice_read+0x10/0x10
[ 2843.366572]  ? inode_security+0x105/0x140
[ 2843.367136]  ? fsnotify_perm.part.0+0x248/0x680
[ 2843.367767]  ? security_file_permission+0xb5/0xe0
[ 2843.368423]  ? __pfx_copy_splice_read+0x10/0x10
[ 2843.369090]  vfs_splice_read+0x238/0x2d0
[ 2843.369660]  splice_direct_to_actor+0x2aa/0x9d0
[ 2843.370311]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2843.370985]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2843.371690]  ? security_file_permission+0xb5/0xe0
[ 2843.372353]  do_splice_direct+0x1bb/0x290
[ 2843.372930]  ? __pfx_do_splice_direct+0x10/0x10
[ 2843.373574]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2843.374293]  ? lock_is_held_type+0x9f/0x120
[ 2843.374895]  do_sendfile+0xb67/0x1300
[ 2843.375436]  ? __pfx_do_sendfile+0x10/0x10
[ 2843.376040]  __x64_sys_sendfile64+0x1d5/0x210
[ 2843.376661]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2843.377384]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2843.378150]  do_syscall_64+0x3f/0x90
[ 2843.378684]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2843.379361] RIP: 0033:0x7f435bfddb19
[ 2843.379868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2843.382128] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2843.383104] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2843.384003] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2843.384927] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2843.385847] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2843.386769] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2843.387741]  </TASK>
03:26:27 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 35)

03:26:27 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x283d}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:wireless_device_t:s0\x00', 0x27)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2843.508940] loop6: detected capacity change from 0 to 40
[ 2843.603207] syz-executor.6: attempt to access beyond end of device
[ 2843.603207] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2843.605224] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:26:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 45)

03:26:40 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x810000000000000)

03:26:40 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:26:40 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:26:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 36)

03:26:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 43)

03:26:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101000, 0x6c)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:26:40 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
stat(&(0x7f0000001440)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r3=>r0, {0x2}}, './file1\x00'})
sendto$unix(r3, &(0x7f0000001b00)="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", 0xff, 0x4048001, &(0x7f0000001580)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
setresuid(0x0, r2, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setresuid(0x0, r4, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
syz_mount_image$tmpfs(&(0x7f0000001600), &(0x7f0000001640)='./file1\x00', 0x0, 0x4, &(0x7f00000018c0)=[{&(0x7f0000001680)="75ea120c23e4e458abbe60f247d69712b105270237257d8ba5b5b4a1fc74ff662dbc99b67f11d24bf2f671b1c9f01e3a85c7e843a3cf942381df8911267218814fa1c36635eaaad232cd5245ea1dbfc50fa04a2d6da1901cb8ccffbda8377724e409708addfbed82b8a84536c045ffdd7517a946960b2b5adfef8b14707d847c4b9d973b56d8e4eed0387700ee12e03481f3ab0828", 0x95, 0xe43}, {&(0x7f0000001740)="2a84bcea271c624f56b72a0db6e4c80a205c54ea0b1a25a01eff703d0d01fa8ce178c23e531fb1a1c41aad596ee21ff71e117a48f8f0b6be73a577d0688d2b78c43d08678c567bebf6e3062fa630020d8a4262fe", 0x54, 0x7}, {&(0x7f00000017c0)="19bed27233a6", 0x6, 0x1}, {&(0x7f0000001800)="dee25b315f1180ac5489aaa883745b0958763aaa2cf772cf4581b89bdaa08492ddd94a2ea6749b4a9bb26cc99ff64775aa7309549bc569ca29d55190f10f3df88e413cb232dd687d5d83c6342a29c331e18644ac46b8af782620afdc418a95c28ae0fecd626e79494645313b038b4d2c9de66176f50bff6a9a7f3e2c531b6d5935bdaae3003b4deea1844b54a68929fbaadc888af9d19d43ac952e95e868e2af1d0b36cb62868c6b3a7b769d4b56769e", 0xb0, 0x8}], 0x2268, &(0x7f0000001940)={[{@nr_inodes={'nr_inodes', 0x3d, [0x67, 0x6b, 0x36, 0x49, 0x30]}}, {@gid}, {@huge_advise}, {@size={'size', 0x3d, [0x39, 0x37]}}, {@mode={'mode', 0x3d, 0x4}}, {@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38, 0x31, 0x35]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x14, 0x3e, 0x77]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x25, 0x30, 0x74, 0x65]}}, {@gid}], [{@euid_lt={'euid<', r4}}, {@obj_type={'obj_type', 0x3d, 'k\xff\xfe\xff\xff\xf1\xff\xdf\xff\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '++{]:].:^)*-'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@context={'context', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r5}}, {@obj_user={'obj_user', 0x3d, '],'}}, {@appraise}, {@uid_eq={'uid', 0x3d, r2}}, {@pcr={'pcr', 0x3d, 0x37}}]})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000040)=0x4)
r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0))
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000400)={{r0}, 0x0, 0xc, @inherit={0x70, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000005000000000000000000000000000000530a00000000000002000000000000000300000000f70000070000000000000004000000e7ffffff0000000000120000ff0100060000001277d63b000000000005000000000000003f00"/112]}, @name="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"})
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000001ac0)='./file0/file0\x00', &(0x7f00000001c0), 0x8b0442, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,access=user,afid000004,version=9p2000,dfltuid=\x00'/93, @ANYRESHEX=r2, @ANYBLOB=',loose,noextend,posixacl,msize=0x000000000000102c,privport,mmap,appraise_type=imasig,smackfshat=++{]:].:^)*-,appraise_type=imasig,subj_type=vfat\x00,defcontext=staff_u,\x00'])

[ 2856.636898] loop3: detected capacity change from 0 to 40
[ 2856.643645] loop7: detected capacity change from 0 to 40
[ 2856.660600] FAULT_INJECTION: forcing a failure.
[ 2856.660600] name failslab, interval 1, probability 0, space 0, times 0
[ 2856.660881] loop6: detected capacity change from 0 to 40
[ 2856.662235] CPU: 1 PID: 12137 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2856.663722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2856.664847] Call Trace:
[ 2856.665215]  <TASK>
[ 2856.665547]  dump_stack_lvl+0xc1/0xf0
[ 2856.666118]  should_fail_ex+0x4b4/0x5b0
[ 2856.666699]  ? ext4_mb_new_blocks+0x64a/0x4630
[ 2856.667369]  should_failslab+0x9/0x20
[ 2856.667913]  kmem_cache_alloc+0x61/0x390
[ 2856.668511]  ext4_mb_new_blocks+0x64a/0x4630
[ 2856.669191]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2856.669883]  ? kernel_text_address+0x5b/0xc0
[ 2856.670518]  ? ext4_find_extent+0xa41/0xd30
[ 2856.671136]  ? kasan_set_track+0x25/0x30
[ 2856.671730]  ? __kasan_kmalloc+0x7f/0x90
[ 2856.672320]  ? ext4_cache_extents+0x68/0x2d0
[ 2856.672975]  ? __pfx_ext4_mb_new_blocks+0x10/0x10
[ 2856.673685]  ? ext4_ext_search_right+0x2e3/0xbd0
[ 2856.674363]  ? ext4_inode_to_goal_block+0x324/0x430
[ 2856.675076]  ext4_ext_map_blocks+0x1e16/0x5940
[ 2856.675761]  ? __pfx___lock_acquire+0x10/0x10
[ 2856.676406]  ? perf_trace_lock+0xc1/0x480
[ 2856.677029]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2856.677694]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 2856.678394]  ? ext4_map_blocks+0x6f1/0x1970
[ 2856.679032]  ? __pfx_lock_acquire+0x10/0x10
[ 2856.679643]  ? lock_release+0x1e3/0x680
[ 2856.680227]  ? __pfx_lock_release+0x10/0x10
[ 2856.680859]  ? lock_is_held_type+0x9f/0x120
[ 2856.681505]  ? __pfx_down_write+0x10/0x10
[ 2856.682108]  ? ext4_es_lookup_extent+0xc8/0xad0
[ 2856.682784]  ? kmem_cache_alloc+0x21f/0x390
[ 2856.683417]  ext4_map_blocks+0x763/0x1970
[ 2856.684039]  ? __pfx_ext4_map_blocks+0x10/0x10
[ 2856.684728]  ext4_do_writepages+0x1817/0x3150
[ 2856.685423]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2856.686115]  ? lock_is_held_type+0x9f/0x120
[ 2856.686741]  ext4_writepages+0x2fc/0x760
[ 2856.687318]  ? __pfx_ext4_writepages+0x10/0x10
[ 2856.687967]  ? do_writepages+0x50d/0x650
[ 2856.688595]  ? __pfx_ext4_writepages+0x10/0x10
[ 2856.689250]  do_writepages+0x1ad/0x650
[ 2856.689820]  ? __pfx_do_writepages+0x10/0x10
[ 2856.690452]  ? do_raw_spin_lock+0x125/0x270
[ 2856.691076]  ? do_raw_spin_unlock+0x53/0x220
[ 2856.691728]  ? _raw_spin_unlock+0x1e/0x40
[ 2856.692320]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2856.693091]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2856.693774]  __filemap_fdatawrite_range+0xba/0x100
[ 2856.694484]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2856.695266]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2856.695952]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2856.696652]  ? lock_release+0x1e3/0x680
[ 2856.697241]  file_write_and_wait_range+0xd2/0x140
[ 2856.697940]  ext4_sync_file+0x25a/0xde0
[ 2856.698509]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2856.699154]  vfs_fsync_range+0x147/0x240
[ 2856.699742]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2856.700413]  ? iter_file_splice_write+0x162/0xcb0
[ 2856.701106]  ext4_file_write_iter+0x36d/0x19b0
[ 2856.701772]  ? iter_file_splice_write+0x162/0xcb0
[ 2856.702451]  ? kasan_save_stack+0x32/0x50
[ 2856.703057]  ? kasan_save_stack+0x22/0x50
[ 2856.703649]  ? kasan_set_track+0x25/0x30
[ 2856.704239]  ? __kasan_kmalloc+0x7f/0x90
[ 2856.704846]  ? __kmalloc+0x5d/0x160
[ 2856.705373]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2856.706074]  ? do_splice_direct+0x1bb/0x290
[ 2856.706705]  ? do_sendfile+0xb67/0x1300
[ 2856.707270]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2856.707935]  ? do_syscall_64+0x3f/0x90
[ 2856.708515]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2856.709267]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2856.709925]  ? lock_is_held_type+0x9f/0x120
[ 2856.710567]  do_iter_readv_writev+0x217/0x3c0
[ 2856.711231]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2856.711960]  ? avc_policy_seqno+0x9/0x20
[ 2856.712572]  ? security_file_permission+0xb5/0xe0
[ 2856.713277]  do_iter_write+0x186/0x820
[ 2856.713840]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2856.714541]  ? iter_file_splice_write+0x162/0xcb0
[ 2856.715227]  ? kasan_set_track+0x25/0x30
[ 2856.715834]  vfs_iter_write+0x7a/0xb0
[ 2856.716381]  iter_file_splice_write+0x737/0xcb0
[ 2856.717097]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2856.717813]  ? __pfx_copy_splice_read+0x10/0x10
[ 2856.718497]  ? inode_security+0x105/0x140
[ 2856.719102]  ? security_file_permission+0xb5/0xe0
[ 2856.719803]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2856.720507]  direct_splice_actor+0x119/0x180
[ 2856.721148]  splice_direct_to_actor+0x349/0x9d0
[ 2856.721813]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2856.722515]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2856.723243]  ? security_file_permission+0xb5/0xe0
[ 2856.723933]  do_splice_direct+0x1bb/0x290
[ 2856.724522]  ? __pfx_do_splice_direct+0x10/0x10
[ 2856.725208]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2856.725939]  ? lock_is_held_type+0x9f/0x120
[ 2856.726550]  do_sendfile+0xb67/0x1300
[ 2856.727099]  ? __pfx_do_sendfile+0x10/0x10
[ 2856.727703]  __x64_sys_sendfile64+0x1d5/0x210
[ 2856.728330]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2856.729065]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2856.729792]  do_syscall_64+0x3f/0x90
[ 2856.730333]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2856.731034] RIP: 0033:0x7fa51deffb19
[ 2856.731545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2856.733903] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2856.734099] loop4: detected capacity change from 0 to 40
[ 2856.734894] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2856.734919] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2856.737183] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2856.738133] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2856.739075] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2856.740043]  </TASK>
03:26:40 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x100, 0x40}, 0x18)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x10001, 0x7, 0x2, 0x9})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000001c0)='./file1\x00')
connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
lstat(&(0x7f0000000040)='./file1\x00', &(0x7f00000002c0))

[ 2856.832584] loop3: detected capacity change from 0 to 40
[ 2856.834189] syz-executor.6: attempt to access beyond end of device
[ 2856.834189] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2856.835077] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:26:40 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 46)

[ 2856.859037] syz-executor.6: attempt to access beyond end of device
[ 2856.859037] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2856.860429] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:26:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 44)

[ 2856.923536] loop4: detected capacity change from 0 to 40
03:26:40 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)

03:26:40 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 37)

[ 2856.986335] loop7: detected capacity change from 0 to 40
03:26:40 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
r3 = geteuid()
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="b81532445ec28f91daf38d2be4a86a0b28b8173c97d900dc8566a590d7c7d6a0b852820874e2db0422d4dbe53745c8504ac9558fed9087327fef3be0bc3874f0487b64d2683fbee8d0e83600d6d7dea1461ccc2406d57968fcf40cecc9de2f615f46f6dff3e91aa5efe5a896c427b906b514a18bb00ce7ae670317d86a818dd4cc6796baa3fb71f95a678234f7890e6a6e56d2b6a551880b2631e38effda2b56dbf4c46a52c84d535e0555bbb7cd110549f631d2804ecc000635452982446ee87296c7ac0a63e9e1ababdafff9858374e05c13477fc4e1caab0851209261cc5b7a91d63e3e6a92885fa48341b0", 0xed, 0x3}], 0x40, &(0x7f0000000340)={[{@size={'size', 0x3d, [0x30, 0x79, 0x38, 0x37, 0x6d, 0x31, 0x67]}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x35, 0x35, 0x32, 0x2c, 0x38, 0x3a, 0x2f]}}}}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x35, 0x37]}}}}, {@huge_always}], [{@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@dont_hash}, {@fowner_gt={'fowner>', r1}}, {@euid_lt={'euid<', r2}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fowner_gt={'fowner>', r3}}]})
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000500)={{0x309a, 0x9}, 0x100, './file1\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x58008, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x84}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
acct(&(0x7f00000004c0)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x38100, 0x81)

03:26:40 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 45)

[ 2857.043463] loop6: detected capacity change from 0 to 40
[ 2857.080841] loop4: detected capacity change from 0 to 40
03:26:41 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 47)

[ 2857.127558] Process accounting resumed
[ 2857.203573] loop7: detected capacity change from 0 to 40
[ 2857.249530] FAULT_INJECTION: forcing a failure.
[ 2857.249530] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2857.251081] CPU: 1 PID: 12173 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2857.252106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2857.253137] Call Trace:
[ 2857.253474]  <TASK>
[ 2857.253774]  dump_stack_lvl+0xc1/0xf0
[ 2857.254305]  should_fail_ex+0x4b4/0x5b0
[ 2857.254837]  __should_fail_alloc_page+0xe0/0x110
[ 2857.255465]  prepare_alloc_pages+0x178/0x500
[ 2857.256055]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2857.256662]  __alloc_pages+0x149/0x480
[ 2857.257189]  ? lock_acquire+0x19a/0x4c0
[ 2857.257721]  ? __pfx___alloc_pages+0x10/0x10
[ 2857.258316]  ? lock_release+0x1e3/0x680
[ 2857.258865]  alloc_pages+0x1a0/0x260
[ 2857.259375]  filemap_alloc_folio+0x389/0x430
[ 2857.259965]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2857.260597]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2857.261202]  ? find_held_lock+0x2c/0x110
[ 2857.261732]  ? folio_memcg_lock+0xf9/0x4b0
[ 2857.262286]  __filemap_get_folio+0x285/0x8d0
[ 2857.262875]  ? folio_memcg_unlock+0xbd/0x240
[ 2857.263448]  pagecache_get_page+0x2e/0x120
[ 2857.264002]  ? __pfx_fat_get_block+0x10/0x10
[ 2857.264572]  block_write_begin+0x35/0x450
[ 2857.265129]  cont_write_begin+0x4fe/0x700
[ 2857.265666]  ? __block_commit_write+0x214/0x260
[ 2857.266281]  ? __pfx_fat_get_block+0x10/0x10
[ 2857.266852]  ? __pfx_cont_write_begin+0x10/0x10
[ 2857.267447]  ? __mark_inode_dirty+0x249/0xc10
[ 2857.268042]  ? generic_write_end+0x1fe/0x3d0
[ 2857.268615]  fat_write_begin+0x89/0x180
[ 2857.269149]  ? __pfx_fat_get_block+0x10/0x10
[ 2857.269731]  generic_perform_write+0x26f/0x5e0
[ 2857.270350]  ? __pfx_generic_perform_write+0x10/0x10
[ 2857.270989]  ? __pfx_fat_update_time+0x10/0x10
[ 2857.271587]  ? __pfx_file_update_time+0x10/0x10
[ 2857.272187]  ? __pfx_generic_write_checks+0x10/0x10
[ 2857.272835]  ? direct_splice_actor+0x119/0x180
[ 2857.273447]  __generic_file_write_iter+0x160/0x1a0
[ 2857.274070]  generic_file_write_iter+0xe7/0x350
[ 2857.274665]  do_iter_readv_writev+0x217/0x3c0
[ 2857.275260]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2857.275920]  ? avc_policy_seqno+0x9/0x20
[ 2857.276474]  ? security_file_permission+0xb5/0xe0
[ 2857.277136]  do_iter_write+0x186/0x820
[ 2857.277642]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2857.278282]  ? iter_file_splice_write+0x162/0xcb0
[ 2857.278888]  ? kasan_set_track+0x25/0x30
[ 2857.279449]  vfs_iter_write+0x7a/0xb0
[ 2857.279940]  iter_file_splice_write+0x737/0xcb0
[ 2857.280555]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2857.281224]  ? __pfx_copy_splice_read+0x10/0x10
[ 2857.281837]  ? inode_security+0x105/0x140
[ 2857.282387]  ? security_file_permission+0xb5/0xe0
[ 2857.283016]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2857.283680]  direct_splice_actor+0x119/0x180
[ 2857.284287]  splice_direct_to_actor+0x349/0x9d0
[ 2857.284906]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2857.285556]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2857.286250]  ? security_file_permission+0xb5/0xe0
[ 2857.286893]  do_splice_direct+0x1bb/0x290
[ 2857.287467]  ? __pfx_do_splice_direct+0x10/0x10
[ 2857.288095]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2857.288780]  ? lock_is_held_type+0x9f/0x120
[ 2857.289397]  do_sendfile+0xb67/0x1300
[ 2857.289898]  ? __pfx_do_sendfile+0x10/0x10
[ 2857.290473]  __x64_sys_sendfile64+0x1d5/0x210
[ 2857.291059]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2857.291702]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2857.292382]  do_syscall_64+0x3f/0x90
[ 2857.292898]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2857.293566] RIP: 0033:0x7f435bfddb19
[ 2857.294033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2857.296207] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2857.297157] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2857.298027] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2857.298891] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2857.299767] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2857.300657] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2857.301586]  </TASK>
[ 2857.347075] syz-executor.7: attempt to access beyond end of device
[ 2857.347075] loop7: rw=2049, sector=44, nr_sectors = 8 limit=40
03:26:55 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xa00000000000000)

03:26:55 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:26:55 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 38)

03:26:55 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0))
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002540), 0x101000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000002580)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff}, './file1\x00'})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x442a00, 0x0)
ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000040))
r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0))
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setresuid(0x0, r8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r0, {0xee00, <r9=>0xffffffffffffffff}}, './file1\x00'})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002680)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000024c0)=[{&(0x7f00000001c0)="7b76fc3c75c916cd32f232c3bf8e9efd7eb0ed3f7d4366de2f5dbe04051123b2d17e67a04caa92704eb1260621d1f28420d6fea6d308", 0x36}, {&(0x7f0000000240)="733569e6618590777fd90ed06b92e99fecd41c211ade4f03b6f3f2158b8a50be3ded183957216c0d0fbcdf4adbcf18847913dc39b3c23d2759dd73927025d0539d380f8d6e34709589ccdd47c62114c95f508abcc9f5c0afbcab7ebc38f80d", 0x5f}, {&(0x7f00000002c0)="d3da6c7f621094a355c52cbb8d3a78963599b0e345b8b099bb2c212325517e696a28940497cde51219796152b3479469f40d7a10fc27a735ac946df66232e294a5bf7fcf6237524d02f44ab5ba2b6349377c914aa541d58d5182904fa2a6851af3366860fb7158f4ef38d83aeac88f129aace16306a6f29e0f66f6bb118244ca034b15124872d83bcf7571af5273876af594f1456c4cc3c8edf81d562f6cd7c7f10e8be9cf1731dc85bd", 0xaa}, {&(0x7f0000000380)="983060b9b75e056d2b5b451c71eb8513827d28e22420361d68abea9595dd70c685b68a792f", 0x25}, {&(0x7f00000003c0)="96db34345ad62ea982168ae59f6a7b9e28c188ba363d8acfea9a9300911788441971e2d2e080471f513a43cfe35f7595a3b8945a44e184ede5f4a6c5d40703e424bcea4204dea56aadd1542ede2d6124", 0x50}, {&(0x7f0000000440)="64a2799e79f021c5df2ce7e04b07d805950b7a20754e9e17d3d157424950cc1e93a79d71856f49a477012a2c00537f01a2ab521a1317a41a450b9ada3af7575f37ad22c18e62634f502030463bd4bd5c19ba403a723bd878289fa1211c52680c39f8422b20f3c369452e2d55efd760150d31", 0x72}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="30ef0e42be550c5285c1d4fbd0b403c715a65729c6ef934338f4f2eccf52a044794a3803cd71e92392eef9cd719b5b57b322aae2a4df6a81894e147f2c152da7295d597d42de48cf2bf417b07321f90771968f074ebdb7100e34ffdfe6945eb1590784c72e3d8443a627441aa0bb056c4e00053a4e4f65d4ef3784e01b9f235a31b27f99e513ebad5a8453bca1e29efa2bd14423d89760ce8806d43b5a80e9003dd633726a6873108c022d8b172d44636fe1ffa23c3b6433f4edb7bc62659434f99a6ad3a96fd39a36903a9c62aa7701ebd6910f923e43290da2f1a6ac137bb3fd86cfcdaa712c9bcf9a5f5ebcdba829c3c85e26298078961409ad4689fc54e5417d26950cdc2e1adf8c6887d1a57f7897d37c6f6f76d85a85138f6b718a4c8445d51d5461c168ed4659645cb11a3b62b6901ae65b56332bd5bb5ed9c354dce08f97187af20ea05ab331cf31c18fc0ee11b4bfd8a0f15e19e26b5bcb0b72f1803e4196fac1aeec6bc710f10ef2538eac8ffbbf83b41ea4383c6c9fcf538705a39dbace8ef1b9a8b7a66e93ebd4209565c8120b13e0f04598bf782ac91043cbc8a80e3d0cceab40d737676b69a1f9262c5014b60fe5c807f179d83d26d60473492ff23436c16d1710a5430d8773e1cc774a27f31bfe5bdfb11718e2b93f27ae47bf663207cb9faa2f9b33c3fb4509f1228b3626ed869d5e6cc3e8dbc016a711b6fbbfb2af92753a75649dac84b7ed0df45e100df3b6d676cd9001f1be04a3ab30e29d79ebe12f5de3403a3495fb76c4a829c83ea447ad990b43651b9519bf57c4bb0635c31c4371af85008aba96491e6f09b63a45a8807beaaff18751278d19f0de20f77e2dac44e4dbb6672c7f0e3a0626956a5ce954f22460bafcc160939707f6c7fe8cf49d4237263539116aafdeb8c6489c726e5b3b3206bbedc00102c7bfc2218f4df228c0708dd6289dea094a3c5f37158cc986bb4f0c374751feffab8033d4dce44d690cae19bef2dde2db71c149342d82852741064729242926973bfd29cac0d92eea093a356bd5849cdd22d91903890b9e2c6e3236706e1d7c2e0a2ef9bfa99056faadeb6ff073f3ee5a0a8198fa61efebf7a92e621b5a0eea4b21078fc9e4b6638a71ac5ecb9e54687ca4960773ac0b2924586b8631e0e1a97729c12ff996e915734869a6a2c3d770c1e91b8d1a2d5f4394da85b8324714b7eb2f5fed304b4621d79a5b76187859f7a605b1c35b8f66f40506c9f76b22d9b6cc937fdc43eacc1d5142387dc516aedb9cf54d9811ad5ae328c818f2840ffc6546906e4fdfc28f800eb6ee64d5ecaf50c1f0d87382f92f3f5042a2dce8a23410dc89887df531d63bb5f28360fe4639a58cab3a7bf3589103f2a2481ab88d4664e77f0e7b17c31e3c2edfe875db14f849bcfc031035dda0c97382c8b36034e5c767a6cae7571058b7df04a599a1d91017a35a5a43afce8f595eeb27c4ad174af861a33973cc30235d02074e7270a3ceefb6c26b2e82e4e212423b89c54085dd7b16c364fc397b78abd354f49e492d25ea9a9ab5f755e71d8674e00c518262da7f8278e4da40c9c0d57d093f2365b6fe01c5e08e6ffa23021d98a42b5d68d67dfca2d7e84e3c46709651e947032c001d4f7a75bd481be83279b75c859d995a306e3360b154cdd4ca9e54d74d187d3fa54683b69a258a246a0ffcf965dfeb27133c69b1cff96a0026db84341d59431421424ae3b01ee8511a2b2dda523d5dbfa6cd3d94a2027a804d2e4629c97d54c9f8f6439f4656178931797761e5a3629b16fa107bbe25a083cfc98ae40f9fdcfd1fef12a30601fde3dadf722f10dde1f3d80fc3238e2f1f941cf9650c04e5b78af9266923ed6ea14fb64a9f084f779699ca652bb4eb36ef5c13cc1b7d71f49bc521bb9df0dd68864519a419068a650d67aa54f5c89374a1e63d17346050fcc5755134890310df3c2fb5b77eac6c5b7d73a04922cc6f5753b1878d8e4502f6fbbc3ff9a138de5cfa486f95eebd6f78e30daa95783ca4b6de04fea5c22003286171cbf1574eeecb822d185e79da907f5f91f79176e3a3ca70d04642a9586f7e58451eba421b752a88d1f42ce24d2c887b1dcbeed6cac0f409b56f6b6e655718540b9a42c28a2cb3b0d46475f75e1c4d8c502f3e86b2ef2518a60a402f66c5bb9012ebd8ebe9ef401ecfc2200b2cc1f841100efc799b21fc33d41e90d1f68f0e231a9865bafe9e8287b1980e9bad26bd73feefe1a5789e0431bf8be429877d2a8c8ee386612fc420149025864fe430d129808c896167d83478dffcf8a9bfa02b3f1d7f4daf500c434330409b025b24fd140f6eb2d8c377dc0f5f8cb7bfcc1edcfe4b63570b8efbf23b36c3cac8170b437bd83756bd053518d773f343e9e35bb9a509f8442f2d34fa9dfc8b7286cf72858a3bf04d6a3c282e9542029668b8fdf5365d92bd7104539eee73eedfe6d5b5d854d541c1912b69b171f967461529515989996c46649312dbdc3b2e26c8f302f172847acea374dffa887a73b84c4576998d3297b3f521d7794a83b607399546b1e3a34f5589bae3594044ab46552986040d635359df29ba0a4e4dff4b6a2433eccecae8d5f95c001903d4dfde37642b7a866bf43381ebcfb68e633903450f2be0c5a289f302205464a4e459af6b5f840ccf48709f2c6869d51852be6f27b99c811e172c42713d7f2cd75f29a5a70741dc870e35d7d5c531182cc5a92bc00e43b476c8b18e0bf7c4eb4e4e03df47390ca6089d94d4479a6ebc5df1180d4974486921505dee0dc2a2d5e1db13c0d3d6cc37fbdb6f7a517a1b655d4af98142d4137b69d7a6b489e15ba74f75007d24e9cbb19494cee3fa6f8764f9e08f560385a23566332ee482084af1e0dae1f147cc1b64623e76d21c91406127a0d8ec93dcc5d62a85c40d9699eb484a90c55f60a8139ef6015d9270ffe56b2b35718e9481b10222d85229239f1ec3bfbdb96db1c13c87f8690daa602610b0ee6749d73c53b2b8cbb6aa7be57011e85c99a3696a0bcabbf3b17a74ddf1607334660465dc2c57c51ddd44e93a4e649ca936e28f65b7c8c09cb77ce74010c006dd6f6ec553cec4b4da77efdb5074ca63d8b8aad3b33e39d043594f12bed018d87b74d553c3780b35279426f63c20cfe69b59e9c1cce99f8886a09d0c3e1906e6052176161cf8d4e047698e483dc9572ac4ea02b94d60b111c7cc2fb24385d396dd133fc9942f2c478acbeb8ce930875fd8ed2479395f3e483e5f775e12b603e8ed6c4d68c0b951a6a0528ce00e45c0d5a32a3640a590d1fc33bd423611e937d9bc3870ac351680687338c3efbddab05665927c86b8e6da3a9c8e1fb6bd357bfbffeee48261b3b2af0c7337b11e4020982a611f951db3ed40ea63699f9cbcea5b6b13a1dcfeb0bdae5f4206042fc04ba1b8e0ad598e6331652970362413f458b2eaa9824cb498a4978a848d76444129c3dbbc4ea62a7e494b20ceaa70c61f2a59c611bbf0e3df1fff72cc4d51331235bcbcd52340b24785da7e9734535ea5f5e83959c9117b696bbe9fb3e20e4abe45dd452fc71e1d5dd45bee7c41640d6fe284f06e16c2c8911527da785b3baa077021e5e1f28703a1d634e41ea0322757ece550f0fb6eed82c85f989b4d8421b58ce5c3002c203f8cf04d820fcdde5b29aa1e209dab7814b80b3bd4da71cc176d90864ebcb6949600c715fd411bbd5e453faa37f5e8800c5b1b416ecb73a2bf07275bd6e0df2b4e7d1815ee824554425fa14838034eb372e28917c5ae71ff39870534ec31720185124eb4b0bdd47703142c76d7296f42db4065533e7b9a5ac431b81770a417330ef1209c00982fee9c54f1172a24948afadc361401ca4a8fe0d70787f26a7a26fcae9b12b0ed412b4393866a23c13a006d0a0da2b8c2806ea1c2429f1e1be92ec9432a07761c9a231f0ac5224db4f41aede212aed3dd5891d8d8d3ba3c9b41ca0001615981298b190cc2e0ec95ba34b6000ed6fdc90a14dc52f63d873f3ab1c7588d0a4fff36a88c9d279b91063a164818136d37b711580ba7b3546f082357f9d9c5cad207038db551ea036e998e864ac4c24751e0e8cd04ede6a417985c6e21e04aa359a0e6298658c2f014c72349a0e4a024b8687a62539a023545736f43f34344dfbdd408e483e97061c16d5cdea718067bc1ed73ac9252b46b920953b02728b67b01e15d3157903f2cb706542679e7c1a12c1037494e2ebdec1c794abab13ee71d21776a6ae74cca32739a934679d6ba5cfb54b7f270ec8f353e4ad01bc9639e6f3613efe79363fa752c49a1689dc76ddab48b0392df6448cea0df9b5a1e99362d327d7d4e1eb002319accf88b25a91f00d425ce7abe2c417f9dc1b9fbe7fd85e95495fe5d728248de76e1084b2c31c34caa03e245f24ae305e1c1cd5934a6ed6e5cb4f875657a8a3745dd1fe51f8aefeda44b633f37bcc10ce94f8c1589eb9af72c6f811bf55bd9ccf40893ca5ca4a9a93cf5ee6a4a3be5a7b414f444882dd5eea7c83558be7c452155e31ee858ac4f7fb39846d4fbf079f7af7d23f174a8df1b780308300bd7925ea287f1d4bc8243f7e9cc55fff05fb79b0298e68075f6ffd68fae558c8cadd005251fc7fd2c94c8fee3d0e86aa36e51ff1fa40d95cc8c246e0cb8292ef58518060c67b912f60ac9f2adb1ad49abc51b12e5d060d4778ee80adb4dbaf22f33565ff8c5732654fbd04a2ffdc80d2ef6b88a2304471e88d34531b1c167fabe52b2aca35ffcba68f10b27a117156cff35c4e8fd92ca3615705bcac2c69e0664fc0f055295b6e84616b89c42390c8a4e3d4e4474e01feae621ec486ecdd67c4bfa9daea1a384421597c298c136845d6eeb99610b2fb95b22e9aef8a9729d7a0872d777aeee2b3d5d9b9a0ca5b820400071d1b42a793a17c11e762286b726fb25e6f4e8903e036eb537f031fc61d10d1df27ba9f7fef613b406269d98cff6db58b350cb6226e18664161bb83e0911a9268fe215789462ba41707386d3ebb56c5313cf126d7b82b5add207e65b7f65bb81a9f0ab0f6017e13bac85cbd40be305d9eaf1d3183af7d9bc3830141a12960820ec2072d8437f25643b19f1c29a68af5af9292b24b74ac0f4422f408668b3d7e64d87f1f6737ac61e0761413b91ffa9d0f9aaf1319ffa68fd824b1056c6587d6baccab0e4eef0d5817c44eb19bf872b3a516ee8116c6c44940622c06e3d4895a98c7a3b6f5b9e6b409b81172dbf94f6e0b6ca1042137ae68ce53558fc8cb790c4eb77b8387c4860e34a0af6c19d2e86bb8aa91692495f5aa2b10b1a6ee9f65db8e7f2dd371d548d5a502e1ca17d7cc669f7be70b28ac852b75db06293863a41173d5b04e0576a69b43a04c2807462cf256cb038f9977cbb6691ef271e1abfb15ccd0a7f90916cf75e8ded7fe964af7192130892330034d3647ea46f98290bd4659086f46bfeba6dd0bc0fbfc3709f22b6f1f24591a041abb92c3afcc1ab040b1eabf948d0324d174d19b03bf9b096a95cff539358b08670d0e7f90ff3e8daaa6fec0c90c2927471f7e58c265e11b888b0c10cc375581444d052c773e9e2cdb621f3db92ec588af417d937d382d53706e75c381d9a6b15065c4bc3222e432c942ba49fc8a30d4a9056e8aff71f9a931b8dd4f1ca4eee648e769ce64c30ce277cc309cf1df6b134457b8efa7ae84566415856959480bc5f6a251de8f05325dbeab20358ca9f6ce5eb3b66565ad4310143b3eeb509f30c94c7044f47a97ba0b46341f720da", 0x1000}], 0x8, &(0x7f0000002700)=ANY=[@ANYBLOB="20000000000000000100000001000000a428b6dfcccbc9929e05efcb17563d652a664216de8464be5ebefc23d9971e5c507b7c422c87db88806083507a7ce0cca70eb685954ceae2a8ceae0286a1e72e06d3ccfc9c9b0c9b53e7173093542726a4986e6c0d90699b7e6c2a7656b8af7fc8ee56", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x4040014}, 0xc003)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:26:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 46)

03:26:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:26:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 48)

03:26:55 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2871.478888] loop3: detected capacity change from 0 to 40
[ 2871.479717] loop7: detected capacity change from 0 to 40
[ 2871.485955] loop4: detected capacity change from 0 to 40
[ 2871.488419] loop6: detected capacity change from 0 to 40
[ 2871.508892] FAULT_INJECTION: forcing a failure.
[ 2871.508892] name failslab, interval 1, probability 0, space 0, times 0
[ 2871.510900] CPU: 1 PID: 12182 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2871.511986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2871.513096] Call Trace:
[ 2871.513454]  <TASK>
[ 2871.513773]  dump_stack_lvl+0xc1/0xf0
[ 2871.514338]  should_fail_ex+0x4b4/0x5b0
[ 2871.514906]  ? __es_insert_extent+0xed1/0x1370
[ 2871.515549]  should_failslab+0x9/0x20
[ 2871.516084]  kmem_cache_alloc+0x61/0x390
[ 2871.516655]  ? __pfx___es_remove_extent+0x10/0x10
[ 2871.517361]  __es_insert_extent+0xed1/0x1370
[ 2871.518019]  ext4_es_insert_extent+0x2b4/0xc50
[ 2871.518683]  ? __pfx_ext4_es_insert_extent+0x10/0x10
[ 2871.519425]  ? percpu_counter_add_batch+0xc8/0x180
[ 2871.520127]  ? do_raw_read_unlock+0x44/0xe0
[ 2871.520752]  ? ext4_es_lookup_extent+0xc8/0xad0
[ 2871.521462]  ? kmem_cache_alloc+0x21f/0x390
[ 2871.522093]  ext4_map_blocks+0x9fa/0x1970
[ 2871.522721]  ? __pfx_ext4_map_blocks+0x10/0x10
[ 2871.523439]  ext4_do_writepages+0x1817/0x3150
[ 2871.524122]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2871.524845]  ? lock_is_held_type+0x9f/0x120
[ 2871.525501]  ext4_writepages+0x2fc/0x760
[ 2871.526088]  ? __pfx_ext4_writepages+0x10/0x10
[ 2871.526755]  ? do_writepages+0x50d/0x650
[ 2871.527391]  ? __pfx_ext4_writepages+0x10/0x10
[ 2871.528050]  do_writepages+0x1ad/0x650
[ 2871.528631]  ? __pfx_do_writepages+0x10/0x10
[ 2871.529281]  ? do_raw_spin_lock+0x125/0x270
[ 2871.529924]  ? do_raw_spin_unlock+0x53/0x220
[ 2871.530575]  ? _raw_spin_unlock+0x1e/0x40
[ 2871.531178]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2871.531938]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2871.532624]  __filemap_fdatawrite_range+0xba/0x100
[ 2871.533363]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2871.534156]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2871.534846]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2871.535552]  ? lock_release+0x1e3/0x680
[ 2871.536146]  file_write_and_wait_range+0xd2/0x140
[ 2871.536855]  ext4_sync_file+0x25a/0xde0
[ 2871.537442]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2871.538091]  vfs_fsync_range+0x147/0x240
[ 2871.538687]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2871.539373]  ? iter_file_splice_write+0x162/0xcb0
[ 2871.540064]  ext4_file_write_iter+0x36d/0x19b0
[ 2871.540731]  ? iter_file_splice_write+0x162/0xcb0
[ 2871.541437]  ? kasan_save_stack+0x32/0x50
[ 2871.542047]  ? kasan_save_stack+0x22/0x50
[ 2871.542661]  ? kasan_set_track+0x25/0x30
[ 2871.543256]  ? __kasan_kmalloc+0x7f/0x90
[ 2871.543851]  ? __kmalloc+0x5d/0x160
[ 2871.544384]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2871.545096]  ? do_splice_direct+0x1bb/0x290
[ 2871.545735]  ? do_sendfile+0xb67/0x1300
[ 2871.546307]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2871.546974]  ? do_syscall_64+0x3f/0x90
[ 2871.547551]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2871.548303]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2871.548988]  ? lock_is_held_type+0x9f/0x120
[ 2871.549628]  do_iter_readv_writev+0x217/0x3c0
[ 2871.550276]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2871.550982]  ? avc_policy_seqno+0x9/0x20
[ 2871.551579]  ? security_file_permission+0xb5/0xe0
[ 2871.552284]  do_iter_write+0x186/0x820
[ 2871.552829]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2871.553519]  ? iter_file_splice_write+0x162/0xcb0
[ 2871.554183]  ? kasan_set_track+0x25/0x30
[ 2871.554766]  vfs_iter_write+0x7a/0xb0
[ 2871.555303]  iter_file_splice_write+0x737/0xcb0
[ 2871.555970]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2871.556673]  ? __pfx_copy_splice_read+0x10/0x10
[ 2871.557351]  ? inode_security+0x105/0x140
[ 2871.557945]  ? security_file_permission+0xb5/0xe0
[ 2871.558631]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2871.559328]  direct_splice_actor+0x119/0x180
[ 2871.559968]  splice_direct_to_actor+0x349/0x9d0
[ 2871.560633]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2871.561363]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2871.562099]  ? security_file_permission+0xb5/0xe0
[ 2871.562809]  do_splice_direct+0x1bb/0x290
[ 2871.563421]  ? __pfx_do_splice_direct+0x10/0x10
[ 2871.564103]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2871.564847]  ? lock_is_held_type+0x9f/0x120
[ 2871.565494]  do_sendfile+0xb67/0x1300
[ 2871.566061]  ? __pfx_do_sendfile+0x10/0x10
[ 2871.566680]  __x64_sys_sendfile64+0x1d5/0x210
[ 2871.567321]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2871.568040]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2871.568788]  do_syscall_64+0x3f/0x90
[ 2871.569371]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2871.570081] RIP: 0033:0x7fa51deffb19
[ 2871.570601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2871.573007] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2871.574035] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2871.575011] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2871.575963] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2871.576930] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2871.577921] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2871.578915]  </TASK>
[ 2871.606793] syz-executor.6: attempt to access beyond end of device
[ 2871.606793] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2871.607707] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:26:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x80000000, 0x9, &(0x7f0000000700)=[{&(0x7f00000001c0)="de9ffb736f7795f65565dec7dc3feec1910fe079c05b132ce807e7dd933754f24e", 0x21, 0x1}, {&(0x7f0000000240)="208c3f543985b744ea45e6566aec7af678a69121889ead4fd654c2ef77395488a0ed84e29f41ecc3e2c696096a8ce653e0b56ae1713639ed38e59bee5bd18a", 0x3f, 0x101}, {&(0x7f0000000280)="8a507cb0948f7260f11c58c9174b2a33def713a0ab75d2b30336ba758f6bd2a2ebbe27bcc3c5fd89e59104369859c1561ce96c229a0785791a84004aadc47548f4c52ed53a2f85a63a27c208e9f5330c0dec8cf5c56c0677db3938a17d577e08a1f2030e9feea0f4f4224bcc47e225f7e5", 0x71, 0x20000000000000}, {&(0x7f0000000300)="b37f44a3423c184842fe5e1bb6474b41fe9dcf2b31104c3a1462395c9ffc661251064e8d8782", 0x26, 0x7}, {&(0x7f0000000340)="9e5b35338ad39178185c7196b9fe75b6b32050d68e659ff508eaeb8f743d50a0b01b567840a738346114346a429ad5df7a586d0814604eb652200fe1c3bef20c53c0b49802ff7ab7f1fea4d828ba40e9df654ac8255f07dc2755693e2472b759fb04f06fc526023a5998d0dff9aa6aa89c4477847d9aef4762eb7160f3e2a19519401b0ca158d9610c6b18cc0958d722", 0x90, 0x80000000}, {&(0x7f0000000400)="d5a51413e73ccd2aa1d064cc157757134de391452b7894b00c7c3ea18d4db492cb0a10668de4c856f3587c642959dfff6824427e8b80bb4802aaa7ad9e717772e1c882c4cd651a17425f2c864b4140de48b43a76367490cb8c98e6960b3b39c179e8", 0x62, 0x1}, {&(0x7f0000000480)="e6db3f5dee90e34229841831c3853fc351ca28e1bebba6460e8801b111ad4e1c57ad9fb1272ff561744d8ab2ec2ac692bdbeafc131eb1acc796f15afaa0a385587ed5ad00f6f94f11b82503a53e861b89f7b7542ee3b4800de1d9884cd6cd2e64c285c5db4f92b091f01fa32b2f67a874344a84ade47249e7e2649e625602142d5980d1b483e1db6ad60d72c362a3506c4feabe3449c44d3022236963e2b028dc6a405ce2e804847709470e4", 0xac, 0xc61}, {&(0x7f0000000540)="e163c99425d49ed986cc644655ecb7819389dfaabbdb5f97cb8dadcd0bcffbfccabe90e106448809a1d907e03f0760c7945b4dea1dcb53de349b42a9da4ac08934a4778a75a5bc1acbf34fa1cf8c3f4846ae06de7ded92278e90e4885997dbf731d546382307d1b779610e1e110a07b5a0813c2eea94276cdd75cfd6f243f364473ea472aba669337607905b8ddbf2423854e0dca8724ea6714ba78e3be8579105d75e0e2899cbf24497eb294e06ba0797b997981c0d3a818c22bcdb8dfb52bce31698933f4bd26212d00084ece07e405c5908c1c11fc59fb98e4beaf85bd29a5f2d97701eca3989", 0xe8, 0x40}, {&(0x7f0000000640)="e8ab2adc767f1d904c56eb040cab56d6b2859506273e6c5a49dadff8b6e5e081b243c33f907d3a1dfd51e2e044331a6c04ead28c5d7179d7e7994f26e4310768e28a9a39de666065646c9ed5d317c29d3a6f61d15a997e8005ff0ebf51a2d3d71735bdb5ed3a6c264731f02e1d41d11450be6c6b61b5e91ae60d48b1b276db5f5618c4c3a4c219ba2409bcbd83827997690401fb4fae3eae3da156", 0x9b}], 0x0, &(0x7f0000000800)={[{@uni_xlate}], [{@dont_appraise}, {@appraise_type}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '$)('}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@uid_lt={'uid<', r0}}]})
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0))
ioctl$FITHAW(r2, 0xc0045878)
unlink(&(0x7f0000000180)='./file1\x00')

03:26:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 49)

03:26:55 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000240)={'U+', 0x7fd5988b}, 0x16, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x334400, 0x4)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:26:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 47)

[ 2871.730824] loop7: detected capacity change from 0 to 40
03:26:55 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x218d42, 0x2)

[ 2871.766092] loop6: detected capacity change from 0 to 40
[ 2871.771031] loop4: detected capacity change from 0 to 40
[ 2871.810315] FAULT_INJECTION: forcing a failure.
[ 2871.810315] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2871.811177] CPU: 0 PID: 12210 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2871.811736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2871.812291] Call Trace:
[ 2871.812482]  <TASK>
[ 2871.812652]  dump_stack_lvl+0xc1/0xf0
[ 2871.812942]  should_fail_ex+0x4b4/0x5b0
[ 2871.813254]  __should_fail_alloc_page+0xe0/0x110
[ 2871.813611]  prepare_alloc_pages+0x178/0x500
[ 2871.813936]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2871.814280]  __alloc_pages+0x149/0x480
[ 2871.814567]  ? lock_acquire+0x19a/0x4c0
[ 2871.814855]  ? __pfx___alloc_pages+0x10/0x10
[ 2871.815184]  ? lock_release+0x1e3/0x680
[ 2871.815504]  alloc_pages+0x1a0/0x260
[ 2871.815788]  filemap_alloc_folio+0x389/0x430
[ 2871.816118]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2871.816478]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2871.816806]  ? find_held_lock+0x2c/0x110
[ 2871.817137]  __filemap_get_folio+0x285/0x8d0
[ 2871.817459]  ? folio_memcg_unlock+0xbd/0x240
[ 2871.817779]  pagecache_get_page+0x2e/0x120
[ 2871.818087]  ? __pfx_fat_get_block+0x10/0x10
[ 2871.818405]  block_write_begin+0x35/0x450
[ 2871.818709]  cont_write_begin+0x4fe/0x700
[ 2871.819011]  ? __block_commit_write+0x214/0x260
[ 2871.819359]  ? __pfx_fat_get_block+0x10/0x10
[ 2871.819676]  ? __pfx_cont_write_begin+0x10/0x10
[ 2871.820010]  ? __mark_inode_dirty+0x249/0xc10
[ 2871.820342]  ? generic_write_end+0x1fe/0x3d0
[ 2871.820685]  fat_write_begin+0x89/0x180
[ 2871.820993]  ? __pfx_fat_get_block+0x10/0x10
[ 2871.821339]  generic_perform_write+0x26f/0x5e0
[ 2871.821713]  ? __pfx_generic_perform_write+0x10/0x10
[ 2871.822089]  ? __pfx_fat_update_time+0x10/0x10
[ 2871.822434]  ? __pfx_file_update_time+0x10/0x10
[ 2871.822786]  ? __pfx_generic_write_checks+0x10/0x10
[ 2871.823166]  ? direct_splice_actor+0x119/0x180
[ 2871.823530]  __generic_file_write_iter+0x160/0x1a0
[ 2871.823896]  generic_file_write_iter+0xe7/0x350
[ 2871.824249]  do_iter_readv_writev+0x217/0x3c0
[ 2871.824606]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2871.825003]  ? avc_policy_seqno+0x9/0x20
[ 2871.825333]  ? security_file_permission+0xb5/0xe0
[ 2871.825719]  do_iter_write+0x186/0x820
[ 2871.826023]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2871.826396]  ? iter_file_splice_write+0x162/0xcb0
[ 2871.826763]  ? kasan_set_track+0x25/0x30
[ 2871.827082]  vfs_iter_write+0x7a/0xb0
[ 2871.827378]  iter_file_splice_write+0x737/0xcb0
[ 2871.827745]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2871.828131]  ? __pfx_copy_splice_read+0x10/0x10
[ 2871.828492]  ? inode_security+0x105/0x140
[ 2871.828824]  ? security_file_permission+0xb5/0xe0
[ 2871.829188]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2871.829574]  direct_splice_actor+0x119/0x180
[ 2871.829922]  splice_direct_to_actor+0x349/0x9d0
[ 2871.830293]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2871.830692]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2871.831092]  ? security_file_permission+0xb5/0xe0
[ 2871.831478]  do_splice_direct+0x1bb/0x290
[ 2871.831803]  ? __pfx_do_splice_direct+0x10/0x10
[ 2871.832167]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2871.832576]  ? lock_is_held_type+0x9f/0x120
[ 2871.832923]  do_sendfile+0xb67/0x1300
[ 2871.833237]  ? __pfx_do_sendfile+0x10/0x10
[ 2871.833574]  __x64_sys_sendfile64+0x1d5/0x210
[ 2871.833923]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2871.834311]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2871.834691]  do_syscall_64+0x3f/0x90
[ 2871.834991]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2871.835365] RIP: 0033:0x7fc1c5d62b19
[ 2871.835652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2871.836912] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2871.837457] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2871.837958] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2871.838456] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2871.838963] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2871.839465] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2871.840001]  </TASK>
[ 2871.865978] loop3: detected capacity change from 0 to 40
[ 2871.866422] syz-executor.6: attempt to access beyond end of device
[ 2871.866422] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2871.868264] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:26:55 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 50)

03:26:55 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 39)

[ 2871.941787] FAULT_INJECTION: forcing a failure.
[ 2871.941787] name failslab, interval 1, probability 0, space 0, times 0
[ 2871.942660] CPU: 0 PID: 12217 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2871.943217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2871.943786] Call Trace:
[ 2871.943982]  <TASK>
[ 2871.944155]  dump_stack_lvl+0xc1/0xf0
[ 2871.944451]  should_fail_ex+0x4b4/0x5b0
[ 2871.944753]  ? iter_file_splice_write+0x162/0xcb0
[ 2871.945113]  should_failslab+0x9/0x20
[ 2871.945394]  __kmem_cache_alloc_node+0x66/0x310
[ 2871.945737]  ? mark_held_locks+0x9e/0xe0
[ 2871.946038]  ? iter_file_splice_write+0x162/0xcb0
[ 2871.946392]  ? iter_file_splice_write+0x162/0xcb0
[ 2871.946742]  __kmalloc+0x4d/0x160
[ 2871.947011]  iter_file_splice_write+0x162/0xcb0
[ 2871.947356]  ? __kmem_cache_free+0xe1/0x330
[ 2871.947685]  ? copy_splice_read+0x65b/0x900
[ 2871.948021]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2871.948382]  ? __pfx_copy_splice_read+0x10/0x10
[ 2871.948743]  ? inode_security+0x105/0x140
[ 2871.949094]  ? security_file_permission+0xb5/0xe0
[ 2871.949459]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2871.949824]  direct_splice_actor+0x119/0x180
[ 2871.950156]  splice_direct_to_actor+0x349/0x9d0
[ 2871.950502]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2871.950872]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2871.951253]  ? security_file_permission+0xb5/0xe0
[ 2871.951620]  do_splice_direct+0x1bb/0x290
[ 2871.951948]  ? __pfx_do_splice_direct+0x10/0x10
[ 2871.952321]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2871.952732]  ? lock_is_held_type+0x9f/0x120
[ 2871.953090]  do_sendfile+0xb67/0x1300
[ 2871.953399]  ? __pfx_do_sendfile+0x10/0x10
[ 2871.953749]  __x64_sys_sendfile64+0x1d5/0x210
[ 2871.954108]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2871.954496]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2871.954906]  do_syscall_64+0x3f/0x90
[ 2871.955200]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2871.955603] RIP: 0033:0x7f435bfddb19
[ 2871.955880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2871.957192] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2871.957755] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2871.958280] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2871.958794] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2871.959323] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2871.959838] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2871.960397]  </TASK>
[ 2871.985688] syz-executor.4: attempt to access beyond end of device
[ 2871.985688] loop4: rw=2049, sector=44, nr_sectors = 8 limit=40
03:26:55 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00')
write$9p(r0, &(0x7f0000000240)="91efca371aae2461dd93405b7d942ff9284a01c926b368f5099cb6ecd6a82ff99364274f9447414df2bd3d8abb16778d07a6eb4a2d5064fb4ad983648cfce8c626bf8a5516c418ab80a731da866dcab0f1f1259a", 0x54)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2872.075368] loop3: detected capacity change from 0 to 40
[ 2884.258898] loop4: detected capacity change from 0 to 40
03:27:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 51)

03:27:08 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:27:08 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)

03:27:08 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 40)

03:27:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 48)

03:27:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000001c0)='system_u:object_r:system_cron_spool_t:s0\x00', 0x29, 0x2)
unlink(&(0x7f0000000180)='./file1\x00')
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000240)=0x2)

[ 2884.276366] loop6: detected capacity change from 0 to 40
03:27:08 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1000000000000000)

03:27:08 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2884.284726] FAT-fs (loop6): Unrecognized mount option "0000000000000000000000300000000000000000000005" or missing value
[ 2884.291101] loop3: detected capacity change from 0 to 40
[ 2884.319311] loop7: detected capacity change from 0 to 40
03:27:08 executing program 3:
r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x202200, 0x0)
fcntl$addseals(r0, 0x409, 0xf)
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(r1, &(0x7f0000000000)='./file1\x00', 0x22040, 0x144)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:27:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 49)

03:27:08 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 41)

[ 2884.446560] loop3: detected capacity change from 0 to 40
[ 2884.478586] loop4: detected capacity change from 0 to 40
03:27:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 52)

[ 2884.542833] loop7: detected capacity change from 0 to 40
03:27:08 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
utime(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x7, 0x1ff})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000001c0)=@v3={0x3000000, [{0x24000000, 0x9}, {0xfffffffe, 0x5}], r0}, 0x18, 0x1)

03:27:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 50)

[ 2884.752752] loop3: detected capacity change from 0 to 40
03:27:08 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 42)

03:27:08 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 53)

[ 2884.896887] loop4: detected capacity change from 0 to 40
[ 2884.911524] loop7: detected capacity change from 0 to 40
[ 2885.183112] loop6: detected capacity change from 0 to 40
[ 2885.188662] FAT-fs (loop6): Unrecognized mount option "0000000000000000000000300000000000000000000005" or missing value
03:27:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 51)

03:27:21 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 43)

03:27:21 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_batadv\x00', {0x3f}, 0x7})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:27:21 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x1100000000000000)

03:27:21 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:27:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 54)

03:27:21 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:27:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x1d4f, 0x3, &(0x7f0000000340)=[{&(0x7f0000000240)="4ae2654da5fc1e58b24dea022067c4bc0e2afdb272c7866864f01d097900cf6c870955b4a0e111751f2b", 0x2a, 0x7}, {&(0x7f0000000280)="f012111d6cda86d8087a90485dceb3006c5cb5f79c687a510ee4f82839a67b19e5f48c30d5ca02f169b2f4cfe1143e22b691f13756689f2799eab2f5bb355cdb9ba54e1e2b919c0875f8f39b1dcda1685531d26aaca9b9e0cfb6d1", 0x5b, 0x1ff}, {&(0x7f0000000300)="c59ffeb3bc623393de5ac30692bf085e251a9c5e8056f5d8d82ce0e749e552daac53917fb039", 0x26, 0x4d1b}], 0x800400, &(0x7f00000003c0)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}], [{@euid_eq={'euid', 0x3d, r1}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x69}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r3, &(0x7f0000000040)='./file2\x00', 0x220800, 0x80)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
openat(r2, &(0x7f0000000400)='./file2\x00', 0x430500, 0x94)
sendfile(r2, r0, 0x0, 0xfffffdef)

[ 2897.477913] loop4: detected capacity change from 0 to 40
[ 2897.502459] loop6: detected capacity change from 0 to 40
[ 2897.512649] loop7: detected capacity change from 0 to 40
[ 2897.549840] FAULT_INJECTION: forcing a failure.
[ 2897.549840] name failslab, interval 1, probability 0, space 0, times 0
[ 2897.550919] CPU: 0 PID: 12290 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2897.551585] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2897.552155] Call Trace:
[ 2897.552345]  <TASK>
[ 2897.552518]  dump_stack_lvl+0xc1/0xf0
[ 2897.552815]  should_fail_ex+0x4b4/0x5b0
[ 2897.553120]  ? copy_splice_read+0x15b/0x900
[ 2897.553457]  should_failslab+0x9/0x20
[ 2897.553739]  __kmem_cache_alloc_node+0x66/0x310
[ 2897.554082]  ? copy_splice_read+0x15b/0x900
[ 2897.554401]  ? __kmem_cache_free+0xe1/0x330
[ 2897.554718]  ? copy_splice_read+0x15b/0x900
[ 2897.555036]  __kmalloc+0x4d/0x160
[ 2897.555296]  copy_splice_read+0x15b/0x900
[ 2897.555612]  ? lock_is_held_type+0x9f/0x120
[ 2897.555950]  ? __pfx_copy_splice_read+0x10/0x10
[ 2897.556303]  ? inode_security+0x105/0x140
[ 2897.556611]  ? fsnotify_perm.part.0+0x248/0x680
[ 2897.556959]  ? security_file_permission+0xb5/0xe0
[ 2897.557340]  ? __pfx_copy_splice_read+0x10/0x10
[ 2897.557690]  vfs_splice_read+0x238/0x2d0
[ 2897.558001]  splice_direct_to_actor+0x2aa/0x9d0
[ 2897.558359]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2897.558732]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2897.559115]  ? security_file_permission+0xb5/0xe0
[ 2897.559488]  do_splice_direct+0x1bb/0x290
[ 2897.559809]  ? __pfx_do_splice_direct+0x10/0x10
[ 2897.560160]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2897.560547]  ? lock_is_held_type+0x9f/0x120
[ 2897.560874]  do_sendfile+0xb67/0x1300
[ 2897.561178]  ? __pfx_do_sendfile+0x10/0x10
[ 2897.561526]  __x64_sys_sendfile64+0x1d5/0x210
[ 2897.561856]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2897.562220]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2897.562599]  do_syscall_64+0x3f/0x90
[ 2897.562881]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2897.563249] RIP: 0033:0x7f435bfddb19
[ 2897.563509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2897.564704] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2897.565226] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2897.565727] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2897.566208] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2897.566691] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2897.567175] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2897.567683]  </TASK>
[ 2897.579535] loop3: detected capacity change from 0 to 40
[ 2897.615451] syz-executor.6: attempt to access beyond end of device
[ 2897.615451] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2897.617194] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:27:21 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 44)

[ 2897.641894] syz-executor.6: attempt to access beyond end of device
[ 2897.641894] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2897.643445] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:27:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 52)

[ 2897.705878] loop4: detected capacity change from 0 to 40
[ 2897.764754] FAULT_INJECTION: forcing a failure.
[ 2897.764754] name failslab, interval 1, probability 0, space 0, times 0
[ 2897.766303] CPU: 1 PID: 12302 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2897.767321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2897.768326] Call Trace:
[ 2897.768663]  <TASK>
[ 2897.768962]  dump_stack_lvl+0xc1/0xf0
[ 2897.769511]  should_fail_ex+0x4b4/0x5b0
[ 2897.770040]  ? copy_splice_read+0x15b/0x900
[ 2897.770610]  should_failslab+0x9/0x20
[ 2897.771102]  __kmem_cache_alloc_node+0x66/0x310
[ 2897.771717]  ? copy_splice_read+0x15b/0x900
[ 2897.772295]  ? copy_splice_read+0x15b/0x900
[ 2897.772864]  __kmalloc+0x4d/0x160
[ 2897.773331]  copy_splice_read+0x15b/0x900
[ 2897.773890]  ? lock_is_held_type+0x9f/0x120
[ 2897.774474]  ? __pfx_copy_splice_read+0x10/0x10
[ 2897.775090]  ? __cond_resched+0x46/0x70
[ 2897.775621]  ? inode_security+0x105/0x140
[ 2897.776162]  ? fsnotify_perm.part.0+0x248/0x680
[ 2897.776770]  ? security_file_permission+0xb5/0xe0
[ 2897.777416]  ? __pfx_copy_splice_read+0x10/0x10
[ 2897.778034]  vfs_splice_read+0x238/0x2d0
[ 2897.778580]  splice_direct_to_actor+0x2aa/0x9d0
[ 2897.779206]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2897.779855]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2897.780549]  ? security_file_permission+0xb5/0xe0
[ 2897.781197]  do_splice_direct+0x1bb/0x290
[ 2897.781770]  ? __pfx_do_splice_direct+0x10/0x10
[ 2897.782388]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2897.783072]  ? lock_is_held_type+0x9f/0x120
[ 2897.783645]  do_sendfile+0xb67/0x1300
[ 2897.784155]  ? __pfx_do_sendfile+0x10/0x10
[ 2897.784716]  __x64_sys_sendfile64+0x1d5/0x210
[ 2897.785319]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2897.785961]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2897.786643]  do_syscall_64+0x3f/0x90
[ 2897.787144]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2897.787804] RIP: 0033:0x7fa51deffb19
[ 2897.788279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2897.790494] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2897.791426] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2897.792295] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2897.793171] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2897.794061] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2897.794939] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2897.795837]  </TASK>
03:27:21 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40241, 0x57)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:27:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 53)

03:27:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 55)

03:27:21 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 45)

03:27:21 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2897.901466] loop7: detected capacity change from 0 to 40
[ 2897.932815] loop6: detected capacity change from 0 to 40
[ 2897.946930] loop3: detected capacity change from 0 to 40
[ 2898.010521] FAULT_INJECTION: forcing a failure.
[ 2898.010521] name failslab, interval 1, probability 0, space 0, times 0
[ 2898.011982] CPU: 1 PID: 12313 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2898.012997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2898.014017] Call Trace:
[ 2898.014355]  <TASK>
[ 2898.014656]  dump_stack_lvl+0xc1/0xf0
[ 2898.015173]  should_fail_ex+0x4b4/0x5b0
[ 2898.015701]  ? jbd2__journal_start+0x194/0x810
[ 2898.016305]  should_failslab+0x9/0x20
[ 2898.016797]  kmem_cache_alloc+0x61/0x390
[ 2898.017327]  ? lock_is_held_type+0x9f/0x120
[ 2898.017902]  jbd2__journal_start+0x194/0x810
[ 2898.018491]  __ext4_journal_start_sb+0x3d7/0x560
[ 2898.019095]  ? ext4_dirty_inode+0xa5/0x130
[ 2898.019643]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 2898.020239]  ext4_dirty_inode+0xa5/0x130
[ 2898.020772]  __mark_inode_dirty+0x1aa/0xc10
[ 2898.021394]  generic_write_end+0x319/0x3d0
[ 2898.021969]  ext4_da_write_end+0x1e4/0xb10
[ 2898.022540]  ? ext4_write_end+0x3d0/0xc30
[ 2898.023095]  generic_perform_write+0x333/0x5e0
[ 2898.023734]  ? __pfx_generic_perform_write+0x10/0x10
[ 2898.024411]  ? __pfx_file_modified_flags+0x10/0x10
[ 2898.025078]  ext4_buffered_write_iter+0x123/0x3d0
[ 2898.025715]  ? iter_file_splice_write+0x162/0xcb0
[ 2898.026362]  ext4_file_write_iter+0x36d/0x19b0
[ 2898.026981]  ? iter_file_splice_write+0x162/0xcb0
[ 2898.027593]  ? kasan_save_stack+0x32/0x50
[ 2898.028159]  ? kasan_save_stack+0x22/0x50
[ 2898.028726]  ? kasan_set_track+0x25/0x30
[ 2898.029280]  ? __kasan_kmalloc+0x7f/0x90
[ 2898.029855]  ? __kmalloc+0x5d/0x160
[ 2898.030345]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2898.031004]  ? do_splice_direct+0x1bb/0x290
[ 2898.031593]  ? do_sendfile+0xb67/0x1300
[ 2898.032121]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2898.032751]  ? do_syscall_64+0x3f/0x90
[ 2898.033289]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2898.033992]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2898.034607]  ? lock_is_held_type+0x9f/0x120
[ 2898.035199]  do_iter_readv_writev+0x217/0x3c0
[ 2898.035813]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2898.036484]  ? avc_policy_seqno+0x9/0x20
[ 2898.037044]  ? security_file_permission+0xb5/0xe0
[ 2898.037715]  do_iter_write+0x186/0x820
[ 2898.038229]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2898.038870]  ? iter_file_splice_write+0x162/0xcb0
[ 2898.039482]  ? kasan_set_track+0x25/0x30
[ 2898.040025]  vfs_iter_write+0x7a/0xb0
[ 2898.040527]  iter_file_splice_write+0x737/0xcb0
[ 2898.041150]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2898.041829]  ? __pfx_copy_splice_read+0x10/0x10
[ 2898.042468]  ? inode_security+0x105/0x140
[ 2898.043024]  ? security_file_permission+0xb5/0xe0
[ 2898.043669]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2898.044334]  direct_splice_actor+0x119/0x180
[ 2898.044934]  splice_direct_to_actor+0x349/0x9d0
[ 2898.045584]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2898.046247]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2898.046934]  ? security_file_permission+0xb5/0xe0
[ 2898.047588]  do_splice_direct+0x1bb/0x290
[ 2898.048144]  ? __pfx_do_splice_direct+0x10/0x10
[ 2898.048772]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2898.049486]  ? lock_is_held_type+0x9f/0x120
[ 2898.050070]  do_sendfile+0xb67/0x1300
[ 2898.050583]  ? __pfx_do_sendfile+0x10/0x10
[ 2898.051159]  __x64_sys_sendfile64+0x1d5/0x210
[ 2898.051754]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2898.052417]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2898.053088]  do_syscall_64+0x3f/0x90
[ 2898.053614]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2898.054254] RIP: 0033:0x7fc1c5d62b19
[ 2898.054734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2898.056943] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2898.057912] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2898.058810] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2898.059704] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2898.060598] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2898.061495] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2898.062417]  </TASK>
[ 2898.074099] syz-executor.6: attempt to access beyond end of device
[ 2898.074099] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2898.075687] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2898.093008] syz-executor.6: attempt to access beyond end of device
[ 2898.093008] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2898.094700] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:27:35 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 46)

03:27:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:27:35 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:27:35 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x100)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
mkdir(&(0x7f0000000180)='./file2\x00', 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040))
r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0))
sendfile(r4, r6, &(0x7f00000001c0)=0x7, 0x101)
sendfile(r3, r2, 0x0, 0xfffffdef)

[ 2911.869524] loop7: detected capacity change from 0 to 40
03:27:35 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 56)

[ 2911.912317] loop3: detected capacity change from 0 to 40
[ 2911.914770] loop4: detected capacity change from 0 to 40
03:27:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00')
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2911.922807] FAULT_INJECTION: forcing a failure.
[ 2911.922807] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2911.923707] CPU: 0 PID: 12332 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2911.924295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2911.924875] Call Trace:
[ 2911.925080]  <TASK>
[ 2911.925257]  dump_stack_lvl+0xc1/0xf0
[ 2911.925575]  should_fail_ex+0x4b4/0x5b0
[ 2911.925890]  __should_fail_alloc_page+0xe0/0x110
[ 2911.926283]  prepare_alloc_pages+0x178/0x500
[ 2911.926634]  __alloc_pages_bulk+0x156/0x10e0
[ 2911.926987]  ? asm_sysvec_call_function_single+0x1a/0x20
03:27:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 54)

03:27:35 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x2000000000000000)

[ 2911.927402]  ? mark_lock.part.0+0xef/0x2f50
[ 2911.927815]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2911.928205]  ? copy_splice_read+0x15b/0x900
[ 2911.928542]  ? kasan_set_track+0x25/0x30
[ 2911.928859]  ? __kasan_kmalloc+0x7f/0x90
[ 2911.929195]  copy_splice_read+0x190/0x900
[ 2911.929532]  ? lock_is_held_type+0x9f/0x120
[ 2911.929876]  ? __pfx_copy_splice_read+0x10/0x10
[ 2911.930244]  ? inode_security+0x105/0x140
[ 2911.930577]  ? fsnotify_perm.part.0+0x248/0x680
[ 2911.930945]  ? security_file_permission+0xb5/0xe0
[ 2911.931320]  ? __pfx_copy_splice_read+0x10/0x10
[ 2911.931690]  vfs_splice_read+0x238/0x2d0
[ 2911.932012]  splice_direct_to_actor+0x2aa/0x9d0
[ 2911.932389]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2911.932775]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2911.933173]  ? security_file_permission+0xb5/0xe0
[ 2911.933571]  do_splice_direct+0x1bb/0x290
[ 2911.933909]  ? __pfx_do_splice_direct+0x10/0x10
[ 2911.934288]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2911.934696]  ? lock_is_held_type+0x9f/0x120
[ 2911.935046]  do_sendfile+0xb67/0x1300
[ 2911.935358]  ? __pfx_do_sendfile+0x10/0x10
[ 2911.935709]  __x64_sys_sendfile64+0x1d5/0x210
[ 2911.936066]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2911.936462]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2911.936873]  do_syscall_64+0x3f/0x90
[ 2911.937187]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2911.937597] RIP: 0033:0x7fa51deffb19
[ 2911.937882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2911.939188] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2911.939762] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2911.940290] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2911.940815] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2911.941346] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2911.941888] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2911.942453]  </TASK>
[ 2911.943612] loop6: detected capacity change from 0 to 40
03:27:35 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 57)

03:27:35 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2912.024891] loop7: detected capacity change from 0 to 40
03:27:35 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x400, 0x1)
unlink(&(0x7f0000000180)='./file1\x00')

03:27:35 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 55)

[ 2912.052711] syz-executor.6: attempt to access beyond end of device
[ 2912.052711] loop6: rw=2049, sector=48, nr_sectors = 4 limit=40
[ 2912.053929] Buffer I/O error on dev loop6, logical block 12, lost async page write
03:27:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 47)

03:27:36 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 58)

[ 2912.130169] loop4: detected capacity change from 0 to 40
03:27:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2912.184681] loop7: detected capacity change from 0 to 40
03:27:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x64}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x2000000, [{0x4, 0x8}, {0x7, 0xfffffd8f}]}, 0x14, 0x3)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
recvmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000240), 0x6e, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/53, 0x35}], 0x1}, 0x40000041)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2912.207839] loop3: detected capacity change from 0 to 40
03:27:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 56)

[ 2912.322534] loop6: detected capacity change from 0 to 40
03:27:36 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 59)

[ 2912.429682] syz-executor.6: attempt to access beyond end of device
[ 2912.429682] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2912.432495] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2912.438651] loop4: detected capacity change from 0 to 40
[ 2912.489387] syz-executor.6: attempt to access beyond end of device
[ 2912.489387] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2912.490955] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2912.510560] FAULT_INJECTION: forcing a failure.
[ 2912.510560] name failslab, interval 1, probability 0, space 0, times 0
[ 2912.512004] CPU: 0 PID: 12366 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2912.513040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2912.514064] Call Trace:
[ 2912.514407]  <TASK>
[ 2912.514713]  dump_stack_lvl+0xc1/0xf0
[ 2912.515244]  should_fail_ex+0x4b4/0x5b0
[ 2912.515781]  ? __es_insert_extent+0xed1/0x1370
[ 2912.516392]  should_failslab+0x9/0x20
[ 2912.516896]  kmem_cache_alloc+0x61/0x390
[ 2912.517437]  ? ext4_es_can_be_merged.isra.0+0x16d/0x190
[ 2912.518183]  __es_insert_extent+0xed1/0x1370
[ 2912.518829]  ext4_es_insert_delayed_block+0x265/0x590
[ 2912.519522]  ? __pfx_ext4_es_insert_delayed_block+0x10/0x10
[ 2912.520252]  ? percpu_counter_add_batch+0xc8/0x180
[ 2912.520899]  ? do_raw_spin_unlock+0x53/0x220
[ 2912.521513]  ? _raw_spin_unlock+0x1e/0x40
[ 2912.522080]  ? ext4_da_reserve_space+0xf8/0x3d0
[ 2912.522745]  ext4_da_get_block_prep+0x943/0x1150
[ 2912.523416]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2912.524124]  ? __block_write_begin_int+0x121b/0x1530
[ 2912.524790]  ? __pfx_lock_release+0x10/0x10
[ 2912.525430]  __block_write_begin_int+0x3f5/0x1530
[ 2912.526113]  ? __pfx_ext4_da_get_block_prep+0x10/0x10
[ 2912.526839]  ? __pfx_percpu_ref_put_many.constprop.0+0x10/0x10
[ 2912.527598]  ? __pfx___block_write_begin_int+0x10/0x10
[ 2912.528307]  ? __filemap_get_folio+0x1d3/0x8d0
[ 2912.528968]  ext4_da_write_begin+0x30b/0x840
[ 2912.529610]  ? __pfx_ext4_da_write_begin+0x10/0x10
[ 2912.530276]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1130
[ 2912.531111]  generic_perform_write+0x26f/0x5e0
[ 2912.531777]  ? __pfx_generic_perform_write+0x10/0x10
[ 2912.532478]  ? __pfx_file_modified_flags+0x10/0x10
[ 2912.533168]  ext4_buffered_write_iter+0x123/0x3d0
[ 2912.533820]  ? iter_file_splice_write+0x162/0xcb0
[ 2912.534478]  ext4_file_write_iter+0x36d/0x19b0
[ 2912.535100]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2912.535796]  ? iter_file_splice_write+0x162/0xcb0
[ 2912.536437]  ? kasan_save_stack+0x32/0x50
[ 2912.537008]  ? kasan_save_stack+0x22/0x50
[ 2912.537579]  ? kasan_set_track+0x25/0x30
[ 2912.538141]  ? __kasan_kmalloc+0x7f/0x90
[ 2912.538696]  ? __kmalloc+0x5d/0x160
[ 2912.539198]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2912.539863]  ? do_splice_direct+0x1bb/0x290
[ 2912.540457]  ? do_sendfile+0xb67/0x1300
[ 2912.540992]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2912.541644]  ? do_syscall_64+0x3f/0x90
[ 2912.542194]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2912.542902]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2912.543531]  ? lock_is_held_type+0x9f/0x120
[ 2912.544157]  do_iter_readv_writev+0x217/0x3c0
[ 2912.544795]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2912.545478]  ? avc_policy_seqno+0x9/0x20
[ 2912.546068]  ? security_file_permission+0xb5/0xe0
[ 2912.546768]  do_iter_write+0x186/0x820
[ 2912.547286]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2912.547961]  ? iter_file_splice_write+0x162/0xcb0
[ 2912.548586]  ? kasan_set_track+0x25/0x30
[ 2912.549163]  vfs_iter_write+0x7a/0xb0
[ 2912.549709]  iter_file_splice_write+0x737/0xcb0
[ 2912.550382]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2912.551056]  ? __pfx_copy_splice_read+0x10/0x10
[ 2912.551716]  ? inode_security+0x105/0x140
[ 2912.552292]  ? security_file_permission+0xb5/0xe0
[ 2912.552968]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2912.553654]  direct_splice_actor+0x119/0x180
[ 2912.554287]  splice_direct_to_actor+0x349/0x9d0
[ 2912.554948]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2912.555637]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2912.556340]  ? security_file_permission+0xb5/0xe0
[ 2912.557024]  do_splice_direct+0x1bb/0x290
[ 2912.557629]  ? __pfx_do_splice_direct+0x10/0x10
[ 2912.558277]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2912.559000]  ? lock_is_held_type+0x9f/0x120
[ 2912.559607]  do_sendfile+0xb67/0x1300
[ 2912.560160]  ? __pfx_do_sendfile+0x10/0x10
[ 2912.560769]  __x64_sys_sendfile64+0x1d5/0x210
[ 2912.561385]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2912.562077]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2912.562781]  do_syscall_64+0x3f/0x90
[ 2912.563313]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2912.563991] RIP: 0033:0x7f435bfddb19
[ 2912.564485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2912.566742] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2912.567716] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2912.568630] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2912.569555] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2912.570466] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2912.571378] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2912.572337]  </TASK>
03:27:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:27:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x8100000000000000)

03:27:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 57)

03:27:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 48)

[ 2924.804920] loop4: detected capacity change from 0 to 40
03:27:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
chdir(&(0x7f0000000280)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000000, &(0x7f0000000240)='vfat\x00')

03:27:48 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file1\x00'})
sendto$unix(r1, &(0x7f0000000340)="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", 0x1000, 0x4004056, &(0x7f0000001340)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="62747266732e2629631f52ab0024c2ed5d6354a6e825083b302b89ad81250179f3326b2abfae237adaebb196a862beb3d8187811e0032548a37b67347931f65dfeffd656fb690c6feb7876527247e8841e9bea802e48e811ea2bf20e17aee3a620cf8ceaa93335a49584bfa0fe43f85780820fccc60c1d5168"], &(0x7f00000001c0)='\'+\x00', 0x3, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
openat(r5, &(0x7f0000000180)='./file0\x00', 0x55d301, 0x109)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
open$dir(&(0x7f0000000240)='./file0\x00', 0x440000, 0x140)
sendfile(r3, r2, 0x0, 0xfffffdef)

03:27:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 60)

03:27:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2924.843779] loop7: detected capacity change from 0 to 40
[ 2924.846663] loop3: detected capacity change from 0 to 40
[ 2924.854687] loop6: detected capacity change from 0 to 40
03:27:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:27:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 61)

03:27:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 49)

[ 2924.963038] syz-executor.6: attempt to access beyond end of device
[ 2924.963038] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2924.964834] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:27:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 58)

03:27:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x40, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
removexattr(&(0x7f0000000000)='.\x00', &(0x7f0000000040)=@random={'btrfs.', 'vfat\x00'})
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=@random={'osx.', '/dev/ptmx\x00'})
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

[ 2925.015913] loop7: detected capacity change from 0 to 40
[ 2925.036431] FAULT_INJECTION: forcing a failure.
[ 2925.036431] name failslab, interval 1, probability 0, space 0, times 0
[ 2925.037284] CPU: 0 PID: 12400 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2925.037887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2925.038486] Call Trace:
[ 2925.038689]  <TASK>
[ 2925.038870]  dump_stack_lvl+0xc1/0xf0
[ 2925.039185]  should_fail_ex+0x4b4/0x5b0
[ 2925.039503]  ? iter_file_splice_write+0x162/0xcb0
[ 2925.039882]  should_failslab+0x9/0x20
[ 2925.040186]  __kmem_cache_alloc_node+0x66/0x310
[ 2925.040541]  ? mark_held_locks+0x9e/0xe0
[ 2925.040859]  ? iter_file_splice_write+0x162/0xcb0
[ 2925.041241]  ? iter_file_splice_write+0x162/0xcb0
[ 2925.041613]  __kmalloc+0x4d/0x160
[ 2925.041913]  iter_file_splice_write+0x162/0xcb0
[ 2925.042271]  ? __kmem_cache_free+0xe1/0x330
[ 2925.042631]  ? copy_splice_read+0x65b/0x900
[ 2925.042983]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2925.043380]  ? __pfx_copy_splice_read+0x10/0x10
[ 2925.043747]  ? inode_security+0x105/0x140
[ 2925.044091]  ? security_file_permission+0xb5/0xe0
[ 2925.044478]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2925.044872]  direct_splice_actor+0x119/0x180
[ 2925.045226]  splice_direct_to_actor+0x349/0x9d0
[ 2925.045595]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2925.046008]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2925.046412]  ? security_file_permission+0xb5/0xe0
[ 2925.046792]  do_splice_direct+0x1bb/0x290
[ 2925.047121]  ? __pfx_do_splice_direct+0x10/0x10
[ 2925.047488]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2925.047901]  ? lock_is_held_type+0x9f/0x120
[ 2925.048255]  do_sendfile+0xb67/0x1300
[ 2925.048570]  ? __pfx_do_sendfile+0x10/0x10
[ 2925.048913]  __x64_sys_sendfile64+0x1d5/0x210
[ 2925.049274]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2925.049664]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2925.050075]  do_syscall_64+0x3f/0x90
[ 2925.050383]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2925.050779] RIP: 0033:0x7fa51deffb19
[ 2925.051062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2925.052391] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2925.052958] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2925.053494] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2925.054029] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2925.054554] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2925.055071] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2925.055629]  </TASK>
[ 2925.058590] loop3: detected capacity change from 0 to 40
[ 2925.063796] loop4: detected capacity change from 0 to 40
03:27:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x1000fffffdef)

[ 2925.095423] FAULT_INJECTION: forcing a failure.
[ 2925.095423] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2925.096289] CPU: 0 PID: 12406 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2925.096877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2925.097469] Call Trace:
[ 2925.097677]  <TASK>
[ 2925.097861]  dump_stack_lvl+0xc1/0xf0
[ 2925.098183]  should_fail_ex+0x4b4/0x5b0
[ 2925.098500]  __should_fail_alloc_page+0xe0/0x110
[ 2925.098883]  prepare_alloc_pages+0x178/0x500
[ 2925.099246]  ? __pfx_lock_acquire+0x10/0x10
[ 2925.099574]  __alloc_pages_bulk+0x156/0x10e0
[ 2925.099921]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2925.100381]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2925.100764]  ? copy_splice_read+0x15b/0x900
[ 2925.101118]  ? kasan_set_track+0x25/0x30
[ 2925.101434]  ? __kasan_kmalloc+0x7f/0x90
[ 2925.101777]  copy_splice_read+0x190/0x900
[ 2925.102113]  ? lock_is_held_type+0x9f/0x120
[ 2925.102457]  ? __pfx_copy_splice_read+0x10/0x10
[ 2925.102834]  ? inode_security+0x105/0x140
[ 2925.103158]  ? fsnotify_perm.part.0+0x248/0x680
[ 2925.103516]  ? security_file_permission+0xb5/0xe0
[ 2925.103900]  ? __pfx_copy_splice_read+0x10/0x10
[ 2925.104245]  vfs_splice_read+0x238/0x2d0
[ 2925.104571]  splice_direct_to_actor+0x2aa/0x9d0
[ 2925.104935]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2925.105302]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2925.105713]  ? security_file_permission+0xb5/0xe0
[ 2925.106103]  do_splice_direct+0x1bb/0x290
[ 2925.106429]  ? __pfx_do_splice_direct+0x10/0x10
[ 2925.106793]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2925.107200]  ? lock_is_held_type+0x9f/0x120
[ 2925.107540]  do_sendfile+0xb67/0x1300
[ 2925.107849]  ? __pfx_do_sendfile+0x10/0x10
[ 2925.108189]  __x64_sys_sendfile64+0x1d5/0x210
[ 2925.108536]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2925.108919]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2925.109320]  do_syscall_64+0x3f/0x90
[ 2925.109619]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2925.110020] RIP: 0033:0x7fc1c5d62b19
[ 2925.110303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2925.111591] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2925.112155] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2925.112676] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2925.113181] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2925.113716] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2925.114237] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2925.114777]  </TASK>
[ 2925.118459] FAULT_INJECTION: forcing a failure.
[ 2925.118459] name failslab, interval 1, probability 0, space 0, times 0
[ 2925.121315] CPU: 1 PID: 12402 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2925.122647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2925.123829] Call Trace:
[ 2925.124256]  <TASK>
[ 2925.124609]  dump_stack_lvl+0xc1/0xf0
[ 2925.125250]  should_fail_ex+0x4b4/0x5b0
[ 2925.125869]  ? copy_splice_read+0x15b/0x900
[ 2925.126588]  should_failslab+0x9/0x20
[ 2925.127176]  __kmem_cache_alloc_node+0x66/0x310
[ 2925.127929]  ? copy_splice_read+0x15b/0x900
[ 2925.128594]  ? __kmem_cache_free+0xe1/0x330
[ 2925.129294]  ? copy_splice_read+0x15b/0x900
[ 2925.129973]  __kmalloc+0x4d/0x160
[ 2925.130528]  copy_splice_read+0x15b/0x900
[ 2925.131176]  ? lock_is_held_type+0x9f/0x120
[ 2925.131900]  ? __pfx_copy_splice_read+0x10/0x10
[ 2925.132627]  ? inode_security+0x105/0x140
[ 2925.133283]  ? fsnotify_perm.part.0+0x248/0x680
[ 2925.134024]  ? security_file_permission+0xb5/0xe0
[ 2925.134806]  ? __pfx_copy_splice_read+0x10/0x10
[ 2925.135530]  vfs_splice_read+0x238/0x2d0
[ 2925.136225]  splice_direct_to_actor+0x2aa/0x9d0
[ 2925.136954]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2925.137773]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2925.138564]  ? security_file_permission+0xb5/0xe0
[ 2925.139343]  do_splice_direct+0x1bb/0x290
[ 2925.139995]  ? __pfx_do_splice_direct+0x10/0x10
[ 2925.140743]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2925.141543]  ? lock_is_held_type+0x9f/0x120
[ 2925.142267]  do_sendfile+0xb67/0x1300
[ 2925.142860]  ? __pfx_do_sendfile+0x10/0x10
[ 2925.143553]  __x64_sys_sendfile64+0x1d5/0x210
[ 2925.144238]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2925.145024]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2925.145822]  do_syscall_64+0x3f/0x90
[ 2925.146436]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2925.147198] RIP: 0033:0x7f435bfddb19
[ 2925.147770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2925.149055] loop6: detected capacity change from 0 to 40
[ 2925.150313] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2925.150352] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2925.152820] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2925.153828] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2925.154863] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2925.155866] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2925.156927]  </TASK>
03:27:49 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:27:49 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 50)

[ 2925.210279] syz-executor.6: attempt to access beyond end of device
[ 2925.210279] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2925.211350] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:28:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:28:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x9a00000000000000)

03:28:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 59)

03:28:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:28:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000fc0)=@newsa={0x13c, 0x10, 0x3c7c02c9b47383d1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cryptd(blake2s-256)\x00'}, 0xfe90}}]}, 0x13c}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)

03:28:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:28:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 51)

03:28:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 62)

[ 2941.871057] loop4: detected capacity change from 0 to 40
[ 2941.877543] loop3: detected capacity change from 0 to 40
[ 2941.881865] loop7: detected capacity change from 0 to 40
[ 2941.886530] loop6: detected capacity change from 0 to 40
[ 2941.911907] FAULT_INJECTION: forcing a failure.
[ 2941.911907] name failslab, interval 1, probability 0, space 0, times 0
[ 2941.912720] CPU: 0 PID: 12434 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2941.913282] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2941.913849] Call Trace:
[ 2941.914040]  <TASK>
[ 2941.914212]  dump_stack_lvl+0xc1/0xf0
[ 2941.914506]  should_fail_ex+0x4b4/0x5b0
[ 2941.914802]  ? copy_splice_read+0x15b/0x900
[ 2941.915133]  should_failslab+0x9/0x20
[ 2941.915406]  __kmem_cache_alloc_node+0x66/0x310
[ 2941.915750]  ? copy_splice_read+0x15b/0x900
[ 2941.916068]  ? __kmem_cache_free+0xe1/0x330
[ 2941.916391]  ? copy_splice_read+0x15b/0x900
[ 2941.916706]  __kmalloc+0x4d/0x160
[ 2941.916966]  copy_splice_read+0x15b/0x900
[ 2941.917285]  ? lock_is_held_type+0x9f/0x120
[ 2941.917602]  ? __pfx_copy_splice_read+0x10/0x10
[ 2941.917960]  ? inode_security+0x105/0x140
[ 2941.918269]  ? fsnotify_perm.part.0+0x248/0x680
[ 2941.918623]  ? security_file_permission+0xb5/0xe0
[ 2941.918984]  ? __pfx_copy_splice_read+0x10/0x10
[ 2941.919357]  vfs_splice_read+0x238/0x2d0
[ 2941.919809]  splice_direct_to_actor+0x2aa/0x9d0
[ 2941.920174]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2941.920567]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2941.920973]  ? security_file_permission+0xb5/0xe0
[ 2941.921370]  do_splice_direct+0x1bb/0x290
[ 2941.921662]  ? __pfx_do_splice_direct+0x10/0x10
[ 2941.922039]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2941.922439]  ? lock_is_held_type+0x9f/0x120
[ 2941.922782]  do_sendfile+0xb67/0x1300
[ 2941.923092]  ? __pfx_do_sendfile+0x10/0x10
[ 2941.923436]  __x64_sys_sendfile64+0x1d5/0x210
[ 2941.923787]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2941.924166]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2941.924561]  do_syscall_64+0x3f/0x90
[ 2941.924857]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2941.925250] RIP: 0033:0x7fc1c5d62b19
[ 2941.925502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2941.926812] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2941.927361] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2941.927873] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2941.928388] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2941.928898] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2941.929400] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2941.929939]  </TASK>
03:28:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2941.939240] FAULT_INJECTION: forcing a failure.
[ 2941.939240] name failslab, interval 1, probability 0, space 0, times 0
[ 2941.940913] CPU: 1 PID: 12439 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2941.942085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2941.943226] Call Trace:
[ 2941.943606]  <TASK>
[ 2941.943948]  dump_stack_lvl+0xc1/0xf0
[ 2941.944536]  should_fail_ex+0x4b4/0x5b0
[ 2941.945134]  ? jbd2__journal_start+0x194/0x810
[ 2941.945810]  should_failslab+0x9/0x20
[ 2941.946419]  kmem_cache_alloc+0x61/0x390
[ 2941.947040]  ? lock_is_held_type+0x9f/0x120
[ 2941.947701]  jbd2__journal_start+0x194/0x810
[ 2941.948389]  __ext4_journal_start_sb+0x3d7/0x560
[ 2941.949095]  ? ext4_dirty_inode+0xa5/0x130
[ 2941.949735]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 2941.950463]  ext4_dirty_inode+0xa5/0x130
[ 2941.951076]  __mark_inode_dirty+0x1aa/0xc10
[ 2941.951741]  generic_update_time+0x261/0x310
[ 2941.952429]  file_modified_flags+0x2d4/0x330
[ 2941.953102]  ? __pfx_file_modified_flags+0x10/0x10
[ 2941.953876]  ext4_buffered_write_iter+0xfd/0x3d0
[ 2941.954575]  ? iter_file_splice_write+0x162/0xcb0
[ 2941.955288]  ext4_file_write_iter+0x36d/0x19b0
[ 2941.955980]  ? iter_file_splice_write+0x162/0xcb0
[ 2941.956695]  ? kasan_save_stack+0x32/0x50
[ 2941.957320]  ? kasan_save_stack+0x22/0x50
[ 2941.957958]  ? kasan_set_track+0x25/0x30
[ 2941.958572]  ? __kasan_kmalloc+0x7f/0x90
[ 2941.959195]  ? __kmalloc+0x5d/0x160
[ 2941.959754]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2941.960493]  ? do_splice_direct+0x1bb/0x290
[ 2941.961156]  ? do_sendfile+0xb67/0x1300
[ 2941.961757]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2941.962461]  ? do_syscall_64+0x3f/0x90
[ 2941.963050]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2941.963771]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2941.964399]  ? lock_is_held_type+0x9f/0x120
[ 2941.965013]  do_iter_readv_writev+0x217/0x3c0
[ 2941.965657]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2941.966389]  ? avc_policy_seqno+0x9/0x20
[ 2941.966974]  ? security_file_permission+0xb5/0xe0
[ 2941.967661]  do_iter_write+0x186/0x820
[ 2941.968195]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2941.968865]  ? iter_file_splice_write+0x162/0xcb0
[ 2941.969519]  ? kasan_set_track+0x25/0x30
[ 2941.970099]  vfs_iter_write+0x7a/0xb0
[ 2941.970637]  iter_file_splice_write+0x737/0xcb0
[ 2941.971297]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2941.971992]  ? __pfx_copy_splice_read+0x10/0x10
[ 2941.972650]  ? inode_security+0x105/0x140
[ 2941.973234]  ? security_file_permission+0xb5/0xe0
[ 2941.973917]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2941.974616]  direct_splice_actor+0x119/0x180
[ 2941.975259]  splice_direct_to_actor+0x349/0x9d0
[ 2941.975933]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2941.976670]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2941.977384]  ? security_file_permission+0xb5/0xe0
[ 2941.978095]  do_splice_direct+0x1bb/0x290
[ 2941.978682]  ? __pfx_do_splice_direct+0x10/0x10
[ 2941.979328]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2941.980047]  ? lock_is_held_type+0x9f/0x120
[ 2941.980658]  do_sendfile+0xb67/0x1300
[ 2941.981200]  ? __pfx_do_sendfile+0x10/0x10
[ 2941.981797]  __x64_sys_sendfile64+0x1d5/0x210
[ 2941.982452]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2941.983142]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2941.983850]  do_syscall_64+0x3f/0x90
[ 2941.984379]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2941.985079] RIP: 0033:0x7fa51deffb19
[ 2941.985579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2941.987915] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2941.988929] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2941.989850] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2941.990782] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2941.991719] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2941.992658] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2941.993630]  </TASK>
03:28:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x402000, 0x80}, 0x18)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2942.068501] loop3: detected capacity change from 0 to 40
03:28:05 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:28:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 60)

03:28:06 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 63)

03:28:06 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 52)

[ 2942.154680] loop4: detected capacity change from 0 to 40
[ 2942.156011] loop7: detected capacity change from 0 to 40
[ 2942.158919] loop6: detected capacity change from 0 to 40
03:28:06 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>r0, {0x6}}, './file0\x00'})
openat(r2, &(0x7f0000000180)='./file0\x00', 0x8000, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:28:06 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2942.203010] syz-executor.6: attempt to access beyond end of device
[ 2942.203010] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2942.203903] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:28:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 64)

03:28:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 61)

03:28:21 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000001c0)={0xff01, 0xc13d, 0x2})
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
fallocate(r2, 0x26, 0x9, 0x6)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x10000027f)
r4 = dup3(r0, r0, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r0}}, './file0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:28:21 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:28:21 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xd300000000000000)

03:28:21 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 53)

03:28:21 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:28:21 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2957.849370] loop7: detected capacity change from 0 to 40
[ 2957.888805] loop3: detected capacity change from 0 to 40
[ 2957.893927] loop4: detected capacity change from 0 to 40
[ 2957.912564] loop6: detected capacity change from 0 to 40
[ 2957.972696] FAULT_INJECTION: forcing a failure.
[ 2957.972696] name failslab, interval 1, probability 0, space 0, times 0
[ 2957.973909] CPU: 0 PID: 12484 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2957.974682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2957.975454] Call Trace:
[ 2957.975714]  <TASK>
[ 2957.975945]  dump_stack_lvl+0xc1/0xf0
[ 2957.976368]  should_fail_ex+0x4b4/0x5b0
[ 2957.976770]  ? ext4_init_io_end+0x27/0x180
[ 2957.977200]  should_failslab+0x9/0x20
[ 2957.977593]  kmem_cache_alloc+0x61/0x390
[ 2957.978014]  ext4_init_io_end+0x27/0x180
[ 2957.978461]  ext4_do_writepages+0xb2f/0x3150
[ 2957.978927]  ? lock_acquire+0x19a/0x4c0
[ 2957.979328]  ? do_writepages+0x1ad/0x650
[ 2957.979742]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2957.980243]  ? lock_is_held_type+0x9f/0x120
[ 2957.980681]  ext4_writepages+0x2fc/0x760
[ 2957.981080]  ? __pfx_ext4_writepages+0x10/0x10
[ 2957.981578]  ? find_held_lock+0x2c/0x110
[ 2957.981962] FAULT_INJECTION: forcing a failure.
[ 2957.981962] name failslab, interval 1, probability 0, space 0, times 0
[ 2957.981990]  ? __pfx_ext4_writepages+0x10/0x10
[ 2957.982016]  do_writepages+0x1ad/0x650
[ 2957.984347]  ? __pfx_do_writepages+0x10/0x10
[ 2957.984783]  ? do_raw_spin_lock+0x125/0x270
[ 2957.985229]  ? do_raw_spin_unlock+0x53/0x220
[ 2957.985688]  ? _raw_spin_unlock+0x1e/0x40
[ 2957.986120]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2957.986648]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2957.987106]  __filemap_fdatawrite_range+0xba/0x100
[ 2957.987595]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2957.988122]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2957.988602]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2957.989088]  ? lock_release+0x1e3/0x680
[ 2957.989504]  file_write_and_wait_range+0xd2/0x140
[ 2957.989984]  ext4_sync_file+0x25a/0xde0
[ 2957.990394]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2957.990836]  vfs_fsync_range+0x147/0x240
[ 2957.991249]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2957.991702]  ? iter_file_splice_write+0x162/0xcb0
[ 2957.992173]  ext4_file_write_iter+0x36d/0x19b0
[ 2957.992632]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2957.993135]  ? iter_file_splice_write+0x162/0xcb0
[ 2957.993609]  ? kasan_save_stack+0x32/0x50
[ 2957.994013]  ? kasan_save_stack+0x22/0x50
[ 2957.994445]  ? kasan_set_track+0x25/0x30
[ 2957.994842]  ? __kasan_kmalloc+0x7f/0x90
[ 2957.995245]  ? __kmalloc+0x5d/0x160
[ 2957.995604]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2957.996072]  ? do_splice_direct+0x1bb/0x290
[ 2957.996512]  ? do_sendfile+0xb67/0x1300
[ 2957.996896]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2957.997374]  ? do_syscall_64+0x3f/0x90
[ 2957.997766]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2957.998298]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2957.998747]  ? lock_is_held_type+0x9f/0x120
[ 2957.999195]  do_iter_readv_writev+0x217/0x3c0
[ 2957.999657]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2958.000151]  ? avc_policy_seqno+0x9/0x20
[ 2958.000588]  ? security_file_permission+0xb5/0xe0
[ 2958.001084]  do_iter_write+0x186/0x820
[ 2958.001492]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2958.001970]  ? iter_file_splice_write+0x162/0xcb0
[ 2958.002454]  ? kasan_set_track+0x25/0x30
[ 2958.002865]  vfs_iter_write+0x7a/0xb0
[ 2958.003262]  iter_file_splice_write+0x737/0xcb0
[ 2958.003747]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2958.004236]  ? __pfx_copy_splice_read+0x10/0x10
[ 2958.004706]  ? inode_security+0x105/0x140
[ 2958.005123]  ? security_file_permission+0xb5/0xe0
[ 2958.005615]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2958.006128]  direct_splice_actor+0x119/0x180
[ 2958.006599]  splice_direct_to_actor+0x349/0x9d0
[ 2958.007073]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2958.007583]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2958.008091]  ? security_file_permission+0xb5/0xe0
[ 2958.008592]  do_splice_direct+0x1bb/0x290
[ 2958.009007]  ? __pfx_do_splice_direct+0x10/0x10
[ 2958.009482]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2958.009998]  ? lock_is_held_type+0x9f/0x120
[ 2958.010465]  do_sendfile+0xb67/0x1300
[ 2958.010864]  ? __pfx_do_sendfile+0x10/0x10
[ 2958.011310]  __x64_sys_sendfile64+0x1d5/0x210
[ 2958.011754]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2958.012253]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2958.012769]  do_syscall_64+0x3f/0x90
[ 2958.013152]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2958.013641] RIP: 0033:0x7fa51deffb19
[ 2958.013998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2958.015659] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2958.016355] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2958.017005] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2958.017656] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2958.018336] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2958.019068] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2958.019759]  </TASK>
[ 2958.019991] CPU: 1 PID: 12476 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2958.021181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2958.022364] Call Trace:
[ 2958.022748]  <TASK>
[ 2958.023089]  dump_stack_lvl+0xc1/0xf0
[ 2958.023681]  should_fail_ex+0x4b4/0x5b0
[ 2958.024285]  ? copy_splice_read+0x15b/0x900
[ 2958.024940]  should_failslab+0x9/0x20
[ 2958.025515]  __kmem_cache_alloc_node+0x66/0x310
[ 2958.026219]  ? copy_splice_read+0x15b/0x900
[ 2958.026879]  ? __kmem_cache_free+0xe1/0x330
[ 2958.027527]  ? copy_splice_read+0x15b/0x900
[ 2958.028184]  __kmalloc+0x4d/0x160
[ 2958.028716]  copy_splice_read+0x15b/0x900
[ 2958.029363]  ? lock_is_held_type+0x9f/0x120
[ 2958.030017]  ? __pfx_copy_splice_read+0x10/0x10
[ 2958.030748]  ? inode_security+0x105/0x140
[ 2958.031366]  ? fsnotify_perm.part.0+0x248/0x680
[ 2958.032074]  ? security_file_permission+0xb5/0xe0
[ 2958.032786]  ? __pfx_copy_splice_read+0x10/0x10
[ 2958.033492]  vfs_splice_read+0x238/0x2d0
[ 2958.034106]  splice_direct_to_actor+0x2aa/0x9d0
[ 2958.034816]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2958.035562]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2958.036331]  ? security_file_permission+0xb5/0xe0
[ 2958.037062]  do_splice_direct+0x1bb/0x290
[ 2958.037686]  ? __pfx_do_splice_direct+0x10/0x10
[ 2958.038400]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2958.039161]  ? lock_is_held_type+0x9f/0x120
[ 2958.039809]  do_sendfile+0xb67/0x1300
[ 2958.040383]  ? __pfx_do_sendfile+0x10/0x10
[ 2958.041027]  __x64_sys_sendfile64+0x1d5/0x210
[ 2958.041699]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2958.042455]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2958.043225]  do_syscall_64+0x3f/0x90
[ 2958.043796]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2958.044538] RIP: 0033:0x7fc1c5d62b19
[ 2958.045078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2958.047572] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2958.048627] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2958.049609] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2958.050617] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2958.051603] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2958.052597] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2958.053619]  </TASK>
03:28:21 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 65)

03:28:21 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2958.082980] syz-executor.6: attempt to access beyond end of device
[ 2958.082980] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2958.084252] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2958.092807] syz-executor.3: attempt to access beyond end of device
[ 2958.092807] loop3: rw=2049, sector=52, nr_sectors = 8 limit=40
[ 2958.099852] syz-executor.6: attempt to access beyond end of device
[ 2958.099852] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2958.101041] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2958.120714] loop7: detected capacity change from 0 to 40
03:28:22 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10210, 0x0, 0x0, 0x0, 0x7b}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:28:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:28:22 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2958.240642] loop6: detected capacity change from 0 to 40
03:28:22 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 66)

[ 2958.264318] loop3: detected capacity change from 0 to 40
03:28:22 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 54)

[ 2958.331763] loop7: detected capacity change from 0 to 40
[ 2958.344857] syz-executor.6: attempt to access beyond end of device
[ 2958.344857] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2958.346630] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:28:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
unlink(&(0x7f0000000180)='./file1\x00')

[ 2958.391378] FAULT_INJECTION: forcing a failure.
[ 2958.391378] name failslab, interval 1, probability 0, space 0, times 0
[ 2958.392302] CPU: 0 PID: 12503 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2958.392934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2958.393561] Call Trace:
[ 2958.393771]  <TASK>
[ 2958.393962]  dump_stack_lvl+0xc1/0xf0
[ 2958.394305]  should_fail_ex+0x4b4/0x5b0
[ 2958.394639]  ? copy_splice_read+0x15b/0x900
[ 2958.394996]  should_failslab+0x9/0x20
[ 2958.395308]  __kmem_cache_alloc_node+0x66/0x310
[ 2958.395691]  ? copy_splice_read+0x15b/0x900
[ 2958.396047]  ? __kmem_cache_free+0xe1/0x330
[ 2958.396405]  ? copy_splice_read+0x15b/0x900
[ 2958.396759]  __kmalloc+0x4d/0x160
[ 2958.397048]  copy_splice_read+0x15b/0x900
[ 2958.397392]  ? lock_is_held_type+0x9f/0x120
[ 2958.397760]  ? __pfx_copy_splice_read+0x10/0x10
[ 2958.398161]  ? inode_security+0x105/0x140
[ 2958.398502]  ? fsnotify_perm.part.0+0x248/0x680
[ 2958.398885]  ? security_file_permission+0xb5/0xe0
[ 2958.399291]  ? __pfx_copy_splice_read+0x10/0x10
[ 2958.399683]  vfs_splice_read+0x238/0x2d0
[ 2958.400030]  splice_direct_to_actor+0x2aa/0x9d0
[ 2958.400415]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2958.400825]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2958.401243]  ? security_file_permission+0xb5/0xe0
[ 2958.401650]  do_splice_direct+0x1bb/0x290
[ 2958.401988]  ? __pfx_do_splice_direct+0x10/0x10
[ 2958.402399]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2958.402822]  ? lock_is_held_type+0x9f/0x120
[ 2958.403179]  do_sendfile+0xb67/0x1300
[ 2958.403502]  ? __pfx_do_sendfile+0x10/0x10
[ 2958.403861]  __x64_sys_sendfile64+0x1d5/0x210
[ 2958.404235]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2958.404648]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2958.405073]  do_syscall_64+0x3f/0x90
[ 2958.405388]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2958.405792] RIP: 0033:0x7f435bfddb19
[ 2958.406093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2958.407435] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2958.408013] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2958.408559] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2958.409105] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2958.409641] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2958.410197] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2958.410770]  </TASK>
[ 2958.452933] loop3: detected capacity change from 0 to 40
03:28:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:28:36 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xeffdffff00000000)

03:28:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2440, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
[ 2972.283796] loop7: detected capacity change from 0 to 40
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000001a40)={&(0x7f00000002c0)={0x1778, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7e}, @NL80211_ATTR_CSA_IES={0xc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x8, 0xc1a1]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x171c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xd8, 0xf, [@random={0x7, 0x9c, "5638de469369051fcddb7d708735d26c3bbb8e4c8c067a7b2ab3ee4d440d761771df882b8a309e3889c832e8e75aab12059187d9f33a078dea2c9845876536f6b30e9ad7b7193c4c07e39b95f93a58254557d51bd4514ae02ab3c957f349cbe699f3a40c3b847bdb065f1443d4ac7edc11f169800ee4f9e3389fb47e24fbb8387aacc128dabca78fe163c610e207428bb8395950050537d668b3a542"}, @mic={0x8c, 0x10, {0x67, "3c7005c9709a", @short="3218b8dab0a67f73"}}, @dsss={0x3, 0x1, 0x68}, @tim={0x5, 0x1f, {0x1f, 0xcd, 0x20, "df0360778b93d59eb6676fddc28b62d77ed12f3aaf9aff14ffa4b73a"}}]}, @NL80211_ATTR_IE={0x9e, 0x2a, [@tim={0x5, 0x3, {0x5a, 0x8d, 0x7d}}, @perr={0x84, 0x6f, {0x0, 0x7, [@ext={{}, @broadcast, 0xf1, @broadcast, 0x1c}, @not_ext={{}, @device_b, 0xfe, "", 0x1}, @not_ext={{}, @broadcast, 0x9, "", 0x10}, @ext={{}, @broadcast, 0x1, @broadcast, 0x11}, @not_ext={{}, @broadcast, 0x1f0529e3, "", 0x3f}, @ext={{}, @device_a, 0x6, @device_b, 0x7}, @not_ext={{}, @device_a, 0x10000, "", 0x19}]}}, @ht={0x2d, 0x1a, {0x2000, 0x0, 0x1, 0x0, {0x0, 0x3, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x400, 0x2, 0x4}}, @mesh_chsw={0x76, 0x6, {0x9, 0x2, 0x2e, 0x6}}]}, @NL80211_ATTR_PROBE_RESP={0x33, 0x91, "03ffac63c05288bdc044891c2ce9ef8c9893e1a5e9934079714b344d416eaeff87dd45d2a640a676afc6df835f0116"}, @NL80211_ATTR_FTM_RESPONDER={0x98, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x92, 0x2, "d1a263380f8dd536fddba3e97c4adf4855b0273b4b5a2ae038b01b17c8c17ccf45e57d00b1d64788bb902d35d623b0e6ae94722be9b1467b926812ddd896b364608f68c5be5c4db9661d8df88e75bee36154535acf9aa3ea77414caa8ffe7b361214a2af8fc2c31170b10d6c7fbcff21e89841a0462ed29025e81aad92748ce0d92cdb41218ad6060b793d3e1df2"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x101, 0xb26, 0x3, 0x9, 0xf2, 0x4]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x298, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xcd, 0x2, "49f47bbe78edd8aecbca264e3ec6f080d4cd7a09f0bf5201d65ba6a86980f921f6598abb8ffcb2d7014c1b2918cba8500c2e119ac4170a87866282e913b8bd3a52b02069c9b176d1d880af418267988619690c9c910a585a0d6bab2c2ff86a8509c5df4cafbfce022d7d4bb24572680902d73f1118f1344e4c338a0709f41ee294ba78b358b331c736546d09bb1ad0cf94c3d76c10ec7a90b6bde5095fe1db284a1c619932e33dc07dbd2f00ad8c3b4e8c53657f6e960cbe29f7583907b20ca5afd583ac87d319626b"}, @NL80211_FTM_RESP_ATTR_LCI={0x22, 0x2, "54bb2127c84d24b0744e8223776dfa06853e82b6cf30ad3f9e432817a37f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2f, 0x3, "78617f5d34d444bc95abbfe2c9c1b425e925768379221187cbc971e1499a6a0c7484957a4ea4d138ab7a48"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd4, 0x3, "08ae66c3fa12b3629dd96d5687ebc7b0d14b2eacd39991384a634f8544f493643f6510285c6a5642c116f1cfaece9d56081d2b3cf2eee80d7f5cf9c83fba6c0b48f5caaae2cb2cefb64b255375965d732d55a96143a6ee97e792b3d6b8015e1c57eb9774f4c3e351e78d5320f8bf8931db014e7f5508f6d042caa8a605919f7a558d375ad90b6e0c45aa3b060882cc7db0faa4ba90c3a2ad015e6282d748e392b445b9bca5d88bcb64f0635321413d95895f6accc6cba69195cd166b0e213fb4c0db9a6e58b0d776d13c94a96fb6c402"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x93, 0x2, "0be738e4e03c5c55bddcfd36f2edb55ae69c4097b8eb0f59fb3d630cebfbb84fa5e349b3a2882399eb22875b5a1cddff630858bffb10197076cae524f25d9e87986011e8d871e1b5b22abb8f0a645186349631328fc83121edf5d9e2fce03ac4298c1543e0ccf706193c26d46fddcd96b9c35dcb9bf7a1068973956fb06d1cadff52ed6fe02caaad5ed006638fe3bf"}]}, @NL80211_ATTR_FTM_RESPONDER={0x27c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1d, 0x3, "2952e252d22600054a7837da51c110122d3185ade744c68438"}, @NL80211_FTM_RESP_ATTR_LCI={0xcf, 0x2, "e8cf7c3d7ffdd137dc75e71f6968655a165afc84e89306f02fe095bf83d2f80d99f49648bb26a02034d561ac669caa2fe58d4fa13a6c502b3db93757ac64dfc5d14ff6e6b78029780356ea468e5d10b3f48b56cff09f6654aef6e3b042979c8add932313b01a562582cb4c1d2b40b6da776d306e6316d6a6bc62908162df5a60b5323806fe9a5442871a49a7c170f8d5b210c191460c46257148d67a72d32505ab1ebba8b508eb43a9b9bf4ac4467aa4d09e11abbe2e71c83fc4b76ffaedaa56b68acc0b325ff1b3b9eb10"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x78, 0x3, "b023389d8d00443f971a6ab21427b4992edb88448ace892eb96d0dfa7476746f6f31700e8ec515e813c9d531a3907c7c1d76264f58ca0ff274eee82903a5dc285bfdd1e6e0407825735c7ad3402166b833b1e71c5d88c9d480c72213a3cbb896cbd097963b7ba91705172c550da23cce5fe2ddd8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x103, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x353, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @initial, {0x0, 0x4}}, @ver_80211n={0x0, 0x40, 0x3, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x5, @default, 0x8013, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x40}, @val={0x4, 0x6, {0x3, 0x4, 0xff80, 0x2}}, @val={0x6, 0x2, 0x4e}, @void, @val={0x25, 0x3, {0x0, 0x70, 0xbe}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0x78}}, @val={0x2d, 0x1a, {0x20, 0x2, 0x6, 0x0, {0x4, 0x1d0b, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x1, 0x3f, 0x1}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x80, 0x12}}, [{0xdd, 0x5e, "391da4f5511424c8b51b0e5916d45a1b95934846a6febfb697f740981e949d56626f600b28d78ac74d2358b1310dec966b7ccfae43938773d78a56ba335618e3797ebd477ee4700cb7f813e85e8739d57138bdc690853a9207b7f4485d8d"}, {0xdd, 0xac, "5aed90c602d11a0c99ef2073f273c80e2b93cce5816bf5a7237a0ddcc02601ac32307a06dbd4233a613be998de468862238fc66452080bba9bc41b0bb9146bb3fe1ed40267417723b84f97c23b33d8b6aced4df9e8adb144c95d88668e9be192a97b49b42149e5426a544cc5ba1a012e6a062696c3460e24347bf7196ccf59d374bbf2442547e2b1d5222376be645de4bd7b0bdd03eece1dfb38abd93648be78ffe679d563bbb6cd3c805282"}, {0xdd, 0xba, "a622ccc75f0e4fa5bc465800d72df20e869578d80bc4598a4bce46efabf713f38770fae0fa858078294ff31a633f79394aff88f8ddd231fc914cc336613ff96bb6d73996f09c828703e4b9dba03e4e6d3bda06263fea83e7d3be41d578535e615877f8530aa135431b7522ecd7afc6685821e5790e19797cf08d423b6de17232a271329709f0c7b8d5088b2bd4953653171cab44906fdb8dca36e4460df2f1b6ab4a12663772f599faebff200a878c7376dfc4cc55ea8d61ad89"}, {0xdd, 0x1a, "5b99e15c991b91bdf1da9e5a80bcb5fd2d942340419a76664591"}, {0xdd, 0xee, "b35c1e77c1bf2ddf59d76354ca602245cce3c9c10c8ab3360be477dcd8bd058193c2ab5e7d26d857629217fe271e6eb0140533e332ddaaba7b89788fe174397aacc695e5c08ce067bcadc09af1a6cad0eebea263adbaa4b54f6c40295a4fd9e7cb961c36b49db8b07bb07e952ba4f278e40fb9d30332895acc8baa146538a2113ecfaffa5ae4008320ad24ffa01adf1356606916a9c0d0b983212a95688266732653f9c34631e427d0290c968c50074747769286c4ebb05fb9b07c7afc7eb0e9f0eab30d6ba78bd4e23ccaca02e344be7e42d44eea4e1199dbd969088d0133ea0b72127e509a9e09aca94ec0df35"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x1a0, 0x80, [@dsss={0x3, 0x1, 0x7a}, @link_id={0x65, 0x12, {@random="ffc96f504cb7", @device_b}}, @cf={0x4, 0x6, {0x2, 0xcb, 0x4, 0x9}}, @random={0x81, 0xb5, "09f951474010cf53a117b361e36989c3fdd9bf4de56147b0e0124cbf9d05a8b472c533643e93009c5a01d3087da27cedf3657c07c1927720c12d6f2ef7784b1192a5cc65f52c9c9f2950133a4bf8e072cb6614b129aa5455222c9afab9227efa1116fda108e079795b2b717e89ece8250301577d0a3130cb997da6ab0d91d1598d8a9373fc90316c20aefb3e921e9dcb7da8b58cf27bc3eaf5a94dfe01ff6369c49128027ba68192fa22264db2d5a18694f79533b0"}, @fast_bss_trans={0x37, 0x6c, {0x0, 0x2, "55d6e322d9e6a8bc8482bbc3c73dcfc2", "fc29d8ffb847241d12354aea1c8cc13eeac996cd13f214986fa5fc1a839bbd57", "8ec0d0b2ebce333ec6d81792e716ab6f0fa2fb6dd9ef5a863aa6c45a8955eb29", [{0x4, 0xf, "4579fa07537126a3e2274757dedb50"}, {0x3, 0x7, "73be559e689fe8"}]}}, @tim={0x5, 0x56, {0x30, 0xf3, 0x7f, "ff32414f3a59baa9f577ff4a478fd464d0df9abb7b6ef39d2bc1a6fcbd2ee94736271cc6632554bcd7e4a6650437afe78038daa701fbe7799df0aac14710b540ac1c9e4327e3859781da367bb9be7bd69076a0"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x80, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x77, 0x2, "8b82e67c29a23f1f21c76792e9f7e6fe0e3ef380fd4a2b177be320b21c9ea9d0a6680bcad08cad8f51501744160a3ef68bc115895f71f7a0980eb3fbd30d76754b557122a2f62ede63728840d901dd91a59c57fb289ba91cf45b3571b0e48aa56566450d184ea5bb9ace8f0b613ddf1130b331"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x24d, 0x80, [@link_id={0x65, 0x12, {@random="f1b6a82a93c6", @device_a, @device_b}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0x0, 0x9, 0x80, 0x40}}, @tim={0x5, 0x82, {0x9, 0x54, 0x5, "fb254306a141b03c61ad2697afcfa9ada8089e7947f90c42bc0fb774ad556afd30d98f1fc3f762e7efe8a56313d1f8bc109a77d5b69e22b83615946360f585cdb19eabb450b7edf93d7b1870244c97c8d2c38975f20ca9283c43a3f93c37f03ba9cee46fb40f93b2f3827e3cd974551b459f990e1765979e9f77c7fbf2b59c"}}, @tim={0x5, 0x7, {0x3, 0x80, 0x8, "ba4004ac"}}, @random_vendor={0xdd, 0x9e, "7e4c0f01919b096882d79e51d3c542dc3b09b2e9844ddc20883b07be8c959184d6d48b5eaa0b435196b3c3ad2f83d4cd30aeae2ab16b1384e5a1e76599a3acef9a27cfedc58326782be4d00a36ba8c2e10afe0054708831f72a3718e28f6a1d68bbe554cb8ad8b3b0a36a9b573b9a12ee92ea7c588f9608c998ee2eeea116d63ea409b5f33d5e2b6f0f59b7226cd4b46069b85f8ad87ab4c6a3249c9b96f"}, @preq={0x82, 0x67, @not_ext={{0x1, 0x0, 0x1}, 0x6, 0x0, 0x2, @device_a, 0x2, "", 0xfd5, 0x9, 0x7, [{{}, @device_a, 0x9}, {{0x1, 0x0, 0x1}, @broadcast, 0x9b}, {{0x0, 0x0, 0x1}, @device_a, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_a, 0x142}, {{}, @device_b, 0x200}, {{0x0, 0x0, 0x1}, @device_a, 0xfffff800}, {{0x1}, @broadcast, 0x6}]}}, @rann={0x7e, 0x15, {{0x0, 0x7f}, 0x1f, 0x0, @device_a, 0xfffffffe, 0xfffffff8, 0x7}}, @preq={0x82, 0x7d, @not_ext={{0x1, 0x1, 0x1}, 0x40, 0x4, 0xffff8000, @device_b, 0x0, "", 0x1ff, 0x5, 0x9, [{{}, @device_b, 0x10000}, {{0x1}, @broadcast, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x1f}, {{0x1, 0x0, 0x1}, @device_a, 0xfffffff7}, {{0x1}, @device_b, 0x100}, {{0x0, 0x0, 0x1}, @broadcast, 0x100}, {{0x0, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_a, 0x80000000}, {{0x1, 0x0, 0x1}, @broadcast, 0xfff}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xbf, 0x3, "0aa880dad04aa5afec477f4247e4c7d91f11d0c75e65e1c68445d3c298e40cc4f88bf108c6942c7157a076e4af43d330da7447dab41e3322573bec35f5a6e3f8f3075c1113fd7dc1ccffc39164958ba89860b29b4ef322ce35d334d2251e5f9db6022c03816b663fb0a0e4dff2f29d3dbe115e326eb72d06ac9802e6237cc393cd23013d02970bfbfdac59b155ba0a4f528ec8e7812139956ce5091d6fa9bf2c364619c00027f1b0375032ef9b58b92ed1cb4f11294fd8387b9d9f"}, @NL80211_FTM_RESP_ATTR_LCI={0x3e, 0x2, "0a26c9653b2f54564df6bb1de5410cfbb27a2d9ae87b83a8e69fd8aff66b5efc1f5d30f06c48aea15e49b8aaa9308515123db27e46ed94f15c50"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_PROBE_RESP={0x1ef, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x3b, 0x7f, [@link_id={0x65, 0x12, {@initial, @device_b, @device_b}}, @ibss={0x6, 0x2, 0x1}, @cf={0x4, 0x6, {0x7f, 0x8e, 0x400, 0x2}}, @rann={0x7e, 0x15, {{0x0, 0x1f}, 0x9, 0x0, @device_b, 0xbf47, 0x6, 0x7}}]}], @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x40, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "f6f3b58e70ed5618516a506b386e4080bf0ca19a47dff12cfa9c9e720103f8080dc4ebb778fa384b4ddbce24b5888e879ac5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x46, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x5d}, 0x7f, 0x4, @device_a, 0x8, 0x0, 0x2}}, @ibss={0x6, 0x2, 0x382}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x0, @broadcast, 0x1, @broadcast, 0xfffffffc, 0xe0f, @broadcast, 0x7ff}}]}, @NL80211_ATTR_BEACON_TAIL={0x86, 0xf, [@mesh_id={0x72, 0x6}, @tim={0x5, 0x78, {0x9, 0xe9, 0x9, "f526e300883664a6fc1a0dbfc6ed987cf52818f7dd791312cf8b0556e0a2f264b07f0de420cb093f2f8ba5ef88b9e9dbcff515e607f6da8299be0bb9010187f5384cca48e389e3711fd67bec73e24ff51a2a588a3adc4e739580d5e5b7c75044fe4ed33d57f2f42b95dffed0abf5e3e600985e427d"}}]}, @NL80211_ATTR_IE={0xd1, 0x2a, [@challenge={0x10, 0x1, 0x52}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x21, 0x1f, @device_b, 0xffff, 0x6, 0xfffffffb}}, @channel_switch={0x25, 0x3, {0x1, 0xb3, 0xff}}, @tim={0x5, 0x61, {0x3c, 0x92, 0xe, "42a0b67b600f3c0faecd6c7b08e6e7527fd97c85de3fefee0e353dd117efd6c6a4aac827755881ba4fee0d0be46bc9690a0a236e205bdb7dbfaabba9033e5bfee069e7d4ab361a585265ec5ffc21b474d6717a6f1eae00adc51b02c90912"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_chsw={0x76, 0x6, {0x8, 0x9, 0x25, 0x453}}, @challenge={0x10, 0x1, 0x1a}, @prep={0x83, 0x1f, @not_ext={{}, 0x3f, 0x9, @device_a, 0xf08, "", 0x810, 0x567b, @device_a, 0x7a6}}, @link_id={0x65, 0x12, {@random="2988618fe01b", @broadcast, @device_b}}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0x18b, 0x2a, [@challenge={0x10, 0x1, 0x50}, @mesh_id={0x72, 0x6}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x20, 0xa1}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_a, @broadcast}}, @perr={0x84, 0x7b, {0x4, 0x7, [@ext={{}, @broadcast, 0x91af, @device_a, 0x3d}, @ext={{}, @broadcast, 0xffffffff, @device_b, 0x13}, @ext={{}, @device_b, 0x1, @device_b, 0x36}, @ext={{}, @device_a, 0x53, @device_a, 0x1e}, @ext={{}, @broadcast, 0x1ff, @device_b, 0x16}, @not_ext={{}, @broadcast, 0x2, "", 0x26}, @not_ext={{}, @broadcast, 0x80000000, "", 0x35}]}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xfa, 0x20}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x4, 0x0, {0x7f, 0x6, 0x0, 0x3f, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x7, 0x9}}, @random_vendor={0xdd, 0xb5, "204357cc193de04b08b502bdc90a4e8b1de9a7e78b852a87ac4709cc0474352f95636c47a843db089815f0c9b57f6cdab6b19f5de2ab8a8d20348e79fb6fa0bd97a8db364c6520115d721bbb4390fc19cee46f0559c8e2104162b6df71a58aff2dee9b493155d5675805b12a77b6b2ed00d91f9033a9cb6a72825f0fa5c4d4464fd4555a7d1eca3386e9d8238bc239a66f3bfba9bb7b6fd5ed4d03eb28ea6384297421c61926355a1c321ae59a006dd7d318ced50d"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x1395e06336f340a2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xce, 0x7f, [@ssid={0x0, 0x6, @default_ap_ssid}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x8, 0x81, @device_a, 0xfffffff8, 0x7f, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x12, 0xb6, 0x56}}, @dsss={0x3, 0x1, 0x64}, @preq={0x82, 0x6d, @ext={{0x1, 0x0, 0x1}, 0x7, 0x3, 0x40, @device_b, 0x34a2, @broadcast, 0xfffffffe, 0x8, 0x7, [{{0x1}, @device_a, 0x7}, {{}, @device_a, 0x3}, {{0x1}, @broadcast, 0x400}, {{}, @device_a, 0x394}, {{0x1, 0x0, 0x1}, @device_b, 0xfffffffd}, {{0x0, 0x0, 0x1}, @device_a, 0x7f}, {{0x1, 0x0, 0x1}}]}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x1}}, @ssid={0x0, 0x14, @random="541f0a7f627b5e35fac2501c2d7f381611e70ce5"}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x40}}, @mesh_chsw={0x76, 0x6, {0x1, 0x4, 0x24, 0x9}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x23, 0x7f, [@ht={0x2d, 0x1a, {0xc, 0x0, 0x6, 0x0, {0x6, 0x7, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x3ff, 0x4}}, @challenge={0x10, 0x1, 0x1f}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xaa, 0x40}}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x16, 0xbb, [0xff, 0x5, 0x9, 0x7fff, 0x9, 0x5, 0x3, 0xe21, 0x8001]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0xa0df, 0x2, 0xa83, 0x6, 0x6, 0x6]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0xf2ba, 0x7, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x3, 0xff]}]}, @NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x9, 0x0, 0x7ff, 0x1, 0x2, 0x2, 0x1, 0x6]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1778}, 0x1, 0x0, 0x0, 0x810}, 0x1)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000001c0)={0x3, 0xe0})
sendfile(0xffffffffffffffff, r2, 0x0, 0x10000027f)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0100000001d4d6cb0ad51c867fae315109781f47ac00001a18000000", @ANYRES32=r5, @ANYBLOB="035a0000000000002e2f66696c653000"])
openat(r1, &(0x7f0000000180)='./file0\x00', 0x180c0, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef)

[ 2972.289799] loop3: detected capacity change from 0 to 40
03:28:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 62)

03:28:36 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 67)

03:28:36 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000))

03:28:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 55)

03:28:36 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 2972.302999] loop4: detected capacity change from 0 to 40
[ 2972.305494] loop6: detected capacity change from 0 to 40
[ 2972.309532] FAULT_INJECTION: forcing a failure.
[ 2972.309532] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2972.310528] CPU: 0 PID: 12528 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2972.311104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.311671] Call Trace:
[ 2972.311867]  <TASK>
[ 2972.312040]  dump_stack_lvl+0xc1/0xf0
[ 2972.312336]  should_fail_ex+0x4b4/0x5b0
[ 2972.312631]  __should_fail_alloc_page+0xe0/0x110
[ 2972.312989]  prepare_alloc_pages+0x178/0x500
[ 2972.313316]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2972.313657]  __alloc_pages+0x149/0x480
[ 2972.313952]  ? lock_acquire+0x19a/0x4c0
[ 2972.314276]  ? __pfx___alloc_pages+0x10/0x10
[ 2972.314612]  ? lock_release+0x1e3/0x680
[ 2972.314924]  ? xas_start+0x14e/0x710
[ 2972.315227]  alloc_pages+0x1a0/0x260
[ 2972.315525]  filemap_alloc_folio+0x389/0x430
[ 2972.315863]  ? __pfx_filemap_alloc_folio+0x10/0x10
[ 2972.316225]  ? __pfx_percpu_ref_put_many.constprop.0+0x10/0x10
[ 2972.316654]  __filemap_get_folio+0x285/0x8d0
[ 2972.316990]  ? lock_release+0x1e3/0x680
[ 2972.317288]  ext4_da_write_begin+0x2c9/0x840
[ 2972.317625]  ? __pfx_ext4_da_write_begin+0x10/0x10
[ 2972.317977]  ? balance_dirty_pages_ratelimited_flags+0x8f/0x1130
[ 2972.318421]  generic_perform_write+0x26f/0x5e0
[ 2972.318779]  ? __pfx_generic_perform_write+0x10/0x10
[ 2972.319149]  ? __pfx_file_modified_flags+0x10/0x10
[ 2972.319515]  ext4_buffered_write_iter+0x123/0x3d0
[ 2972.319867]  ? iter_file_splice_write+0x162/0xcb0
[ 2972.320234]  ext4_file_write_iter+0x36d/0x19b0
[ 2972.320582]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2972.320972]  ? iter_file_splice_write+0x162/0xcb0
[ 2972.321333]  ? kasan_save_stack+0x32/0x50
[ 2972.321650]  ? kasan_save_stack+0x22/0x50
[ 2972.321965]  ? kasan_set_track+0x25/0x30
[ 2972.322277]  ? __kasan_kmalloc+0x7f/0x90
[ 2972.322593]  ? __kmalloc+0x5d/0x160
[ 2972.322873]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2972.323239]  ? do_splice_direct+0x1bb/0x290
[ 2972.323573]  ? do_sendfile+0xb67/0x1300
[ 2972.323873]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2972.324227]  ? do_syscall_64+0x3f/0x90
[ 2972.324532]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2972.324927]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2972.325258]  ? lock_is_held_type+0x9f/0x120
[ 2972.325605]  do_iter_readv_writev+0x217/0x3c0
[ 2972.325950]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2972.326345]  ? avc_policy_seqno+0x9/0x20
[ 2972.326673]  ? security_file_permission+0xb5/0xe0
[ 2972.327062]  do_iter_write+0x186/0x820
[ 2972.327362]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2972.327736]  ? iter_file_splice_write+0x162/0xcb0
[ 2972.328102]  ? kasan_set_track+0x25/0x30
[ 2972.328425]  vfs_iter_write+0x7a/0xb0
[ 2972.328720]  iter_file_splice_write+0x737/0xcb0
[ 2972.329094]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2972.329458]  ? __pfx_copy_splice_read+0x10/0x10
[ 2972.329833]  ? inode_security+0x105/0x140
[ 2972.330153]  ? security_file_permission+0xb5/0xe0
[ 2972.330551]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2972.330938]  direct_splice_actor+0x119/0x180
[ 2972.331289]  splice_direct_to_actor+0x349/0x9d0
[ 2972.331660]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2972.332059]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2972.332438]  ? security_file_permission+0xb5/0xe0
[ 2972.332827]  do_splice_direct+0x1bb/0x290
[ 2972.333139]  ? __pfx_do_splice_direct+0x10/0x10
[ 2972.333511]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2972.333896]  ? lock_is_held_type+0x9f/0x120
[ 2972.334249]  do_sendfile+0xb67/0x1300
[ 2972.334559]  ? __pfx_do_sendfile+0x10/0x10
[ 2972.334904]  __x64_sys_sendfile64+0x1d5/0x210
[ 2972.335250]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2972.335634]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2972.336032]  do_syscall_64+0x3f/0x90
[ 2972.336317]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2972.336707] RIP: 0033:0x7fa51deffb19
[ 2972.336976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.338273] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2972.338823] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 2972.339333] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2972.339848] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.340372] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2972.340890] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 2972.341438]  </TASK>
03:28:36 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 68)

03:28:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 2972.440850] loop7: detected capacity change from 0 to 40
03:28:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 63)

03:28:36 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
rmdir(&(0x7f0000000040)='./file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:28:36 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 56)

[ 2972.577778] loop4: detected capacity change from 0 to 40
03:28:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0)

03:28:36 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 69)

03:28:36 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
sendfile(r1, r0, &(0x7f0000000000)=0x3, 0x1ff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000002c0)={0xffb, 0x0, 0x1, 0x0, 0x3, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280))
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000001c0))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x1)
unlink(&(0x7f0000000180)='./file1\x00')

[ 2972.617226] FAULT_INJECTION: forcing a failure.
[ 2972.617226] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2972.618115] CPU: 0 PID: 12547 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2972.618721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.619309] Call Trace:
[ 2972.619501]  <TASK>
[ 2972.619681]  dump_stack_lvl+0xc1/0xf0
[ 2972.619985]  should_fail_ex+0x4b4/0x5b0
[ 2972.620295]  __should_fail_alloc_page+0xe0/0x110
[ 2972.620682]  prepare_alloc_pages+0x178/0x500
[ 2972.621029]  ? __pfx_lock_acquire+0x10/0x10
[ 2972.621365]  __alloc_pages_bulk+0x156/0x10e0
[ 2972.621717]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2972.622271]  ? __pfx___alloc_pages_bulk+0x10/0x10
[ 2972.622706]  ? copy_splice_read+0x15b/0x900
[ 2972.623042]  ? kasan_set_track+0x25/0x30
[ 2972.623340]  ? __kasan_kmalloc+0x7f/0x90
[ 2972.623664]  copy_splice_read+0x190/0x900
[ 2972.623984]  ? lock_is_held_type+0x9f/0x120
[ 2972.624311]  ? __pfx_copy_splice_read+0x10/0x10
[ 2972.624667]  ? inode_security+0x105/0x140
[ 2972.624982]  ? fsnotify_perm.part.0+0x248/0x680
[ 2972.625343]  ? security_file_permission+0xb5/0xe0
[ 2972.625709]  ? __pfx_copy_splice_read+0x10/0x10
[ 2972.626068]  vfs_splice_read+0x238/0x2d0
[ 2972.626400]  splice_direct_to_actor+0x2aa/0x9d0
[ 2972.626756]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2972.627129]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2972.627513]  ? security_file_permission+0xb5/0xe0
[ 2972.627614] loop6: detected capacity change from 0 to 40
[ 2972.627878]  do_splice_direct+0x1bb/0x290
[ 2972.628879]  ? __pfx_do_splice_direct+0x10/0x10
[ 2972.629241]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2972.629642]  ? lock_is_held_type+0x9f/0x120
[ 2972.629966]  do_sendfile+0xb67/0x1300
[ 2972.630272]  ? __pfx_do_sendfile+0x10/0x10
[ 2972.630593]  __x64_sys_sendfile64+0x1d5/0x210
[ 2972.630928]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2972.631303]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2972.631697]  do_syscall_64+0x3f/0x90
[ 2972.631987]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2972.632361] RIP: 0033:0x7fc1c5d62b19
[ 2972.632645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.633902] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2972.634447] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2972.634957] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2972.635454] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.635957] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2972.636454] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2972.636984]  </TASK>
03:28:36 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0)

[ 2972.683337] FAULT_INJECTION: forcing a failure.
[ 2972.683337] name failslab, interval 1, probability 0, space 0, times 0
[ 2972.683364] CPU: 0 PID: 12555 Comm: syz-executor.7 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2972.683384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2972.683395] Call Trace:
[ 2972.683402]  <TASK>
[ 2972.683409]  dump_stack_lvl+0xc1/0xf0
[ 2972.683443]  should_fail_ex+0x4b4/0x5b0
[ 2972.683473]  ? jbd2__journal_start+0x194/0x810
[ 2972.683499]  should_failslab+0x9/0x20
[ 2972.683520]  kmem_cache_alloc+0x61/0x390
[ 2972.683558]  jbd2__journal_start+0x194/0x810
[ 2972.683592]  __ext4_journal_start_sb+0x3d7/0x560
[ 2972.683616]  ? ext4_do_writepages+0xdae/0x3150
[ 2972.683637]  ? ext4_meta_trans_blocks+0x252/0x310
[ 2972.683675]  ext4_do_writepages+0xdae/0x3150
[ 2972.683726]  ? lock_acquire+0x19a/0x4c0
[ 2972.683749]  ? do_writepages+0x1ad/0x650
03:28:36 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 64)

[ 2972.683782]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 2972.683823]  ? lock_is_held_type+0x9f/0x120
[ 2972.683861]  ext4_writepages+0x2fc/0x760
[ 2972.683884]  ? __pfx_ext4_writepages+0x10/0x10
[ 2972.683934]  ? find_held_lock+0x2c/0x110
[ 2972.683971]  ? __pfx_ext4_writepages+0x10/0x10
[ 2972.683991]  do_writepages+0x1ad/0x650
[ 2972.684022]  ? __pfx_do_writepages+0x10/0x10
[ 2972.684047]  ? do_raw_spin_lock+0x125/0x270
[ 2972.684077]  ? do_raw_spin_unlock+0x53/0x220
[ 2972.684106]  ? _raw_spin_unlock+0x1e/0x40
[ 2972.684133]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 2972.684172]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 2972.684203]  __filemap_fdatawrite_range+0xba/0x100
[ 2972.684235]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 2972.684265]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2972.684310]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 2972.684331]  ? lock_release+0x1e3/0x680
[ 2972.684362]  file_write_and_wait_range+0xd2/0x140
[ 2972.684398]  ext4_sync_file+0x25a/0xde0
[ 2972.684420]  ? __pfx_ext4_sync_file+0x10/0x10
[ 2972.684445]  vfs_fsync_range+0x147/0x240
[ 2972.684475]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 2972.684492]  ? iter_file_splice_write+0x162/0xcb0
[ 2972.684518]  ext4_file_write_iter+0x36d/0x19b0
[ 2972.684539]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 2972.684579]  ? iter_file_splice_write+0x162/0xcb0
[ 2972.684598]  ? kasan_save_stack+0x32/0x50
[ 2972.684623]  ? kasan_save_stack+0x22/0x50
[ 2972.684648]  ? kasan_set_track+0x25/0x30
[ 2972.684676]  ? __kasan_kmalloc+0x7f/0x90
[ 2972.684700]  ? __kmalloc+0x5d/0x160
[ 2972.684720]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 2972.684738]  ? do_splice_direct+0x1bb/0x290
[ 2972.684767]  ? do_sendfile+0xb67/0x1300
[ 2972.684784]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 2972.684808]  ? do_syscall_64+0x3f/0x90
[ 2972.684838]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2972.684859]  ? __pfx_perf_trace_lock+0x10/0x10
[ 2972.684885]  ? lock_is_held_type+0x9f/0x120
[ 2972.684926]  do_iter_readv_writev+0x217/0x3c0
[ 2972.684960]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2972.684993]  ? avc_policy_seqno+0x9/0x20
[ 2972.685033]  ? security_file_permission+0xb5/0xe0
[ 2972.685076]  do_iter_write+0x186/0x820
[ 2972.685097]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 2972.685122]  ? iter_file_splice_write+0x162/0xcb0
[ 2972.685143]  ? kasan_set_track+0x25/0x30
[ 2972.685175]  vfs_iter_write+0x7a/0xb0
[ 2972.685198]  iter_file_splice_write+0x737/0xcb0
[ 2972.685240]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2972.685260]  ? __pfx_copy_splice_read+0x10/0x10
[ 2972.685296]  ? inode_security+0x105/0x140
[ 2972.685334]  ? security_file_permission+0xb5/0xe0
[ 2972.685370]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 2972.685393]  direct_splice_actor+0x119/0x180
[ 2972.685429]  splice_direct_to_actor+0x349/0x9d0
[ 2972.685464]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2972.685505]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2972.685538]  ? security_file_permission+0xb5/0xe0
[ 2972.685580]  do_splice_direct+0x1bb/0x290
[ 2972.685612]  ? __pfx_do_splice_direct+0x10/0x10
[ 2972.685645]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2972.685685]  ? lock_is_held_type+0x9f/0x120
[ 2972.685720]  do_sendfile+0xb67/0x1300
[ 2972.685754]  ? __pfx_do_sendfile+0x10/0x10
[ 2972.685795]  __x64_sys_sendfile64+0x1d5/0x210
[ 2972.685822]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2972.685853]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2972.685885]  do_syscall_64+0x3f/0x90
[ 2972.685915]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2972.685935] RIP: 0033:0x7f435bfddb19
[ 2972.685949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2972.685966] RSP: 002b:00007f4359553188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2972.685985] RAX: ffffffffffffffda RBX: 00007f435c0f0f60 RCX: 00007f435bfddb19
[ 2972.685998] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2972.686009] RBP: 00007f43595531d0 R08: 0000000000000000 R09: 0000000000000000
[ 2972.686022] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2972.686034] R13: 00007ffd8aac61af R14: 00007f4359553300 R15: 0000000000022000
[ 2972.686073]  </TASK>
[ 2972.686290] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 16010; err -12
[ 2972.690828] loop3: detected capacity change from 0 to 40
[ 2972.807924] syz-executor.6: attempt to access beyond end of device
[ 2972.807924] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2972.807955] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 2972.825933] loop4: detected capacity change from 0 to 40
[ 2986.490088] loop4: detected capacity change from 0 to 40
[ 2986.496458] loop7: detected capacity change from 0 to 40
03:28:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 65)

03:28:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 57)

03:28:50 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xff03000000000000)

03:28:50 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 70)

03:28:50 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:28:50 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880), 0x4000101, 0x0)

03:28:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800000, 0x0)
pwritev(r2, &(0x7f0000000480)=[{&(0x7f0000000180)="c242792a68cc3bc642a893452fa0906abf545563ecd2bb41c738ae5fcb6720406b333b268ce4", 0x26}, {&(0x7f00000001c0)="0567f9e4f0cf0c012ae4", 0xa}, {&(0x7f0000000240)="76d85ce9d41a41792e9caa9205899cc539bf6ed5ad192e54b3e2d890ce976e03d15738996589ad2931e3ce003a2ff6cf28d2608ab9aaa45b97e73343478e5977e4826ee24b228dd0bd8c62a9d5a94bfe8a5fc66e323f0f8402dfbf23b06488c5a6c68001f73fc34a62af035f6d771226a48baaac9ffe54d0efc97553d2885beb9b8d8cbf155d34a3c519ef1618a2d66e7deb3f0e507e4c31bdcb99f332a41ac2e9255db252c661166179732169134a2e09e2e1321081d33e458f22430e42a33f61748bd05bc49f00ab8c249b61eddbcf9bca34", 0xd3}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000440)="c2", 0x1}], 0x5, 0x20, 0x6)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:28:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x27}, 0x0, 0x0, r0, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:28:50 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)

[ 2986.550586] loop3: detected capacity change from 0 to 40
[ 2986.550739] loop6: detected capacity change from 0 to 40
03:28:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 66)

[ 2986.633285] syz-executor.6: attempt to access beyond end of device
[ 2986.633285] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2986.635066] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:28:50 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(r0, &(0x7f0000000000)=""/49, 0x31, 0x6e)
unlink(&(0x7f0000000180)='./file1\x00')

03:28:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 58)

03:28:50 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)

[ 2986.672779] loop4: detected capacity change from 0 to 40
03:28:50 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 71)

[ 2986.729627] FAULT_INJECTION: forcing a failure.
[ 2986.729627] name failslab, interval 1, probability 0, space 0, times 0
[ 2986.730512] CPU: 0 PID: 12595 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 2986.731072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2986.731630] Call Trace:
[ 2986.731819]  <TASK>
[ 2986.731989]  dump_stack_lvl+0xc1/0xf0
[ 2986.732286]  should_fail_ex+0x4b4/0x5b0
[ 2986.732585]  ? copy_splice_read+0x15b/0x900
[ 2986.732906]  should_failslab+0x9/0x20
[ 2986.733195]  __kmem_cache_alloc_node+0x66/0x310
[ 2986.733538]  ? copy_splice_read+0x15b/0x900
[ 2986.733864]  ? __kmem_cache_free+0xe1/0x330
[ 2986.734189]  ? copy_splice_read+0x15b/0x900
[ 2986.734534]  __kmalloc+0x4d/0x160
[ 2986.734804]  copy_splice_read+0x15b/0x900
[ 2986.735116]  ? lock_is_held_type+0x9f/0x120
[ 2986.735448]  ? __pfx_copy_splice_read+0x10/0x10
[ 2986.735799]  ? inode_security+0x105/0x140
[ 2986.736118]  ? fsnotify_perm.part.0+0x248/0x680
[ 2986.736467]  ? security_file_permission+0xb5/0xe0
[ 2986.736835]  ? __pfx_copy_splice_read+0x10/0x10
[ 2986.737179]  vfs_splice_read+0x238/0x2d0
[ 2986.737500]  splice_direct_to_actor+0x2aa/0x9d0
[ 2986.737853]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2986.738230]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2986.738622]  ? security_file_permission+0xb5/0xe0
[ 2986.739000]  do_splice_direct+0x1bb/0x290
[ 2986.739311]  ? __pfx_do_splice_direct+0x10/0x10
[ 2986.739667]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2986.740050]  ? lock_is_held_type+0x9f/0x120
[ 2986.740380]  do_sendfile+0xb67/0x1300
[ 2986.740673]  ? __pfx_do_sendfile+0x10/0x10
[ 2986.741007]  __x64_sys_sendfile64+0x1d5/0x210
[ 2986.741334]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 2986.741711]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 2986.742093]  do_syscall_64+0x3f/0x90
[ 2986.742397]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 2986.742763] RIP: 0033:0x7fc1c5d62b19
[ 2986.743036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2986.744279] RSP: 002b:00007fc1c32d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2986.744807] RAX: ffffffffffffffda RBX: 00007fc1c5e75f60 RCX: 00007fc1c5d62b19
[ 2986.745306] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[ 2986.745817] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 2986.746334] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 2986.746861] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 2986.747402]  </TASK>
[ 2986.753030] loop3: detected capacity change from 0 to 40
03:28:50 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
mknod(&(0x7f0000000040)='./file2\x00', 0x8000, 0x101)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 2986.796641] loop7: detected capacity change from 0 to 40
03:28:50 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0xb1e9}, 0x80, 0x0, 0x7f, 0x1, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1c6c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, 0x0, 0x0, 0x0)

[ 2986.827025] loop6: detected capacity change from 0 to 40
03:28:50 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 67)

[ 2986.932789] syz-executor.6: attempt to access beyond end of device
[ 2986.932789] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 2986.934183] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:28:50 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 59)

[ 2987.027942] loop4: detected capacity change from 0 to 40
03:29:05 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r3 = dup3(r0, r2, 0x80000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000240)={0x0, 0x9, 0x5, 0x1})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:29:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x4c400, 0x7, 0x0, 0x6, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:29:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 72)

03:29:05 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xffff000000000000)

03:29:05 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:29:05 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
sendfile(r1, r0, &(0x7f0000000000)=0x3, 0x1ff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000002c0)={0xffb, 0x0, 0x1, 0x0, 0x3, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280))
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000001c0))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x1)
unlink(&(0x7f0000000180)='./file1\x00')

03:29:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 60)

03:29:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 68)

[ 3001.307961] loop6: detected capacity change from 0 to 40
[ 3001.309470] loop7: detected capacity change from 0 to 40
[ 3001.311894] loop2: detected capacity change from 0 to 40
[ 3001.312726] loop3: detected capacity change from 0 to 40
[ 3001.363364] loop4: detected capacity change from 0 to 40
03:29:05 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 61)

03:29:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 73)

03:29:05 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
sendfile(r1, r0, &(0x7f0000000000)=0x3, 0x1ff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000002c0)={0xffb, 0x0, 0x1, 0x0, 0x3, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280))
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000001c0))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x1)
unlink(&(0x7f0000000180)='./file1\x00')

03:29:05 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
r4 = syz_open_pts(0xffffffffffffffff, 0x8100)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000001c0)={0x6c, 0x0, 0x80000000, 0x6, 0x6, "6628d3b23d441eca14b1f06fdf8ec05e29383f", 0x5bb6, 0x9})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r5, 0x5441, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB="bc35dd3b609cb28c1b6b80d9c295652b28c57dbff63d79f06364d4bbff5cb50dab30e5f9c081fa4f512244e97c4a22829dc73ea2c6e3b95ba232377772c08254dd59d79219b9a7a61512736d5ac79ffa99dc96fa2ac2e0b018636d66753d23ce4978bf121ab3c3312feae33770d268aae2cb42d7075177a627125c167998a2e476c95e7a51e38f2542f379f2a0920032da8ef4", @ANYRESDEC=r5, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYBLOB="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"])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:29:05 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
chroot(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3001.481537] loop7: detected capacity change from 0 to 40
[ 3001.502718] loop2: detected capacity change from 0 to 40
[ 3001.514353] FAULT_INJECTION: forcing a failure.
[ 3001.514353] name failslab, interval 1, probability 0, space 0, times 0
[ 3001.516048] CPU: 1 PID: 12645 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3001.517129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3001.518202] Call Trace:
[ 3001.518547]  <TASK>
[ 3001.518875]  dump_stack_lvl+0xc1/0xf0
[ 3001.519429]  should_fail_ex+0x4b4/0x5b0
[ 3001.519984]  ? jbd2__journal_start+0x194/0x810
[ 3001.520627]  should_failslab+0x9/0x20
[ 3001.521158]  kmem_cache_alloc+0x61/0x390
[ 3001.521718]  ? lock_is_held_type+0x9f/0x120
[ 3001.522338]  jbd2__journal_start+0x194/0x810
[ 3001.522977]  __ext4_journal_start_sb+0x3d7/0x560
[ 3001.523634]  ? ext4_dirty_inode+0xa5/0x130
[ 3001.524226]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 3001.524727] loop6: detected capacity change from 0 to 40
[ 3001.524858]  ext4_dirty_inode+0xa5/0x130
[ 3001.525797]  __mark_inode_dirty+0x1aa/0xc10
[ 3001.526408]  generic_write_end+0x319/0x3d0
[ 3001.526996]  ext4_da_write_end+0x1e4/0xb10
[ 3001.527590]  generic_perform_write+0x333/0x5e0
[ 3001.528250]  ? __pfx_generic_perform_write+0x10/0x10
[ 3001.528946]  ? __pfx_file_modified_flags+0x10/0x10
[ 3001.529638]  ext4_buffered_write_iter+0x123/0x3d0
[ 3001.530227] loop3: detected capacity change from 0 to 40
[ 3001.530292]  ? iter_file_splice_write+0x162/0xcb0
[ 3001.531348]  ext4_file_write_iter+0x36d/0x19b0
[ 3001.531988]  ? iter_file_splice_write+0x162/0xcb0
[ 3001.532638]  ? kasan_save_stack+0x32/0x50
[ 3001.533220]  ? kasan_save_stack+0x22/0x50
[ 3001.533804]  ? kasan_set_track+0x25/0x30
[ 3001.534374]  ? __kasan_kmalloc+0x7f/0x90
[ 3001.534397] FAT-fs (loop3): Unrecognized mount option "ÿÿ¼5Ý;`œ²Œk€Ù•e+(Å}¿ö=yðcdÔ»ÿ\µ«0åùÀ�úOQ"Dé|J"‚�Ç>¢Æã¹[¢27wrÀ‚TÝY×’¹§¦smZÇŸú™Ü–ú*Âà°cmfu=#ÎIx¿³Ã1/êã7pÒhªâËB×Qw¦'\y˜¢ävÉ^zQã�%Bóyò ’" or missing value
[ 3001.537319]  ? __kmalloc+0x5d/0x160
[ 3001.537829]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3001.538497]  ? do_splice_direct+0x1bb/0x290
[ 3001.539112]  ? do_sendfile+0xb67/0x1300
[ 3001.539655]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3001.540301]  ? do_syscall_64+0x3f/0x90
[ 3001.540857]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3001.541566]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3001.542205]  ? lock_is_held_type+0x9f/0x120
[ 3001.542840]  do_iter_readv_writev+0x217/0x3c0
[ 3001.543476]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3001.544173]  ? avc_policy_seqno+0x9/0x20
[ 3001.544761]  ? security_file_permission+0xb5/0xe0
[ 3001.545459]  do_iter_write+0x186/0x820
[ 3001.546012]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3001.546688]  ? iter_file_splice_write+0x162/0xcb0
[ 3001.547330]  ? kasan_set_track+0x25/0x30
[ 3001.547910]  vfs_iter_write+0x7a/0xb0
[ 3001.548439]  iter_file_splice_write+0x737/0xcb0
[ 3001.549099]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3001.549789]  ? __pfx_copy_splice_read+0x10/0x10
[ 3001.550452]  ? inode_security+0x105/0x140
[ 3001.551076]  ? security_file_permission+0xb5/0xe0
[ 3001.551763]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3001.552467]  direct_splice_actor+0x119/0x180
[ 3001.553107]  splice_direct_to_actor+0x349/0x9d0
[ 3001.553760]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3001.554431]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3001.555166]  ? security_file_permission+0xb5/0xe0
[ 3001.555860]  do_splice_direct+0x1bb/0x290
[ 3001.556448]  ? __pfx_do_splice_direct+0x10/0x10
[ 3001.557106]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3001.557830]  ? lock_is_held_type+0x9f/0x120
[ 3001.558445]  do_sendfile+0xb67/0x1300
[ 3001.558995]  ? __pfx_do_sendfile+0x10/0x10
[ 3001.559590]  __x64_sys_sendfile64+0x1d5/0x210
[ 3001.560217]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3001.560918]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3001.561641]  do_syscall_64+0x3f/0x90
[ 3001.562183]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3001.562892] RIP: 0033:0x7fa51deffb19
[ 3001.563405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3001.565768] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3001.566782] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3001.567718] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3001.568648] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3001.569596] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3001.570538] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3001.571535]  </TASK>
03:29:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 69)

03:29:05 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0)
fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x46)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
symlinkat(&(0x7f00000001c0)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3001.632275] syz-executor.6: attempt to access beyond end of device
[ 3001.632275] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3001.633399] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:29:05 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 74)

[ 3001.669333] syz-executor.6: attempt to access beyond end of device
[ 3001.669333] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3001.670322] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:29:05 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r3 = dup3(r0, r2, 0x80000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000240)={0x0, 0x9, 0x5, 0x1})
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3001.696680] loop4: detected capacity change from 0 to 40
[ 3001.739980] loop2: detected capacity change from 0 to 40
[ 3001.749998] loop7: detected capacity change from 0 to 40
[ 3001.772466] FAULT_INJECTION: forcing a failure.
[ 3001.772466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3001.773386] CPU: 0 PID: 12663 Comm: syz-executor.4 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3001.773952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3001.774526] Call Trace:
[ 3001.774728]  <TASK>
[ 3001.774910]  dump_stack_lvl+0xc1/0xf0
[ 3001.775214]  should_fail_ex+0x4b4/0x5b0
[ 3001.775523]  _copy_to_user+0x30/0xc0
[ 3001.775817]  simple_read_from_buffer+0xd0/0x170
[ 3001.776168]  proc_fail_nth_read+0x1a6/0x290
[ 3001.776510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3001.776876]  ? security_file_permission+0xb5/0xe0
[ 3001.777257]  vfs_read+0x1de/0x8f0
[ 3001.777524]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3001.777865]  ? __pfx_vfs_read+0x10/0x10
[ 3001.778165]  ? __fget_files+0x267/0x480
[ 3001.778480]  ksys_read+0x122/0x250
[ 3001.778769]  ? __pfx_ksys_read+0x10/0x10
[ 3001.779088]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3001.779472]  do_syscall_64+0x3f/0x90
[ 3001.779758]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3001.780129] RIP: 0033:0x7fc1c5d1569c
[ 3001.780402] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 3001.781618] RSP: 002b:00007fc1c32d8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3001.782176] RAX: ffffffffffffffda RBX: 0000000000002869 RCX: 00007fc1c5d1569c
[ 3001.782704] RDX: 000000000000000f RSI: 00007fc1c32d81e0 RDI: 0000000000000007
[ 3001.783226] RBP: 00007fc1c32d81d0 R08: 0000000000000000 R09: 0000000000000000
[ 3001.783740] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3001.784263] R13: 00007fffe2e9f16f R14: 00007fc1c32d8300 R15: 0000000000022000
[ 3001.784820]  </TASK>
03:29:05 executing program 3:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x120, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @fda={0x66646185, 0x3, 0x1, 0x34}, @fda={0x66646185, 0xa, 0x7fffffff, 0x4}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x400}, @free_buffer, @increfs_done={0x40106308, 0x5}, @dead_binder_done, @acquire={0x40046305, 0x3}, @request_death={0x400c630e, 0x49}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/21, 0x15, 0x0, 0x30}, @flat=@binder={0x73622a85, 0x1}, @fd}, &(0x7f0000000780)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/116, 0x74, 0x0, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/91, 0x5b, 0x2, 0x1d}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}], 0x88, 0x0, &(0x7f0000000500)="6f30c0d56a0feb549ca2ec2b17bd054ca10701186cd517b29144471fa0c5d0201fceb3af52c2f8c2a740496bcde3f76390ef3f800c558548ec9f9e2fec8a49930a16b2dd172d5158692e5249cd37960a88a6c623a2d24e8524acbc38df656fbc799323ec1067986191496afe6b29d2fe1ac5635663973bcf9e97af8c812ba53d6477c3eefd1934fa"})
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000400)=0x100000000)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
connect(r2, &(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x0, 0x3, 0x4, {0xa, 0x4e20, 0x0, @local, 0x1}}}, 0x80)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r4, 0x8, 0x6, 0x1e1ef8b6)
unlink(&(0x7f0000000180)='./file1\x00')
openat2(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x40, 0x2f8e07498ac1bb36}, 0x18)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240300002dc6ebb41e74ba5d4a6c9d361f0f4b4dc778cfd4027c806058a239859c7d140498c2ed3d200b74e978584bb40d0e91bada39d19b2156975dc3096048adba8a3e839b54d8188d7dd6352a502f94c6bee47548", @ANYRES16=0x0, @ANYBLOB="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"], 0x324}, 0x1, 0x0, 0x0, 0x5}, 0x220000c4)

03:29:05 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES16, @ANYRES16=0x0])
openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x680020, 0x8)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x10000027f)
recvmsg$unix(r4, &(0x7f0000001ac0)={&(0x7f0000001280), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001300)=""/73, 0x49}, {&(0x7f0000001380)=""/253, 0xfd}, {&(0x7f0000001480)=""/86, 0x56}, {&(0x7f0000001500)=""/211, 0xd3}, {&(0x7f0000001600)=""/170, 0xaa}, {&(0x7f00000016c0)=""/143, 0x8f}, {&(0x7f0000001780)=""/5, 0x5}, {&(0x7f00000017c0)=""/175, 0xaf}, {&(0x7f0000001880)=""/241, 0xf1}], 0x9, &(0x7f0000001a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat2(r2, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0xa5, 0x7}, 0x18)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3001.834623] loop6: detected capacity change from 0 to 40
[ 3001.838805] syz-executor.3: attempt to access beyond end of device
[ 3001.838805] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3001.843640] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ" or missing value
[ 3001.844228] FAT-fs (loop3): unable to read boot sector
[ 3001.866764] syz-executor.3: attempt to access beyond end of device
[ 3001.866764] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3001.873088] FAT-fs (loop3): unable to read boot sector
[ 3002.677469] loop6: detected capacity change from 0 to 40
[ 3002.685838] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ" or missing value
03:29:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 62)

03:29:19 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r3 = dup3(r0, r2, 0x80000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000240)={0x0, 0x9, 0x5, 0x1})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:29:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 75)

03:29:19 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@updpolicy={0xc4, 0x13, 0x1, 0x0, 0x0, {{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000000)='./file2\x00')
unlink(&(0x7f0000000180)='./file1\x00')
openat(r0, &(0x7f0000000040)='./file1\x00', 0x18080, 0x10)
openat(r0, &(0x7f00000001c0)='./file1\x00', 0x18001, 0x194)

03:29:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:29:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x40000)

03:29:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:29:19 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xffffff7f00000000)

[ 3015.857957] loop4: detected capacity change from 0 to 40
[ 3015.869797] loop3: detected capacity change from 0 to 40
[ 3015.872755] syz-executor.6: attempt to access beyond end of device
[ 3015.872755] loop6: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3015.873874] FAT-fs (loop6): unable to read boot sector
[ 3015.878274] loop2: detected capacity change from 0 to 40
[ 3015.883782] loop7: detected capacity change from 0 to 40
[ 3015.888053] FAULT_INJECTION: forcing a failure.
[ 3015.888053] name failslab, interval 1, probability 0, space 0, times 0
[ 3015.889101] CPU: 0 PID: 12691 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3015.889877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3015.890610] Call Trace:
[ 3015.890890]  <TASK>
[ 3015.891117]  dump_stack_lvl+0xc1/0xf0
[ 3015.891501]  should_fail_ex+0x4b4/0x5b0
[ 3015.891901]  ? jbd2__journal_start+0x194/0x810
[ 3015.892340]  should_failslab+0x9/0x20
[ 3015.892712]  kmem_cache_alloc+0x61/0x390
[ 3015.893102]  ? lock_is_held_type+0x9f/0x120
[ 3015.893546]  jbd2__journal_start+0x194/0x810
[ 3015.893997]  __ext4_journal_start_sb+0x3d7/0x560
[ 3015.894461]  ? ext4_dirty_inode+0xa5/0x130
[ 3015.894888]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 3015.895338]  ext4_dirty_inode+0xa5/0x130
[ 3015.895742]  __mark_inode_dirty+0x1aa/0xc10
[ 3015.896179]  generic_write_end+0x319/0x3d0
[ 3015.896599]  ext4_da_write_end+0x1e4/0xb10
[ 3015.897041]  generic_perform_write+0x333/0x5e0
[ 3015.897526]  ? __pfx_generic_perform_write+0x10/0x10
[ 3015.898026]  ? __pfx_file_modified_flags+0x10/0x10
[ 3015.898527]  ext4_buffered_write_iter+0x123/0x3d0
[ 3015.899014]  ? iter_file_splice_write+0x162/0xcb0
[ 3015.899490]  ext4_file_write_iter+0x36d/0x19b0
[ 3015.899933]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 3015.900429]  ? iter_file_splice_write+0x162/0xcb0
[ 3015.900890]  ? kasan_save_stack+0x32/0x50
[ 3015.901304]  ? kasan_save_stack+0x22/0x50
[ 3015.901712]  ? kasan_set_track+0x25/0x30
[ 3015.902091]  ? __kasan_kmalloc+0x7f/0x90
[ 3015.902464]  ? __kmalloc+0x5d/0x160
[ 3015.902822]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3015.903193]  ? do_splice_direct+0x1bb/0x290
[ 3015.903531]  ? do_sendfile+0xb67/0x1300
[ 3015.903831]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3015.904196]  ? do_syscall_64+0x3f/0x90
[ 3015.904501]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3015.904900]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3015.905258]  ? lock_is_held_type+0x9f/0x120
[ 3015.905601]  do_iter_readv_writev+0x217/0x3c0
[ 3015.905955]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3015.906344]  ? avc_policy_seqno+0x9/0x20
[ 3015.906671]  ? security_file_permission+0xb5/0xe0
[ 3015.907056]  do_iter_write+0x186/0x820
[ 3015.907355]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3015.907724]  ? iter_file_splice_write+0x162/0xcb0
[ 3015.908089]  ? kasan_set_track+0x25/0x30
[ 3015.908412]  vfs_iter_write+0x7a/0xb0
[ 3015.908701]  iter_file_splice_write+0x737/0xcb0
[ 3015.909084]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3015.909460]  ? __pfx_copy_splice_read+0x10/0x10
[ 3015.909835]  ? inode_security+0x105/0x140
[ 3015.910163]  ? security_file_permission+0xb5/0xe0
[ 3015.910542]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3015.910942]  direct_splice_actor+0x119/0x180
[ 3015.911294]  splice_direct_to_actor+0x349/0x9d0
[ 3015.911659]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3015.912041]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3015.912436]  ? security_file_permission+0xb5/0xe0
[ 3015.912812]  do_splice_direct+0x1bb/0x290
[ 3015.913138]  ? __pfx_do_splice_direct+0x10/0x10
[ 3015.913496]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3015.913908]  ? lock_is_held_type+0x9f/0x120
[ 3015.914241]  do_sendfile+0xb67/0x1300
[ 3015.914557]  ? __pfx_do_sendfile+0x10/0x10
[ 3015.914908]  __x64_sys_sendfile64+0x1d5/0x210
[ 3015.915257]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3015.915631]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3015.916039]  do_syscall_64+0x3f/0x90
[ 3015.916329]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3015.916716] RIP: 0033:0x7fa51deffb19
[ 3015.916993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3015.918304] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3015.918859] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3015.919365] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3015.919869] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3015.920389] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3015.920897] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3015.921441]  </TASK>
03:29:19 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r3 = dup3(r0, r2, 0x80000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000240)={0x0, 0x9, 0x5, 0x1})
sendfile(r2, r1, 0x0, 0xfffffdef)

03:29:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3016.042443] loop2: detected capacity change from 0 to 40
03:29:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 63)

03:29:19 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x40000)

03:29:20 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r2 = dup3(r0, r1, 0x80000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000240)={0x0, 0x9, 0x5, 0x1})

[ 3016.146619] loop2: detected capacity change from 0 to 40
[ 3016.149638] syz-executor.3: attempt to access beyond end of device
[ 3016.149638] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3016.160551] FAT-fs (loop3): unable to read boot sector
[ 3016.187626] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
[ 3016.200762] FAULT_INJECTION: forcing a failure.
[ 3016.200762] name failslab, interval 1, probability 0, space 0, times 0
[ 3016.201552] CPU: 1 PID: 12714 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3016.202236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3016.202836] Call Trace:
[ 3016.203021]  <TASK>
[ 3016.203190]  dump_stack_lvl+0xc1/0xf0
[ 3016.203480]  should_fail_ex+0x4b4/0x5b0
[ 3016.203770]  ? jbd2__journal_start+0x194/0x810
[ 3016.204097]  should_failslab+0x9/0x20
[ 3016.204372]  kmem_cache_alloc+0x61/0x390
[ 3016.204669]  ? lock_is_held_type+0x9f/0x120
[ 3016.204990]  jbd2__journal_start+0x194/0x810
[ 3016.205309]  __ext4_journal_start_sb+0x3d7/0x560
[ 3016.205646]  ? ext4_dirty_inode+0xa5/0x130
[ 3016.205947]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 3016.206289]  ext4_dirty_inode+0xa5/0x130
[ 3016.206578]  __mark_inode_dirty+0x1aa/0xc10
[ 3016.206901]  generic_write_end+0x319/0x3d0
[ 3016.207207]  ext4_da_write_end+0x1e4/0xb10
[ 3016.207515]  generic_perform_write+0x333/0x5e0
[ 3016.207849]  ? __pfx_generic_perform_write+0x10/0x10
[ 3016.208209]  ? __pfx_file_modified_flags+0x10/0x10
[ 3016.208559]  ext4_buffered_write_iter+0x123/0x3d0
[ 3016.208895]  ? iter_file_splice_write+0x162/0xcb0
[ 3016.209233]  ext4_file_write_iter+0x36d/0x19b0
[ 3016.209555]  ? iter_file_splice_write+0x162/0xcb0
[ 3016.209893]  ? kasan_save_stack+0x32/0x50
[ 3016.210203]  ? kasan_save_stack+0x22/0x50
[ 3016.210502]  ? kasan_set_track+0x25/0x30
[ 3016.210813]  ? __kasan_kmalloc+0x7f/0x90
[ 3016.211102]  ? __kmalloc+0x5d/0x160
[ 3016.211367]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3016.211715]  ? do_splice_direct+0x1bb/0x290
[ 3016.212029]  ? do_sendfile+0xb67/0x1300
[ 3016.212303]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3016.212639]  ? do_syscall_64+0x3f/0x90
[ 3016.212941]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3016.213314]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3016.213649]  ? lock_is_held_type+0x9f/0x120
[ 3016.213969]  do_iter_readv_writev+0x217/0x3c0
[ 3016.214323]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3016.214683]  ? avc_policy_seqno+0x9/0x20
[ 3016.215015]  ? security_file_permission+0xb5/0xe0
[ 3016.215385]  do_iter_write+0x186/0x820
[ 3016.215678]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3016.216059]  ? iter_file_splice_write+0x162/0xcb0
[ 3016.216429]  ? kasan_set_track+0x25/0x30
[ 3016.216746]  vfs_iter_write+0x7a/0xb0
[ 3016.217020]  iter_file_splice_write+0x737/0xcb0
[ 3016.217369]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3016.217735]  ? __pfx_copy_splice_read+0x10/0x10
[ 3016.218095]  ? inode_security+0x105/0x140
[ 3016.218421]  ? security_file_permission+0xb5/0xe0
[ 3016.218781]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3016.219172]  direct_splice_actor+0x119/0x180
[ 3016.219504]  splice_direct_to_actor+0x349/0x9d0
[ 3016.219858]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3016.220236]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3016.220628]  ? security_file_permission+0xb5/0xe0
[ 3016.220979]  do_splice_direct+0x1bb/0x290
[ 3016.221296]  ? __pfx_do_splice_direct+0x10/0x10
[ 3016.221633]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3016.222031]  ? lock_is_held_type+0x9f/0x120
[ 3016.222345]  do_sendfile+0xb67/0x1300
[ 3016.222639]  ? __pfx_do_sendfile+0x10/0x10
[ 3016.222968]  __x64_sys_sendfile64+0x1d5/0x210
[ 3016.223315]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3016.223666]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3016.224062]  do_syscall_64+0x3f/0x90
[ 3016.224342]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3016.224718] RIP: 0033:0x7fa51deffb19
[ 3016.224976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3016.226297] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3016.226818] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3016.227325] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3016.227834] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3016.228360] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3016.228854] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3016.229391]  </TASK>
[ 3016.725032] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
03:29:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000002a0)

03:29:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002880), 0x4000101, 0x40000)

03:29:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x1f}, {0x0, 0x0, 0x2843}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

[ 3030.381325] loop7: detected capacity change from 0 to 40
03:29:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0xffffffff00000000)

03:29:34 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
rename(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file1\x00')
fstat(r0, &(0x7f00000002c0))
lsetxattr$security_capability(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000480)=@v2={0x2000000, [{0x7f, 0x1000}, {0x7, 0x953}]}, 0x14, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x8000, 0xffffffffffffffff, 0x0)
r2 = signalfd(r0, &(0x7f00000001c0)={[0xffffffff]}, 0x8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000400)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x5, 0x81, 0x2, 0xf9, 0x0, 0x0, 0x40100, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x2}, 0x8188, 0x6, 0x9, 0x5, 0x8, 0x3, 0xfffe, 0x0, 0x10001, 0x0, 0x8}, r3, 0x1, 0xffffffffffffffff, 0x2)
fallocate(r2, 0x58, 0x10001, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:29:34 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
dup3(r0, r1, 0x80000)

03:29:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 64)

03:29:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 76)

[ 3030.394229] loop4: detected capacity change from 0 to 40
[ 3030.428716] loop6: detected capacity change from 0 to 40
[ 3030.432473] loop2: detected capacity change from 0 to 40
[ 3030.434047] loop3: detected capacity change from 0 to 40
[ 3030.448826] FAT-fs (loop6): bogus number of reserved sectors
[ 3030.449703] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 3030.485410] FAULT_INJECTION: forcing a failure.
[ 3030.485410] name failslab, interval 1, probability 0, space 0, times 0
[ 3030.486862] CPU: 1 PID: 12742 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3030.487904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3030.488925] Call Trace:
[ 3030.489265]  <TASK>
[ 3030.489572]  dump_stack_lvl+0xc1/0xf0
[ 3030.490097]  should_fail_ex+0x4b4/0x5b0
[ 3030.490629]  ? iter_file_splice_write+0x162/0xcb0
[ 3030.491278]  should_failslab+0x9/0x20
[ 3030.491775]  __kmem_cache_alloc_node+0x66/0x310
[ 3030.492394]  ? mark_held_locks+0x9e/0xe0
[ 3030.492921]  ? iter_file_splice_write+0x162/0xcb0
[ 3030.493550]  ? iter_file_splice_write+0x162/0xcb0
[ 3030.494162]  __kmalloc+0x4d/0x160
[ 3030.494761]  iter_file_splice_write+0x162/0xcb0
[ 3030.495375]  ? __kmem_cache_free+0xe1/0x330
[ 3030.495943]  ? copy_splice_read+0x65b/0x900
[ 3030.496524]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3030.497178]  ? __pfx_copy_splice_read+0x10/0x10
[ 3030.497808]  ? inode_security+0x105/0x140
[ 3030.498361]  ? security_file_permission+0xb5/0xe0
[ 3030.499012]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3030.499672]  direct_splice_actor+0x119/0x180
[ 3030.500268]  splice_direct_to_actor+0x349/0x9d0
[ 3030.500898]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3030.501547]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3030.502224]  ? security_file_permission+0xb5/0xe0
[ 3030.502871]  do_splice_direct+0x1bb/0x290
[ 3030.503447]  ? __pfx_do_splice_direct+0x10/0x10
[ 3030.504089]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3030.504790]  ? lock_is_held_type+0x9f/0x120
[ 3030.505386]  do_sendfile+0xb67/0x1300
[ 3030.505901]  ? __pfx_do_sendfile+0x10/0x10
[ 3030.506476]  __x64_sys_sendfile64+0x1d5/0x210
[ 3030.507101]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3030.507777]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3030.508477]  do_syscall_64+0x3f/0x90
[ 3030.508993]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3030.509678] RIP: 0033:0x7fa51deffb19
[ 3030.510177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3030.512462] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3030.513443] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3030.514335] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3030.515240] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3030.516121] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3030.516999] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3030.517914]  </TASK>
03:29:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:29:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:29:34 executing program 3:
r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffff120, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000240)="7ffeae565f65ec7928337043ce8d82d62e083c0a6260df18e000eee37aa7b3ba76a194c3fc692db823a622bb0f1f19cccdb3ce922a2efddde9ff153561cc65709edc121bb557ad0b70df073704500a682b3781c860e88262d5441727a3c88329a47c8f3b083c5518d27a6258fd6e0f5853687f989b2de3f08e5904290c72c099a71002fb35b62c9b37d4a6d65d1bae4c07ffcee4e47583c667584e807f6a9b", 0x9f, 0x101}, {&(0x7f00000001c0)="dcdd98db75cb89e352c4fa6c9c02a7b6c4af16f04ebabec61ba3b5cb", 0x1c, 0x3}, {&(0x7f0000000300)="b0ced4bbbb41ea7509034ff697aa6791f610e76068cf11c8187470654b928a", 0x1f, 0xdf}, {&(0x7f0000000340)="a09deb3618805609c0db292077617277d4a6f5ca7b2ae3fb318dc08f71f429c65922edc6691b2d4d6ab78f970f7551340b5b07464a0d48a904e1ce695100163e40d089eee88709ed8f61cfb72f837dfa82ca843864d6d25ba32ddc3562320d235d9b89cb622aacef2c16a6a637267db9add14934dc7a4c465fcb81a78f348daf17d7f170082fa1", 0x87, 0x800}, {&(0x7f0000000400)="320c4a381c734c22c073a4b6c5238b2b52cef1c09198bdd51b77fe1117da22de9a892a9cd9774c43b6c2c93735d069e037bb4561c2ea341817c69477c4d34801aa4ab9346d1eaf201875cba662a5416d4d1835820958ebf7d01e07215bbcb4b9c728b6b27fda04947a63c3240ff01bb785f1f20dcd275033a16521705e3accf30139ea731bf12657ab0239ed3cb3fa43f60fb25a9bb7cf5808053b6c3f97fe5a6dedeb1faa31270821458994d6fb46a3b7c33284eec7846d65f54e16245d2bd896147ac2cc1f043ac3d13f3be5188389d7f47a5aa4cead21ce9db97cb560e16482c28802f4959bf0bdba997dd43f62", 0xef, 0x8d}, {&(0x7f0000000500)="c1067e3b1e31c850ab8104a993af525dacb171eee798d2e119600a28221c8881848dd91454a235a6e0a97cfd30719f", 0x2f, 0x9}, {&(0x7f0000000540)="5bea3f830c8d721e8f74e67f45f3dcb260a5e873115e333d4d8c1585d6edca2c53e09cd82ea9c3c623d92d8a35644d72a83ca20344d1b9deffc254eccd53285a8a989e3dac7d1ad8298514e5ff225e", 0x4f, 0xffff}], 0x205000, &(0x7f0000000680)={[{@huge_advise}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@audit}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]})
fcntl$getflags(r0, 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
mknodat$loop(r1, &(0x7f00000006c0)='./file0/file0\x00', 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3030.645080] loop7: detected capacity change from 0 to 40
03:29:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000002b4)

03:29:34 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
dup3(r0, r1, 0x80000)

03:29:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 65)

[ 3030.782768] loop3: detected capacity change from 0 to 264192
[ 3030.813651] loop4: detected capacity change from 0 to 40
[ 3030.838783] loop2: detected capacity change from 0 to 40
[ 3030.873877] loop3: detected capacity change from 0 to 40
03:29:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 66)

[ 3031.279541] loop6: detected capacity change from 0 to 40
[ 3031.287170] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
03:29:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000002a0)

03:29:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
fchmod(r0, 0xc0)

03:29:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:29:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1200000000000, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:29:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:29:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 67)

03:29:48 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="04000000646f7366d8a02b00080101000440002000f801e4651012653598f9d873bd3710359256ee1a9ab023026d3282f0ad2f043573426fb0b9b671bc8643e9986f1a926175b0caa78863838c56cabe8e3bffaf12c280a407acc724d3d42aec9ffb8f4bed5343fcb35071c3ae1bc24dca22b01e35d1114693dbff2cea9b1cabe1d4b49bec788456c39380fff18d8c23ad9692947f10c2905f4f893ab202938b1dd543603e6db90ec7de40ba20cbc167c7f0937d3f8203c8840e616e1cd4036b70a1dd58b18f5ab25b915825fdfb1efcc0ba", 0xd2}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:29:48 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x80000)

[ 3044.344871] loop2: detected capacity change from 0 to 40
[ 3044.347525] FAULT_INJECTION: forcing a failure.
[ 3044.347525] name failslab, interval 1, probability 0, space 0, times 0
[ 3044.348356] CPU: 0 PID: 12780 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3044.348882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3044.349406] Call Trace:
[ 3044.349585]  <TASK>
[ 3044.349743]  dump_stack_lvl+0xc1/0xf0
[ 3044.350019]  should_fail_ex+0x4b4/0x5b0
[ 3044.350300]  ? ext4_init_io_end+0x27/0x180
[ 3044.350619]  should_failslab+0x9/0x20
[ 3044.350885]  kmem_cache_alloc+0x61/0x390
[ 3044.351195]  ext4_init_io_end+0x27/0x180
[ 3044.351474]  ext4_do_writepages+0xb2f/0x3150
[ 3044.351800]  ? lock_acquire+0x19a/0x4c0
[ 3044.352074]  ? do_writepages+0x1ad/0x650
[ 3044.352363]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 3044.352709]  ? lock_is_held_type+0x9f/0x120
[ 3044.353015]  ext4_writepages+0x2fc/0x760
[ 3044.353291]  ? __pfx_ext4_writepages+0x10/0x10
[ 3044.353663]  ? find_held_lock+0x2c/0x110
[ 3044.353957]  ? __pfx_ext4_writepages+0x10/0x10
[ 3044.354261]  do_writepages+0x1ad/0x650
[ 3044.354535]  ? __pfx_do_writepages+0x10/0x10
[ 3044.354837]  ? do_raw_spin_lock+0x125/0x270
[ 3044.355140]  ? do_raw_spin_unlock+0x53/0x220
[ 3044.355441]  ? _raw_spin_unlock+0x1e/0x40
[ 3044.355719]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 3044.356076]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 3044.356396]  __filemap_fdatawrite_range+0xba/0x100
[ 3044.356729]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 3044.357096]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3044.357426]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 3044.357754]  ? lock_release+0x1e3/0x680
[ 3044.358031]  file_write_and_wait_range+0xd2/0x140
[ 3044.358364]  ext4_sync_file+0x25a/0xde0
[ 3044.358634]  ? __pfx_ext4_sync_file+0x10/0x10
[ 3044.358937]  vfs_fsync_range+0x147/0x240
[ 3044.359227]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 3044.359544]  ? iter_file_splice_write+0x162/0xcb0
[ 3044.359868]  ext4_file_write_iter+0x36d/0x19b0
[ 3044.360172]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 3044.360518]  ? iter_file_splice_write+0x162/0xcb0
[ 3044.360833]  ? kasan_save_stack+0x32/0x50
[ 3044.361114]  ? kasan_save_stack+0x22/0x50
[ 3044.361396]  ? kasan_set_track+0x25/0x30
[ 3044.361671]  ? __kasan_kmalloc+0x7f/0x90
[ 3044.361945]  ? __kmalloc+0x5d/0x160
[ 3044.362194]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3044.362520]  ? do_splice_direct+0x1bb/0x290
[ 3044.362813]  ? do_sendfile+0xb67/0x1300
[ 3044.363076]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3044.363406]  ? do_syscall_64+0x3f/0x90
[ 3044.363678]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3044.364024]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3044.364330]  ? lock_is_held_type+0x9f/0x120
[ 3044.364636]  do_iter_readv_writev+0x217/0x3c0
[ 3044.364947]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3044.365283]  ? avc_policy_seqno+0x9/0x20
[ 3044.365574]  ? security_file_permission+0xb5/0xe0
[ 3044.365917]  do_iter_write+0x186/0x820
[ 3044.366180]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3044.366509]  ? iter_file_splice_write+0x162/0xcb0
[ 3044.366828]  ? kasan_set_track+0x25/0x30
[ 3044.367119]  vfs_iter_write+0x7a/0xb0
[ 3044.367382]  iter_file_splice_write+0x737/0xcb0
[ 3044.367712]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3044.368048]  ? __pfx_copy_splice_read+0x10/0x10
[ 3044.368373]  ? inode_security+0x105/0x140
[ 3044.368668]  ? security_file_permission+0xb5/0xe0
[ 3044.369006]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3044.369345]  direct_splice_actor+0x119/0x180
[ 3044.369655]  splice_direct_to_actor+0x349/0x9d0
[ 3044.369978]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3044.370322]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3044.370669]  ? security_file_permission+0xb5/0xe0
[ 3044.371018]  do_splice_direct+0x1bb/0x290
[ 3044.371384]  ? __pfx_do_splice_direct+0x10/0x10
[ 3044.371706]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3044.372064]  ? lock_is_held_type+0x9f/0x120
[ 3044.372365]  do_sendfile+0xb67/0x1300
[ 3044.372637]  ? __pfx_do_sendfile+0x10/0x10
[ 3044.372939]  __x64_sys_sendfile64+0x1d5/0x210
[ 3044.373272]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3044.373611]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3044.373965]  do_syscall_64+0x3f/0x90
[ 3044.374227]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3044.374560] RIP: 0033:0x7fa51deffb19
[ 3044.374812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3044.375930] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3044.376409] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3044.376859] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3044.377302] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3044.377746] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3044.378191] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3044.378664]  </TASK>
[ 3044.379496] loop7: detected capacity change from 0 to 40
[ 3044.386453] loop3: detected capacity change from 0 to 40
[ 3044.400417] loop6: detected capacity change from 0 to 40
[ 3044.409654] FAT-fs (loop6): count of clusters too big (59769854)
[ 3044.410209] FAT-fs (loop6): Can't find a valid FAT filesystem
[ 3044.412410] loop4: detected capacity change from 0 to 40
03:29:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80002, 0x40)
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400a00, 0x0)
openat(r2, &(0x7f0000000040)='./file1\x00', 0x309040, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0))
r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x8, 0x200c0)
poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x50}, {r3, 0x80}, {r4, 0x408}], 0x3, 0x4)
unlink(&(0x7f0000000180)='./file1\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x10000027f)
write$P9_RREADDIR(r5, &(0x7f0000000240)={0x68, 0x29, 0x1, {0x1000, [{{0x0, 0x3}, 0xcdd7, 0x2, 0x7, './file1'}, {{0xa425cc3063d6e108, 0x0, 0x2}, 0x5, 0x5, 0x7, './file1'}, {{0x80, 0x1, 0x3}, 0xffffffffffffffff, 0x20, 0x7, './file0'}]}}, 0x68)

03:29:48 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:29:48 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000002b4)

[ 3044.484239] loop2: detected capacity change from 0 to 40
03:29:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 68)

[ 3044.526713] loop3: detected capacity change from 0 to 40
[ 3044.562851] loop7: detected capacity change from 0 to 40
03:29:48 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@v1={0x2, "8973b911d015bfbada38e135"}, 0xd, 0x4)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 3044.687744] syz-executor.3: attempt to access beyond end of device
[ 3044.687744] loop3: rw=2049, sector=44, nr_sectors = 8 limit=40
[ 3044.693042] loop4: detected capacity change from 0 to 40
[ 3045.252922] loop6: detected capacity change from 0 to 40
[ 3045.254777] FAT-fs (loop6): Unrecognized mount option "./file0" or missing value
03:30:01 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0))

03:30:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)

03:30:01 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x80000)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
dup3(r3, r5, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:30:01 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:30:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x240000, 0x1ea)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:30:01 executing program 4:
prctl$PR_SET_PDEATHSIG(0x1, 0x2)
prctl$PR_SET_PDEATHSIG(0x1, 0x18)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x41)
sendfile(r0, r1, 0x0, 0x10000027f)

03:30:01 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000600)={0x0, 0xd63})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180))
sendmmsg$inet6(r1, &(0x7f0000002880), 0x0, 0x24000000)

03:30:01 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 69)

[ 3057.353014] loop3: detected capacity change from 0 to 40
[ 3057.371904] loop4: detected capacity change from 0 to 40
[ 3057.392050] loop2: detected capacity change from 0 to 40
[ 3057.406615] syz-executor.3: attempt to access beyond end of device
[ 3057.406615] loop3: rw=2049, sector=52, nr_sectors = 4 limit=40
[ 3057.411759] loop6: detected capacity change from 0 to 40
[ 3057.435336] loop7: detected capacity change from 0 to 40
03:30:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:30:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:30:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)

[ 3057.508405] syz-executor.6: attempt to access beyond end of device
[ 3057.508405] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3057.509347] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3057.544446] loop3: detected capacity change from 0 to 40
[ 3057.585063] loop2: detected capacity change from 0 to 40
[ 3057.606310] loop4: detected capacity change from 0 to 40
03:30:01 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x118)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:30:01 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 70)

03:30:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, 0xffffffffffffffff, 0x80000)

03:30:01 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
sendfile(r1, r0, &(0x7f0000000180)=0xffffffffffff5f08, 0x200)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)

03:30:01 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r2, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, 0x0, 0x6, r2, 0xb)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r3=>r0, @ANYBLOB="00000000000000002e2f66696c653000d9f59a70b63ab09261cf74e8e6c498c5454b5371492992ef9801cf672bd7b865aa9695c040f9aba93d14f7c56b2ee7d76c5144b0e23eb6245fe63bb3e0fde971c3ce346071b3da8e49bd7672bb5db1c007f5d24c2b738a8c2fe89f919c02374f96b4cc270cf55d97cf26fa59595b1cf5cdf944910d9a409b608319deba276845f453d698dfa5809b52"])
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xf8, 0x3, 0x7f, 0x81, 0x0, 0x0, 0x80c0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xbc, 0x2, @perf_config_ext={0x5, 0x800}, 0x1, 0x400, 0x6, 0x9, 0x6, 0x3000, 0x1, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x3, r3, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 3057.708764] loop7: detected capacity change from 0 to 40
[ 3057.721012] loop3: detected capacity change from 0 to 40
[ 3057.726758] loop2: detected capacity change from 0 to 40
03:30:01 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xfffffa5f}}, './file1\x00'})
syz_io_uring_setup(0x2594, &(0x7f0000000280)={0x0, 0x9f7a, 0x4, 0x0, 0x34b, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340))
r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1090c1, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8, 0x3)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r6, 0x5441, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x2)
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
r7 = creat(&(0x7f0000001a40)='./file0\x00', 0x10)
io_submit(0x0, 0x7, &(0x7f0000001ac0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000440)="f9fcd04581a27daa50ec257a6ac55e856e17606008cf3ddde3ca81f0090fc26032e32af7ba7df78b53fca0f7427c4cc82e110904f891f13ffb9445449f6d5b9021a6c59bc719fb139ff264065e72d42bab668aaffdbfc531f8b2bbec", 0x5c, 0x8000}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xe590, r4, &(0x7f0000000500)="07399bd73d14e4aee87b4f67bc977efe7e34e92319dd54faeb232a97a137dcfefada2349e9de40dd1f8e7192c862f8ed0d9499f264f41f920dd7c92e80df1fa99ca388c3547aaf885d3f6d374d7cf9c6c0e9498caac8aeb20bf8b2ae7d4de7cc2902787b5b317a6659d336ec10e9b3183040c200537d2cf547b1de53f40580bb1f656f4cc84937503f4c85f1b55ece0b74b77250eb2c3588031baf09f9dc2183c603f9", 0xa3, 0xa4e, 0x0, 0x2, r0}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000600)="4904bbecd8ddf0cd33392c38d623ac00b39bc9951ebc8c1c3267915a1805faff6ae550d764deead6c57dbf00b7f15f060e9a115f6897e5385b48b5dd69380e26254a6d73487f5465ccf0555466fabaa7d134845480b63f0c347b7e640ab5b344bc4790d355ac318f7f9c73795c41f6b0e8a90d10ca6c96f038aaad91972b0368851455924b02e3c007da48a999b27c93032c35e729ced4cbcba92a3f951a9de422f9c333a8f03499a94c547ed83ef69513cae05f7cd690faf340c9c1bb318b490952ecbf7dcd7bdce5715bd4f4b1b8d64597bf893684b68b9f5a8326864eb9f8fa1aaee2a9fc8a8fce35d0863b12e8e7752fd0b1d00b7f72ae2205269147645215b96da5138c93b00dd7d5f43dbde4ebe20cd45d30ab63aa2764863a5554799b1089adb8f82c17025e8a4f0f55474ec664359d4cc6a4104f10d1456ad609c75babf5b8460972b7a9fd36cc80f0b87445f316bee3303e0442b48b05654dc8358f0613f3bdf3b02fa9fbdac52003c7e4c6e9208e44fc6e8cf3520f370dc9366a48e34ed6dadf32e275f2df24247acd3e70d9e86a36f789e97ff1e47ee26bc3b5a8c54f775659230a3e352ef5363975aad63655f9db2d13ee2adbe162a617d31de75e5a28df667dc5d57aeea55dacc2506bafea046460330ac4e5587e8b9d1ed3362691a2bbe8719e390ff5dd66728cb394cebe00d7432d2faa854c8747561b2bdfdbc786271bcaea3b7180ce69d194f4d3eced42c2574df041bb10355903da24485f901a39e15152575667a33ae986dbbd7e36c7ccd34498e692ff9fab00b760713c9bbb4295105f2374d59416ef65d8eb2662b68600272f978e929489892f54bd49af0297c1210b387ce1c4dc89fac9e92bcfa8117a80cc61108d35de26fec64fac3af8f322e7445270120feefe283d79e2f4ae3f72c46b3dbea7bc8d5c89f463ba465bb2b64cefb56f4739e5dd266b86dc4aa4f80c992f3ebab492ffececba661ec6294f875fa36ec74f5bbfe80e8306906c6af24cfc6efe8027803d89af2bd67f047d506644f3119e2d02173e19b1d6625c78cc89bc3d6ae23a3473801070d58e92f1a9c878c6d9f7d9cb60854cb13faabc2603fdacc4de7c3a42899b5cddfe25d8acc08fd22ad6b316e42a0bbcb16adf1e1a51be98ddf1b2da8e2988a27ed6d72c1871c95ed4671c6385dabde99ed5a10c4d8c4e15820e4679fb255d53b8eda49308c91294d83d6e6487d1476d1a37c91e0c334224cb329c021b19300396d973d887a03e92822beb609c8a2574c42a854986bf9833365423b67ce6f8c684e86e9a3bb7b1296e68748a28ad46d0cee879792a8cf1bb8fa34175ad87ae13b5719acf0797a83c422b1980d596c7d1b3a387ad0b25bd1452f57dfe5c24f653566755674749252e7260dda44bfa0ac72004bee93b75d950c3e5f61d106ddbf4c17726dab2d1ef94fb7298d8716ee82be6a72a886e1ebcb6a2a1bb5a80e333a3340f99d29c8d81c3813fcd2198ee4cebc78de82a3c0cf399960f2e31a28248def3d8fb82da03c25dd1ece68f4000b53b374d94d8045c9ef80959b4a3aadbf6e9c97a9c283369563951f48e15e3ccb95226a4dae7565f1702d5934da4bd8bac6cb67ac8e458ee84957c229a403d049f0cc014103ba55be4d778152a8b0c9d4186e601c6408c1ccff756aa2ab8cc6b4bd1b2ab4a25213cdfe1c1fcfb0814b1dd9a8e18977c10ebadfdf30b850551368177fce04042e08217759d53b84e5efb958d205fde80a02e0c0266c2078ced5b4d33cc395b03a6b90e906c30089a32a883ff2bdb4b1a9cf2c2c805332c2f02ee94467b9ec1cad3bf6a1fd3b6272bd85d5ba292046e53d7f57e5f246af1161a69f2b6a9c57c03c5e88aefc202674d5f229e78c14792667aa351e7ab353d3049e09bfab55635734e64c000c7b3271b02c1112611c5df8581ccd564d201337f033028a7287437c32b31151b17cd2fd09e7e2997504c7c87a8e53141d889a932cec9475dd69699e235168662862efc2869c5a71ee2984128ac6eb9b83e9479af66ca87e05b880d14ccda3251059d2326de2abf04bf573e53ef33d1b71f306183da5b1ff8d25836a4af53107930900ea01e813a18516fb9c8e21f149aa089b455d984705ab8a5a9653f396143578a788473e522d11b3bd397bb58e37cf9e0bb3048787951e7a45575a68ead516c47a8dab7b0014ab8156dc9627bfbad4bed36fdc29f2f0e461ab27979950ad055a2694d3b10bc491dfe2cc34deb17fd4f9fa7b34869e9be7d8030cedb54f415cca1524e9e24d55d72db30e8453ef9bc72608b988aebecf7cd3b4d4da43e8377068d5bb46236d35cb7c146d350acf5975be5efc8bfeb69f1253977b9949b7fc85107ba4bb417a73a36d11874e6f873574f6dbd3c291f01de6b767145854a67c312f238238a5cb3505bf8b0417e2313834694b206f3977ce5a99a3e94b20636a64a6cd41f0e87c7d6729a3c8e9234e98c9bcad04ba5be8efb2c61ab5e23c7f68db0cb14c0f21a0a565b7fe635810e30b8ed814245efbfb7d47c6660f5d49a3aa579f5e9cfe2251307697f216561548ba15df24cfa103928fe2bf9584e4b7af09901033b95f8572c4f6e249a52a7859770935d2f56a9884388827902d37d5b7c832e583ad95bcb69149ac89acdc09d1dfa48f9d1553c326b50fb34a603a7af5dcc729a8c64f5e68e7efc3b8f2543229ea7e2f7a4761d54ed7d2133c40cbcdb9cb799c2324eea5d642b38b79ff25de5832bfe8f37042c50125c906b4567d8a6f83b0a7689c0fd3a4512a44bfcf2125aaf39c446713c54b304dbc492bcdb72943f2b51756551841c2fcd322521e67ae4480f30f49fa3e856e59e6c0c7d72a5189670ba98f33a114ddc70946d8a57cddd803522297b7a8b7afb66de6993b30fb360365511a7206fafc3762cbbba5028a55159d5da78c42a021ee560a023d1b971cdbb326b926b7c4b51796ee4c13a6d60149123b559141a69b2e5f51789da8b08c8eefb0ce1a23ccc5a5fc45611bd2b60d87564e9888251d51d50b9ef3e405b6eee8941f1d388063e7c246669fd087fa35da8b9a9974e0324f4d498aeb408bb4df3f3494b45df86da9d0b7b4ef712f7d3d8ec5740757ab8d41ce1ab68857a4651fa50cd51ddd52902ae8438c1538aa5d1626b9b960e14abea32134ef299a03195d2b6c620fad473270fbb9d0b660c88672b9a10403d243cee0d5406aadfb582faac9a16ea3f53bb90901b6f8580636a186fe6de78d41d59122c48e705b310a234a193275a4d06d73eca575f8faa12d62237a7ca07179ab8eb956c106a506c565f4c9cc6aaf9874bf2d890809c2fb505a2fe698603b738290a467ddb1943e50264edc45d38764c2f25c00d64dc4c0be9bcc0b6703e51d161f3a1d6c6244be6586606526a4eb86ba864dd87d0db559f95e60f4b7b8debe4c22e3ca81dbeb74982703d5eacf53f90a6307463f933015c8e52be875179a1ef67ca6320857e21746e73570644911ad14621e9b6a945364617634b43499ea61a089552aab8dfc5fb3a039ed50628fa04fa3a682e4edd17ddc3d03db5ae6b96182960a431ef611723e7251fc55c428f2881a119450ba59c3d9b0525ab294def6ca4cded2186b5ec590a63547a5c6739d2579f25d093e3f8c56a516d66d99997a1b9db1a8fe91b6b1ca6164d881d30589cb6e8b8c7923251cb519f6e7c90654ee2de3090459dfe0fd4ce9c12b9017a3dc886067adaeb657010c383990feed8b201c62b8b9e76f88f5cbf4af316c7175fc1802569cd928074738ba9bfdb2de312e36dc64a3d27f3ac0f1162a242b70ef8673013a7ab8cdff924a997026014060a59f959156a7a830d8d655741ba93321bdebbc1292776963b4dd546e9bbefcd146ba76472a2a6e88691b406ed8c341d27ac5885b9b913b6e8449f97ac587e9d77fe29ef0e01dd03e5d22bb6c48600f34a1df3c76c207fe6740ff7c0117606d2bd47fc9d82c4ae911fe38f9656f3fc0723186e525225e2da3f922b6ccfef106b7ce5bc89b273c32d83295a3d073486d46d0ac8c897b79a5028f484d1b05dc95b54958ac43cbf7272e7d4c6fe3a8467d0b909726f4b00ca1e627aec3d82f031d69797dbb24e62e09e7512446516c06a3cde8a3f9082eb2e210a667ef6f1be1ddfb117ad15927a38e3edcbd3d8458686276b5ed54557cada57a9b2b20fcb29456e472271769082c4d0c5fc89965c5f988a523a7fba667a47c78ff74a260db1f8e5037dd15d98f04cc17c94b3db995409a838bcd084eb427efb871b78c452691a1f02e9da952dd777caff6bb5dcf6594dbd2e1e2e9e520834df607425ea3e1500a2e3b2e756e7f19ea15ae2824ec6560820a40369e5532c09e5d73747dbd99f92a3222badc1fc0b04a7d57a95c941d5180b6f771f25b80151da0a47f997f2b59f1dec966b6df98618b2740f19a3970da05883d536a40a48640eaf83daeba964d2573c5ed75f90d2b5b7776cdd40b8df586ba8ef370183e245d863e064b2cbef5a01dd976559206c06993db07ccc7f0eee757b68ff65dd25ac89af3e6b4154d6ecd5094a8e658af4c9e92b774fc4c8cca38337ce28ec517be835e0897f22a64b384b8b18650b58dd72d6234e413d3cd4c958a684a33b2a2b70c135083d73b7c6371c8ba6821ac213362b0b997e1a060978138732fd8240bab671efa802b73d0a5f581728774408cd8c426cc5cb67a4d1471b809f74117e5e88daef2f286c0ab6231c8c4b67dc88fa148f768b3e35680ebdb9507ab1677a0fc1ecec74124222bf738f0a98662e27960537ad35febd1ef3a9ea3bdf5ed78d796d8dc26bcf2b1a9ddf5ea07f72b868b9d984f23f1a30dea56bf56fabb0298573adf549a2d8ad30c94ad5506579e9744610c901bd1e6ce652c3c70ba660fd10bbbd2e8dc2822d2a4869420a062d3c254f97945e753ca5c5bca6a5de7bb9da6555122b6318b5d2b5faa33b1a1380774e31195e4825ee95e3108717d6cba9e7f687fe7d3da24532fb59b37a70539935b6620f5e8c09e083f93deda37a60ebdae59c6adfddbda949444b78c035f9a98d05058a7c6d783f5f17d694b19296e2debe4f941b39b6ebd8189db64b9952fc0d01ca20046ea20bc2c0145e5cd95ccf531f06f69cabee4f909e822ebfa32a10de3ef2dac057a251089b707da1ad3837b9375c7565abd3203cd31e958c9c223645c82c1ac76f45ba968122be83610a64c6e4729eb1bb391af3d070498d211d6dad34891b826fdf6c198249d4b94c708b32ebc6211a10fb5411218570b05e76145a83296e313ea6651a3acba1ed1740ab3784895d47183861e50a9813e304b6db49ad1a0c8a9741596db20e654b2b5114045a940a7d3eacd7b9843d1264af3b25c954fd203c2eba6ec441e9cf2fe36fb9765a62ecbe9cf84a3559e512f7ed09c576ceae8595562d827116e8ceaf8e5ee6fb09ed3a6b05ec9ae6aa502220c9f7a23bbb3126b8697af327ade1f55dcf3c8d2638728b560dac16c288f830ea025c769166553101352909569a1795b5f1a0ad5199f564c9695a5a8f12fac895ca257d4087c39ee22a763ac40d1a39152b1133b4a3510609f798b1c44ca43f4acec9e6ecc0f802143cfa6e82028d2a9908d284e8bdf67607f781218ed9f5d8de52b29eb2c8f0fdcf500fb97204cb6fab90bc4ea1d4f0b6309d0ed17fb71a29416c8af913f05e0e50863269408b758e838eb4e060bc5a0f562c70ee8a36fce3b6b1a43b894a6a5e0b3a5d18bd0c48051d0b0f383685112bad", 0x1000, 0x4, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000001640)="f25d77ee93ff2a9ef57410b3bcc65a880531b668e7c89658380d8250b7e391f6777e9b2c8f6063ac7295afe53b5788f09210ef2bf6bf40dab69493a558c56861c82bf4dee9a7a7ab48c645b84dbd981d70d0535e68f69299ef8c9eeabbb0f501fb48cdf2f1e89295d3dbf12768fbde85f81fcf5c1f73292d91d8f69fd7a6a0f30eee55061c3d7dedbeb72a15632f006e08abb2f9c91640f1ceff295d197ee95b747cfe4dd7ea1f8cc1da8c83c4134c887902d1db328f7ffc01fd4276247d26b168458e4ae7cca6c06020c20dd9c547739cfe16e225fe1e8ce38cec6a8c070c9eaecc9883c6f352122bab73e4c90e00af4f7016", 0xf3, 0x6}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0xc92, r5, &(0x7f00000017c0)="185d0e2868e89401e803ee841ffeec52cb346fe5aad73a7c723617502912a52bd1fc334bb84bc1892908be938de2d6c5062cba056f38838c5fe5afc925ccb7c654d3387ebd7de4a2a33a3d5c77b01ba7816979645ff0224d23b91b949933d6eaf0a34167b3f54d3b060cd69bb4eeb9232346b81880774de351d7b8bd70d53f2086fcf9ee211fe97338a1da3e4624923909d0368cda9718f44f05ab0db5ebdc1d4f1fbf0f9ed00913e0217ea86dd62b501de039540aec66097ca6b9262263b2e68cba29a96d331a70310d", 0xca, 0xfff, 0x0, 0x0, r3}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f0000001900)="3f47ea8304e9101d17396a1e58d33680d46a7f42fcad0b337632631f36be76e45ae5ef17d90eb4d0feff42258999012c038a44d113945ce30dd3fe0dd26e97cc81507072d372de4cd10cf79c446a75", 0x4f, 0x4b4, 0x0, 0x0, r2}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x8, 0x0, r6, &(0x7f00000019c0)="70dc618e9880bdef60327931bfd19bef9ad610b70be508db0f38edcbd87f0f03edec14f3ec416837d23ccea6136ce6792948d33b832bdc370d5ac5e4eb4e023d4192ff666eefa6d766013ea01a", 0x4d, 0x47, 0x0, 0x1, r7}])
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)

03:30:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3057.808398] loop6: detected capacity change from 0 to 40
[ 3057.852380] loop2: detected capacity change from 0 to 40
03:30:15 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:30:15 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
sendmmsg$inet6(r3, &(0x7f0000000000), 0x0, 0x240088d1)

03:30:15 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:30:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:30:15 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
mknodat$loop(r2, &(0x7f0000000180)='./file0\x00', 0x1, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x10000027f)
pread64(r0, &(0x7f0000000240)=""/182, 0xb6, 0x6)

03:30:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000002980)='./file0\x00', &(0x7f0000002b80)=[&(0x7f00000029c0)='\x00', &(0x7f0000002a00)='vfat\x00', &(0x7f0000002a40)='[\x00', &(0x7f0000002a80)='\x00', &(0x7f0000002ac0)='-,]:\\\x00', &(0x7f0000002b00)='!\x00', &(0x7f0000002b40)='-+\x00'], &(0x7f0000002c00)=[&(0x7f0000002bc0)='/proc/self/attr/sockcreate\x00'], 0x800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
futimesat(r5, &(0x7f0000002900)='./file1\x00', &(0x7f0000002940)={{}, {0x77359400}})
syz_io_uring_complete(r3)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x10000027f)
syz_io_uring_submit(r3, 0x0, &(0x7f00000028c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r7, 0x0, &(0x7f0000002880)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000040)}, {&(0x7f0000001240)=""/218, 0xda}, {&(0x7f0000001340)=""/176, 0xb0}, {&(0x7f0000001400)=""/118, 0x76}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/253, 0xfd}, {&(0x7f0000002580)=""/190, 0xbe}, {&(0x7f0000002640)=""/140, 0x8c}, {&(0x7f0000002700)=""/69, 0x45}], 0xa, &(0x7f0000002840)=""/6, 0x6}, 0x0, 0x20140, 0x0, {0x3}}, 0x7)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002c40), 0x3}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:30:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 71)

[ 3071.594507] loop6: detected capacity change from 0 to 40
03:30:15 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
shutdown(r1, 0x0)
r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(r2, &(0x7f0000000000)='./file0\x00', 0x80000, 0x142)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
time(&(0x7f0000000040))
unlink(&(0x7f0000000180)='./file1\x00')

[ 3071.619968] loop2: detected capacity change from 0 to 40
[ 3071.638521] loop7: detected capacity change from 0 to 40
[ 3071.640866] loop4: detected capacity change from 0 to 40
[ 3071.709255] loop3: detected capacity change from 0 to 40
03:30:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 72)

03:30:15 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:30:15 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5d64}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:30:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0xb)
openat(r0, &(0x7f0000000180)='./file1\x00', 0xc2000, 0xc0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

03:30:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3071.916802] loop2: detected capacity change from 0 to 40
[ 3071.916855] loop6: detected capacity change from 0 to 40
03:30:15 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0xffffffffffffffff}, {0x0, 0x0, 0x2841}], 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0])
ioctl$TCXONC(r0, 0x540a, 0x3)
chdir(&(0x7f0000000140)='./file0\x00')
clock_gettime(0x0, &(0x7f0000000740)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/229, 0xe5}], 0x2}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/51, 0x33}, {&(0x7f0000000500)=""/185, 0xb9}, {&(0x7f00000005c0)=""/15, 0xf}], 0x3, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r3=>0x0}}}], 0x78}}], 0x2, 0x40, &(0x7f0000000780)={r1, r2+10000000})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x4, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0xfff, 0xa70, 0x0, 0x478c, 0x0, 0x0, 0x0, 0x200, 0x0, 0x2000000000}, r3, 0x0, 0xffffffffffffffff, 0x2)
unlink(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)

[ 3071.984382] syz-executor.6: attempt to access beyond end of device
[ 3071.984382] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3071.986033] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:30:15 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 73)

[ 3072.057233] loop4: detected capacity change from 0 to 40
[ 3072.060792] loop3: detected capacity change from 0 to 40
03:30:15 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3072.069318] loop7: detected capacity change from 0 to 16383
[ 3072.081726] FAT-fs (loop7): Unrecognized mount option "" or missing value
[ 3072.166848] loop7: detected capacity change from 0 to 16383
[ 3072.207688] loop2: detected capacity change from 0 to 40
[ 3072.213970] FAULT_INJECTION: forcing a failure.
[ 3072.213970] name failslab, interval 1, probability 0, space 0, times 0
[ 3072.215581] CPU: 0 PID: 12920 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3072.216618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3072.217628] Call Trace:
[ 3072.217970]  <TASK>
[ 3072.218286]  dump_stack_lvl+0xc1/0xf0
[ 3072.218819]  should_fail_ex+0x4b4/0x5b0
[ 3072.219367]  ? ext4_init_io_end+0x27/0x180
[ 3072.219941]  should_failslab+0x9/0x20
[ 3072.220457]  kmem_cache_alloc+0x61/0x390
[ 3072.221020]  ext4_init_io_end+0x27/0x180
[ 3072.221580]  ext4_do_writepages+0xc31/0x3150
[ 3072.222218]  ? lock_acquire+0x19a/0x4c0
[ 3072.222757]  ? do_writepages+0x1ad/0x650
[ 3072.223316]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 3072.223999]  ? lock_is_held_type+0x9f/0x120
[ 3072.224599]  ext4_writepages+0x2fc/0x760
[ 3072.225148]  ? __pfx_ext4_writepages+0x10/0x10
[ 3072.225799]  ? find_held_lock+0x2c/0x110
[ 3072.226371]  ? __pfx_ext4_writepages+0x10/0x10
[ 3072.226973]  do_writepages+0x1ad/0x650
[ 3072.227534]  ? __pfx_do_writepages+0x10/0x10
[ 3072.228135]  ? do_raw_spin_lock+0x125/0x270
[ 3072.228730]  ? do_raw_spin_unlock+0x53/0x220
[ 3072.229336]  ? _raw_spin_unlock+0x1e/0x40
[ 3072.229894]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 3072.230605]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 3072.231233]  __filemap_fdatawrite_range+0xba/0x100
[ 3072.231906]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 3072.232632]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3072.233278]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 3072.233932]  ? lock_release+0x1e3/0x680
[ 3072.234488]  file_write_and_wait_range+0xd2/0x140
[ 3072.235144]  ext4_sync_file+0x25a/0xde0
[ 3072.235694]  ? __pfx_ext4_sync_file+0x10/0x10
[ 3072.236297]  vfs_fsync_range+0x147/0x240
[ 3072.236853]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 3072.237485]  ? iter_file_splice_write+0x162/0xcb0
[ 3072.238113]  ext4_file_write_iter+0x36d/0x19b0
[ 3072.238717]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 3072.239401]  ? iter_file_splice_write+0x162/0xcb0
[ 3072.240051]  ? kasan_save_stack+0x32/0x50
[ 3072.240604]  ? kasan_save_stack+0x22/0x50
[ 3072.241162]  ? kasan_set_track+0x25/0x30
[ 3072.241705]  ? __kasan_kmalloc+0x7f/0x90
[ 3072.242266]  ? __kmalloc+0x5d/0x160
[ 3072.242758]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3072.243389]  ? do_splice_direct+0x1bb/0x290
[ 3072.243994]  ? do_sendfile+0xb67/0x1300
[ 3072.244521]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3072.245141]  ? do_syscall_64+0x3f/0x90
[ 3072.245679]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3072.246384]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3072.246996]  ? lock_is_held_type+0x9f/0x120
[ 3072.247612]  do_iter_readv_writev+0x217/0x3c0
[ 3072.248240]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3072.248923]  ? avc_policy_seqno+0x9/0x20
[ 3072.249502]  ? security_file_permission+0xb5/0xe0
[ 3072.250182]  do_iter_write+0x186/0x820
[ 3072.250717]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3072.251380]  ? iter_file_splice_write+0x162/0xcb0
[ 3072.252029]  ? kasan_set_track+0x25/0x30
[ 3072.252594]  vfs_iter_write+0x7a/0xb0
[ 3072.253117]  iter_file_splice_write+0x737/0xcb0
[ 3072.253772]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3072.254461]  ? __pfx_copy_splice_read+0x10/0x10
[ 3072.255101]  ? inode_security+0x105/0x140
[ 3072.255703]  ? security_file_permission+0xb5/0xe0
[ 3072.256360]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3072.257042]  direct_splice_actor+0x119/0x180
[ 3072.257663]  splice_direct_to_actor+0x349/0x9d0
[ 3072.258309]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3072.259006]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3072.259722]  ? security_file_permission+0xb5/0xe0
[ 3072.260395]  do_splice_direct+0x1bb/0x290
[ 3072.260971]  ? __pfx_do_splice_direct+0x10/0x10
[ 3072.261617]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3072.262333]  ? lock_is_held_type+0x9f/0x120
[ 3072.262924]  do_sendfile+0xb67/0x1300
[ 3072.263486]  ? __pfx_do_sendfile+0x10/0x10
[ 3072.264084]  __x64_sys_sendfile64+0x1d5/0x210
[ 3072.264695]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3072.265374]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3072.266076]  do_syscall_64+0x3f/0x90
[ 3072.266604]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3072.267274] RIP: 0033:0x7fa51deffb19
[ 3072.267777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3072.269999] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3072.270955] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3072.271864] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3072.272754] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3072.273647] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3072.274544] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3072.275510]  </TASK>
03:30:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2841}], 0xb04801, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0xa1)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:30:28 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:30:28 executing program 1:
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:30:28 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:30:28 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futimesat(r0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x77359400}})
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

03:30:28 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)

03:30:28 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 74)

[ 3084.845756] loop7: detected capacity change from 0 to 40
03:30:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000340)=ANY=[@ANYBLOB="00fbe2047f42dfc63736324120b4c996d47b8beb2e6058df2eaebd58c40536de9a03046b73911d5e66ffcd59f81efeca6c9f3e3b6ffb01e26461a60b431df6d86b9728ee59d867b2d90e25e85460412bd26e2887395fa75ed9ee9b402a5fb3c46b696bdf5e0de848344588c98cff88b027d98763f4a06a299415221f35d9aa40c01215f5887d5b2a90504f00d4e0fca6aea138beec3ac41cd157e8e45fd5c3ae452c6b4bb63b00905d4c99066acaa4433bdda4cb89feed8385b5ee1886e82d99167fb9687f02f6f60d3f62143620516395d5df8ae8e854c01d2a6c6d29c766575e66aa"], 0xe2, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "eb6bc8db7821f4e3f21002389a9eb10c"}, 0x11, 0x3)

[ 3084.869895] loop4: detected capacity change from 0 to 40
[ 3084.889725] loop3: detected capacity change from 0 to 40
03:30:28 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)

[ 3084.923538] loop4: detected capacity change from 0 to 40
[ 3084.927710] loop6: detected capacity change from 0 to 40
03:30:28 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
pipe2(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84800)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
openat(r4, &(0x7f00000004c0)='./file0\x00', 0x30100, 0x198)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r6=>r2, {0x5f80}}, './file0\x00'})
openat(r6, &(0x7f0000000240)='./file1\x00', 0x0, 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000380)=0xe8)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x8, 0x0, &(0x7f0000000240), 0x8, &(0x7f00000003c0)={[{@rodir}, {@fat=@tz_utc}, {@utf8no}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@euid_gt={'euid>', r7}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
sendfile(r0, r1, 0x0, 0x10000027f)

03:30:28 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 75)

[ 3085.010497] loop7: detected capacity change from 0 to 40
[ 3085.028380] syz-executor.6: attempt to access beyond end of device
[ 3085.028380] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3085.030605] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3085.040963] FAULT_INJECTION: forcing a failure.
[ 3085.040963] name failslab, interval 1, probability 0, space 0, times 0
[ 3085.041904] CPU: 0 PID: 12959 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3085.042497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3085.043088] Call Trace:
[ 3085.043287]  <TASK>
[ 3085.043470]  dump_stack_lvl+0xc1/0xf0
[ 3085.043794]  should_fail_ex+0x4b4/0x5b0
[ 3085.044113]  ? ext4_alloc_io_end_vec+0x23/0x130
[ 3085.044469]  should_failslab+0x9/0x20
[ 3085.044767]  kmem_cache_alloc+0x61/0x390
[ 3085.045096]  ext4_alloc_io_end_vec+0x23/0x130
[ 3085.045444]  ext4_do_writepages+0x1606/0x3150
[ 3085.045811]  ? do_writepages+0x1ad/0x650
03:30:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x143)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 3085.046270]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 3085.046661]  ? lock_is_held_type+0x9f/0x120
[ 3085.047007]  ext4_writepages+0x2fc/0x760
[ 3085.047316]  ? __pfx_ext4_writepages+0x10/0x10
[ 3085.047691]  ? find_held_lock+0x2c/0x110
[ 3085.048012]  ? __pfx_ext4_writepages+0x10/0x10
[ 3085.048358]  do_writepages+0x1ad/0x650
[ 3085.048664]  ? __pfx_do_writepages+0x10/0x10
[ 3085.049005]  ? do_raw_spin_lock+0x125/0x270
[ 3085.049326]  ? do_raw_spin_unlock+0x53/0x220
[ 3085.049671]  ? _raw_spin_unlock+0x1e/0x40
[ 3085.049993]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 3085.050396]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 3085.050762]  __filemap_fdatawrite_range+0xba/0x100
[ 3085.051136]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 3085.051546]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3085.051919]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 3085.052294]  ? lock_release+0x1e3/0x680
[ 3085.052609]  file_write_and_wait_range+0xd2/0x140
[ 3085.052981]  ext4_sync_file+0x25a/0xde0
[ 3085.053276]  ? __pfx_ext4_sync_file+0x10/0x10
[ 3085.053620]  vfs_fsync_range+0x147/0x240
[ 3085.053944]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 3085.054307]  ? iter_file_splice_write+0x162/0xcb0
[ 3085.054670]  ext4_file_write_iter+0x36d/0x19b0
[ 3085.055018]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 3085.055419]  ? iter_file_splice_write+0x162/0xcb0
[ 3085.055802]  ? kasan_save_stack+0x32/0x50
[ 3085.056127]  ? kasan_save_stack+0x22/0x50
[ 3085.056447]  ? kasan_set_track+0x25/0x30
[ 3085.056743]  ? __kasan_kmalloc+0x7f/0x90
[ 3085.057058]  ? __kmalloc+0x5d/0x160
[ 3085.057335]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3085.057704]  ? do_splice_direct+0x1bb/0x290
[ 3085.058031]  ? do_sendfile+0xb67/0x1300
[ 3085.058333]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3085.058694]  ? do_syscall_64+0x3f/0x90
[ 3085.058998]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3085.059393]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3085.059735]  ? lock_is_held_type+0x9f/0x120
[ 3085.060072]  do_iter_readv_writev+0x217/0x3c0
[ 3085.060432]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3085.060828]  ? avc_policy_seqno+0x9/0x20
[ 3085.061155]  ? security_file_permission+0xb5/0xe0
[ 3085.061539]  do_iter_write+0x186/0x820
[ 3085.061840]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3085.062213]  ? iter_file_splice_write+0x162/0xcb0
[ 3085.062575]  ? kasan_set_track+0x25/0x30
[ 3085.062891]  vfs_iter_write+0x7a/0xb0
[ 3085.063192]  iter_file_splice_write+0x737/0xcb0
[ 3085.063552]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3085.063944]  ? __pfx_copy_splice_read+0x10/0x10
[ 3085.064315]  ? inode_security+0x105/0x140
[ 3085.064650]  ? security_file_permission+0xb5/0xe0
[ 3085.065036]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3085.065421]  direct_splice_actor+0x119/0x180
[ 3085.065776]  splice_direct_to_actor+0x349/0x9d0
[ 3085.066135]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3085.066530]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3085.066905]  ? security_file_permission+0xb5/0xe0
[ 3085.067283]  do_splice_direct+0x1bb/0x290
[ 3085.067617]  ? __pfx_do_splice_direct+0x10/0x10
[ 3085.067985]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3085.068390]  ? lock_is_held_type+0x9f/0x120
[ 3085.068733]  do_sendfile+0xb67/0x1300
[ 3085.069045]  ? __pfx_do_sendfile+0x10/0x10
[ 3085.069387]  __x64_sys_sendfile64+0x1d5/0x210
[ 3085.069722]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3085.070104]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3085.070509]  do_syscall_64+0x3f/0x90
[ 3085.070799]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3085.071171] RIP: 0033:0x7fa51deffb19
[ 3085.071459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3085.072742] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3085.073292] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3085.073807] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3085.074338] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3085.074852] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3085.075375] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3085.075929]  </TASK>
03:30:29 executing program 2:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(0xffffffffffffffff, r0, 0x80000)

[ 3085.130883] loop4: detected capacity change from 0 to 40
03:30:29 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04b9a02b0014000000", 0x9}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_complete(r2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[r0, r0, r1, r4], 0x4, 0x0, 0x1}, 0x8667)
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0xfffffdef)
open_tree(r5, &(0x7f0000000040)='./file1\x00', 0x80081)

[ 3085.174906] loop6: detected capacity change from 0 to 40
[ 3085.182404] FAT-fs (loop6): Unrecognized mount option "000000000000000000000x0000000000000000" or missing value
03:30:29 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r4 = open_tree(r0, &(0x7f00000001c0)='./file0\x00', 0x90001)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000002c0))
sendfile(r2, r3, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x66, 0x1, 0x1, 0x0, 0x0, 0x7, 0xd0416, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0xb}, 0x240, 0x3, 0x6, 0x5, 0x200, 0x1b9, 0x1, 0x0, 0x8001, 0x0, 0x4}, 0xffffffffffffffff, 0x3, r2, 0x3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x10000027f)

[ 3085.215920] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 3085.216891] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 3085.217495] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 3085.218073] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 3085.218631] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[ 3085.227527] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 3085.228361] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 3085.229004] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 3085.229753] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 3085.230302] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2
[ 3085.230894] Buffer I/O error on dev sr0, logical block 0, async page read
[ 3085.231413] Buffer I/O error on dev sr0, logical block 1, async page read
[ 3085.231918] Buffer I/O error on dev sr0, logical block 2, async page read
[ 3085.232425] Buffer I/O error on dev sr0, logical block 3, async page read
[ 3085.232904] Buffer I/O error on dev sr0, logical block 4, async page read
[ 3085.233414] Buffer I/O error on dev sr0, logical block 5, async page read
[ 3085.233903] Buffer I/O error on dev sr0, logical block 6, async page read
[ 3085.234413] Buffer I/O error on dev sr0, logical block 7, async page read
[ 3085.243777] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 3085.244488] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 3085.244979] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 3085.245506] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 3085.246025] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2
[ 3085.246622] loop7: detected capacity change from 0 to 40
[ 3085.246632] Buffer I/O error on dev sr0, logical block 0, async page read
[ 3085.247034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.248810] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 3085.249566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.249968] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 3085.250707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.251105] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 3085.251921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
03:30:29 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3085.252345] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 3085.253604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.254900] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 3085.256403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.257395] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 3085.258742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.259721] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 3085.261127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.263335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.264340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.265327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.266291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.267228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.268247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.269175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.270100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.271267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.274225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.275185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.276368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.277356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.278339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.279308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.280334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.286865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.288231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.289541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.290486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.291505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.292498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.293474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.294452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.304294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.305278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.306669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.307658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.308641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.309635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.310751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.311740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.312816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.313764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.314736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.315753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.316686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.317654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.318619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.319532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.320553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.321528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.322508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.323470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.324491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.325497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.326446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.327420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.328574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.329549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.330534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.331573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.332576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.333642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.334631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.335652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.337889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.338929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.340056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.341091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.342455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.346651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.351066] loop2: detected capacity change from 0 to 40
[ 3085.353677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.355555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.356214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.357114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.357601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.358063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.358615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.359417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.363231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.363724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.364354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.365450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.365922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.366590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.367076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.370430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.370919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.371558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.372095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.377767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.381830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.382336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.382800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.383841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.384338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.386419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.386932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.392998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.393635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.394162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.394621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.395079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.395606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.396076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.396656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.397383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.397884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.398383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.398842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.399379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.399849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.400343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.400886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.401418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.401911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.402397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.402852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.403396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.403883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.404393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.404917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.405450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.405950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.406449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.406914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.407457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.407933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.408436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.408982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.409471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.409963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.410463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.410923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.411437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.411936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.412444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.412978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.413486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.413963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.414484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.414968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.415466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.415965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.416464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.416986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.417496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.417971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.418516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.419034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.419532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.420022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.420542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.421052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.421561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.422050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.422574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.423060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.423577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.424050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.424788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.425318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.425801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.426391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.426844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.427338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.427857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.428372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.428851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.429429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.429899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.430483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.430950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.431448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.431973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.432498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.432976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.433550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.434014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.434596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.435057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.435553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.436087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.436595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.437050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.437641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.438104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.438682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.439176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.439645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.440223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.440691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.441198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.441718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.442262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.442763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.443277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.443778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.444317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.444794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.445317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.445845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.446395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.446900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.447417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.447931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.448478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.448955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.449486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.450016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.450567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.451070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.451587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.452085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.452628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.453111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.453644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.454247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.454743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.455250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.455757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.456323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.456784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.457295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.457786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.458744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.459292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.459754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.460245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.460758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.461275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.461763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.462290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.462791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.463385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.463864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.464380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.464880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.465418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.465901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.466420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.466934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.467510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.467983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.468468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.468990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.469502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.469983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.470502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.471012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.471611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.472077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.472593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.473093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.473627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.474110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.474638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.475222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.475752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.476247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.476712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.477290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.477755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.478279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.478779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.479348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.479873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.480368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.480837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.481394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.481866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.482385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.482869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.483441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.483976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.484476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.484937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.485511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.485977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.486463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.490780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.491328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.491852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.492376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.492854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.493376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.493841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.494607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.495071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.495645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.496646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.497222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.498363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.498856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.499367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.499884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.500396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.500947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.501470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.501955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.502483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.510953] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 3085.511716] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 3085.512647] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 3085.513116] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00
[ 3085.514005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.515487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.516720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.517744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.518847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.519854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.520869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.521978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.523228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.524261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.525267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.526258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.527343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.528452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.529532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.530567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.531698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.532772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.533768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.534801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.535917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.537009] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.538028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.539027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.540252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.541323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.542388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.543454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.544477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.545516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.546530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.547550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.548750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.549837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.550869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.551889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.552963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.553977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.554993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.556082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.557311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.558335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.559368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.560372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.561388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.562424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.563489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.564537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.565661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.567376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.568453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.569554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.571362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.574387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.577349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.578576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.580447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.583407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.585453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.586955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.588392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.591313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.594279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.599064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.600545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.601011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.602321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.602777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.603431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.603907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.604421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.604906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.605524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.606028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.606554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.607046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.607564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.608035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.608533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.609042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.609603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.610104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.610605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.611061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.611626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.612096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.612628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.613115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.613652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.614172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.614660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.615724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.616273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.616748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.617246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.617746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.618511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.619003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.619537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.620014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.620559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.621032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.621663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.622257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.623058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.623592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.624078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.624620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.625113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.627285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.627763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.628312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.628832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.629344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.629815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.630787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.631294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.631791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.632336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.632794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.633360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.633846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.634480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.634990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.635507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.635991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.639796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.640291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.640824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.641339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.641815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.642512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.643004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.643692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.644247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.644767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.645351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.645845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.648265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.648726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.649258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.649742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.650243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.650703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.651618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.652080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.652587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.653070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.653572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.654029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.654600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.655057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.655756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.656264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.656749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.657271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.657737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.658225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.658726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.659248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.659813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.660310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.660764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.661259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.661741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.662235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.662744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.663277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.663823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.664329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.664819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.665364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.665837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.666343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.666830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.667364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.668748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.669811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.670760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.671769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.672880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.674108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.675367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.677661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.678983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.680259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.681438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.682636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.683876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.685013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.685990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.686967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.688074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.689056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.689988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.690948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.694200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.695214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.696178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.697089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.698457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.699413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.700406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.701387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.702270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.703296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.704217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.705234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.706327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.707280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.708280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.709208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.710224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.711271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.712210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.713194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.714322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.715291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.716318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.717209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.718059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.718972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.719912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.720875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.721931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.722865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.723781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.724699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.725586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.726493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.727394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.728336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.729265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.730169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.731031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.731986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.732955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.733848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.734742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.735656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.736676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.737609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.738497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.739416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.740336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.741289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.742092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.743007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.744038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.744955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.745920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.746835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.747765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.748676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.749583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.750536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.751556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.752435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.753524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.754818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.755807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.757064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.758039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.759094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.760353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.761349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.762363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.763342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.764364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.765353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.766360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.767339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.768495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.769515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.770534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.771521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.772594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.773580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.774601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.776065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.777279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.778333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.779344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.780404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.781414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.782432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.783424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.784441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.785575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.786630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.787646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.788681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.789676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.790609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.791574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.792594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.793734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.799422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.800401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.801618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.802604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.803766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.804745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.805759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.806889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.807952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.808931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.809946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.810959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.812012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.816305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.820122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.821685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.822707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.824390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.825387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.826718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.827721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.828776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.831915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.832981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.833847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.835046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.835913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.836921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.837778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.838753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.839669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.840822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.841712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.842616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.843480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.844436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.845394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.848318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.849531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.850540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.851872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.852769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.853718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.854586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.855479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.856462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.857346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.858318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.859102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.859955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.860813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.861675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.862546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.863401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.864272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.865190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.866027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.866896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.867799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.868641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.869520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.870404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.873319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.874315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.875678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.876623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.877569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.878507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.879394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.880333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.881218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.882258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.883120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.884092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.884966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.885915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.886786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.887734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.888662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.889680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.890580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.891533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.892536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.893435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.894359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.896320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.899101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.900216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.901045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.901967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.903373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.904364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.905263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.907383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.908323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.909489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.913345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.915108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.916313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.917204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.918067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.919034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.919931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.921038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.921923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.922893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.923918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.924864] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.925768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.926753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.927711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.928695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.929593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.930583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.931623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.932594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.933501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.934483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.935365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.936352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.937254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.938229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.939280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.942328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.943265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.944215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.945059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.946215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.947045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.948021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.949035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.949973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.950867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.951868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.952792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.953761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.954692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.955670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.956715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.957671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.958583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.959527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.960461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.961415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.962335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.963239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.964313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.965259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.966189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.967017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.968010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.968884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.969844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.970723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.972902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.973892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.974776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.975724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.976605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.977543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.978635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.979521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.980715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.981635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.982657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.983535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.984559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.985430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.986403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.987281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.988355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.989247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.990209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.991083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.992017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.992957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.993870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.994763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.995833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.996790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.997698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3085.998656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.004361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.005335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.006382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.016383] loop6: detected capacity change from 0 to 40
[ 3086.017561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.018819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.019728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.020261] FAT-fs (loop6): Unrecognized mount option "000000000000000000000x0000000000000000" or missing value
[ 3086.020704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.022418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.023331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.024221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.025050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.025984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.026970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.027958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.038240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.039396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.049231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.050215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.053075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.053958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.055058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.055941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.057086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.057946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 3086.058924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
03:30:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 76)

03:30:43 executing program 3:
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x200000, 0x85)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
openat(r3, &(0x7f0000000200)='./file1\x00', 0x2000, 0x4)
unlink(&(0x7f0000000180)='./file1\x00')
syz_io_uring_setup(0x1341, &(0x7f0000001580)={0x0, 0xb3fd, 0x2, 0x0, 0x37c, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, r5)
syz_io_uring_submit(0x0, r4, &(0x7f0000001540)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x9, 0x1, &(0x7f00000014c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="85c5949bace43af07e20659e2cd835441aa81eb0214f68584c0054e44e14f3bf7fba78b31a3508faa111e9b87b454763f975c2bec7fa42b2d8bdfe8b7c210af20d6d8c85895a2de8d00d56d4469e0d63c1465dba3e13d2a4ce0597c0d3c48376af3897cd16672b78753bbb7fd83e25014b45ac09932e057315cd6cbad722105bf7bee35142028e5392acad7c468541cb2883290eeee3dbacc607d961f64088f97e851263e037d358f89a4ba0b1cca0f1b037df83b447e9209fc11d11e694074e1328d9a274a9556b04eb75a4c3a36c7f815f4a9d3e30602ed3e266744db84c74d86bf2d8", 0xe4}, {&(0x7f0000000380)="fbd3577ba0588136f245a45c3dd5de28b431cb4512a9cbf2aa1f", 0x1a}, {&(0x7f00000003c0)="37b38492576132611d13f92bda0e42f0c63d3489f053006245da796e0307e3e3cdf3a7513cabd6189293405e0b35f690437781a1010cdb8d04db42b399f86345437ce95a38c1eb98a2fcda737210638293c9bc411ff05eba6a1b7d984baa9a1dd7688040cd956bee1f396f433b29d232daaa6b2b910e035cd2b38f4028f1406c94b49e12abf614c332c0e2f89e339c871d", 0x91}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="2791b7f9c8294becd6a2fe1dfe9757568b7e42bb29ea35f63db3c9afb7f85465841ea3fc3815054b71604119bab3a9b28a80", 0x32}], 0x6, 0x2, 0x1, {0x1, r5}}, 0xc7)

03:30:43 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
dup(r0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)

03:30:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000340)='./file1\x00', 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x3c, 0x6, 0x5, 0x7, 0x0, 0x21c0, 0x2102d, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9000, 0xc, @perf_bp={&(0x7f00000001c0), 0x6}, 0x4010, 0x6, 0x4, 0x16, 0x2, 0xfffffff9, 0xff2a, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x8, r0, 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)=""/78, 0x4e)
connect(r3, &(0x7f00000003c0)=@sco, 0x80)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r5)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r6, 0x0, 0x10000027f)
lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000240))

03:30:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/5, 0x5, 0x8000, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:30:43 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
[ 3099.793993] loop6: detected capacity change from 0 to 40
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:30:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))
fcntl$setstatus(r4, 0x4, 0x46800)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x1, 0xfe, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x11}, 0xaefbd749236c22c, 0x4, 0x6f03, 0x6, 0x0, 0x9, 0x400, 0x0, 0x5, 0x0, 0xff}, 0x0, 0xffffffffffffffff, r2, 0x2)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:30:43 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3099.800358] loop2: detected capacity change from 0 to 40
[ 3099.849241] syz-executor.6: attempt to access beyond end of device
[ 3099.849241] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3099.850117] buffer_io_error: 823 callbacks suppressed
[ 3099.850647] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3099.852379] loop7: detected capacity change from 0 to 40
[ 3099.857989] loop4: detected capacity change from 0 to 40
[ 3099.866780] FAULT_INJECTION: forcing a failure.
[ 3099.866780] name failslab, interval 1, probability 0, space 0, times 0
[ 3099.867579] CPU: 0 PID: 12993 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3099.868154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3099.868716] Call Trace:
[ 3099.868907]  <TASK>
[ 3099.869080]  dump_stack_lvl+0xc1/0xf0
[ 3099.869380]  should_fail_ex+0x4b4/0x5b0
[ 3099.869682]  ? jbd2__journal_start+0x194/0x810
[ 3099.870017]  should_failslab+0x9/0x20
[ 3099.870299]  kmem_cache_alloc+0x61/0x390
[ 3099.870595]  ? lock_is_held_type+0x9f/0x120
[ 3099.870929]  jbd2__journal_start+0x194/0x810
[ 3099.871268]  __ext4_journal_start_sb+0x3d7/0x560
[ 3099.871613]  ? ext4_dirty_inode+0xa5/0x130
[ 3099.871930]  ? __pfx_ext4_dirty_inode+0x10/0x10
[ 3099.872269]  ext4_dirty_inode+0xa5/0x130
[ 3099.872565]  __mark_inode_dirty+0x1aa/0xc10
[ 3099.872893]  generic_write_end+0x319/0x3d0
[ 3099.873212]  ext4_da_write_end+0x1e4/0xb10
[ 3099.873537]  generic_perform_write+0x333/0x5e0
[ 3099.873894]  ? __pfx_generic_perform_write+0x10/0x10
[ 3099.874263]  ? __pfx_file_modified_flags+0x10/0x10
[ 3099.874632]  ext4_buffered_write_iter+0x123/0x3d0
[ 3099.874978]  ? iter_file_splice_write+0x162/0xcb0
[ 3099.875304]  ext4_file_write_iter+0x36d/0x19b0
[ 3099.875613]  ? perf_trace_run_bpf_submit+0xf3/0x190
[ 3099.875999]  ? iter_file_splice_write+0x162/0xcb0
[ 3099.876338]  ? kasan_save_stack+0x32/0x50
[ 3099.876645]  ? kasan_save_stack+0x22/0x50
[ 3099.876949]  ? kasan_set_track+0x25/0x30
[ 3099.877247]  ? __kasan_kmalloc+0x7f/0x90
[ 3099.877548]  ? __kmalloc+0x5d/0x160
[ 3099.877819]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3099.878173]  ? do_splice_direct+0x1bb/0x290
[ 3099.878488]  ? do_sendfile+0xb67/0x1300
[ 3099.878756]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3099.879096]  ? do_syscall_64+0x3f/0x90
[ 3099.879390]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3099.879739]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3099.880080]  ? lock_is_held_type+0x9f/0x120
[ 3099.880408]  do_iter_readv_writev+0x217/0x3c0
[ 3099.880744]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3099.881108]  ? avc_policy_seqno+0x9/0x20
[ 3099.881421]  ? security_file_permission+0xb5/0xe0
[ 3099.881770]  do_iter_write+0x186/0x820
[ 3099.882055]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3099.882389]  ? iter_file_splice_write+0x162/0xcb0
[ 3099.882739]  ? kasan_set_track+0x25/0x30
[ 3099.883046]  vfs_iter_write+0x7a/0xb0
[ 3099.883313]  iter_file_splice_write+0x737/0xcb0
[ 3099.883674]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3099.884034]  ? __pfx_copy_splice_read+0x10/0x10
[ 3099.884387]  ? inode_security+0x105/0x140
[ 3099.884708]  ? security_file_permission+0xb5/0xe0
[ 3099.885068]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3099.885412]  direct_splice_actor+0x119/0x180
[ 3099.885748]  splice_direct_to_actor+0x349/0x9d0
[ 3099.886097]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3099.886468]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3099.886821]  ? security_file_permission+0xb5/0xe0
[ 3099.887192]  do_splice_direct+0x1bb/0x290
[ 3099.887499]  ? __pfx_do_splice_direct+0x10/0x10
[ 3099.887828]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3099.888215]  ? lock_is_held_type+0x9f/0x120
[ 3099.888518]  do_sendfile+0xb67/0x1300
[ 3099.888817]  ? __pfx_do_sendfile+0x10/0x10
[ 3099.889122]  __x64_sys_sendfile64+0x1d5/0x210
[ 3099.889458]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3099.889799]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3099.890189]  do_syscall_64+0x3f/0x90
[ 3099.890473]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3099.890811] RIP: 0033:0x7fa51deffb19
[ 3099.891080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3099.892208] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3099.892737] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3099.893228] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3099.893717] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3099.894202] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3099.894686] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3099.895200]  </TASK>
03:30:43 executing program 2:
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3099.965693] loop2: detected capacity change from 0 to 40
03:30:43 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
openat(r0, &(0x7f0000000000)='./file1\x00', 0x103200, 0x6a)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:30:43 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0xaaf18862d2536138, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
fcntl$notify(r2, 0x402, 0x0)

03:30:43 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:30:43 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x1494c2, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)

03:30:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 77)

03:30:43 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(r0, &(0x7f0000000180)='./file1\x00', 0x1050c0, 0x8)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 3100.064239] loop6: detected capacity change from 0 to 40
[ 3100.067411] loop3: detected capacity change from 0 to 40
[ 3100.091916] loop2: detected capacity change from 0 to 40
[ 3100.101387] syz-executor.6: attempt to access beyond end of device
[ 3100.101387] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3100.102257] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3100.110855] loop7: detected capacity change from 0 to 40
[ 3100.120678] syz-executor.6: attempt to access beyond end of device
[ 3100.120678] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3100.121532] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3100.121995] loop4: detected capacity change from 0 to 40
03:30:44 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:30:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x500a, 0x3d2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7f, 0x1f, 0x9, 0x7, 0x0, 0xfffffffffffffff8, 0x84, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x332, 0x0, @perf_config_ext={0x4, 0x2}, 0x19400, 0x3, 0x84, 0xe, 0x9, 0x1, 0x1, 0x0, 0x81, 0x0, 0xe27}, 0xffffffffffffffff, 0x7, r2, 0x0)

[ 3100.213177] FAULT_INJECTION: forcing a failure.
[ 3100.213177] name failslab, interval 1, probability 0, space 0, times 0
[ 3100.214686] CPU: 1 PID: 13030 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3100.215734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3100.216795] Call Trace:
[ 3100.217142]  <TASK>
[ 3100.217450]  dump_stack_lvl+0xc1/0xf0
[ 3100.217982]  should_fail_ex+0x4b4/0x5b0
[ 3100.218536]  ? jbd2__journal_start+0x194/0x810
[ 3100.219159]  should_failslab+0x9/0x20
[ 3100.219665]  kmem_cache_alloc+0x61/0x390
[ 3100.220237]  jbd2__journal_start+0x194/0x810
[ 3100.220835]  __ext4_journal_start_sb+0x3d7/0x560
[ 3100.221465]  ? ext4_do_writepages+0xdae/0x3150
[ 3100.222090]  ? ext4_meta_trans_blocks+0x252/0x310
[ 3100.222760]  ext4_do_writepages+0xdae/0x3150
[ 3100.222817] loop2: detected capacity change from 0 to 40
[ 3100.223345]  ? lock_acquire+0x19a/0x4c0
[ 3100.224597]  ? do_writepages+0x1ad/0x650
[ 3100.225152]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 3100.225810]  ? lock_is_held_type+0x9f/0x120
[ 3100.226386]  ext4_writepages+0x2fc/0x760
[ 3100.226931]  ? __pfx_ext4_writepages+0x10/0x10
[ 3100.227540]  ? perf_trace_lock+0xc1/0x480
[ 3100.228114]  ? perf_trace_lock+0xc1/0x480
[ 3100.228702]  ? find_held_lock+0x2c/0x110
[ 3100.229264]  ? __pfx_ext4_writepages+0x10/0x10
[ 3100.229862]  do_writepages+0x1ad/0x650
[ 3100.230400]  ? __pfx_do_writepages+0x10/0x10
[ 3100.230994]  ? do_raw_spin_lock+0x125/0x270
[ 3100.231572]  ? do_raw_spin_unlock+0x53/0x220
[ 3100.232161]  ? _raw_spin_unlock+0x1e/0x40
[ 3100.232709]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 3100.233405]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 3100.234034]  __filemap_fdatawrite_range+0xba/0x100
[ 3100.234709]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 3100.235445]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3100.236100]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 3100.236752]  ? lock_release+0x1e3/0x680
[ 3100.237291]  file_write_and_wait_range+0xd2/0x140
[ 3100.237950]  ext4_sync_file+0x25a/0xde0
[ 3100.238490]  ? __pfx_ext4_sync_file+0x10/0x10
[ 3100.239087]  vfs_fsync_range+0x147/0x240
[ 3100.239624]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 3100.240248]  ? iter_file_splice_write+0x162/0xcb0
[ 3100.240884]  ext4_file_write_iter+0x36d/0x19b0
[ 3100.241498]  ? iter_file_splice_write+0x162/0xcb0
[ 3100.242126]  ? kasan_save_stack+0x32/0x50
[ 3100.242694]  ? kasan_save_stack+0x22/0x50
[ 3100.243239]  ? kasan_set_track+0x25/0x30
[ 3100.243785]  ? __kasan_kmalloc+0x7f/0x90
[ 3100.244333]  ? __kmalloc+0x5d/0x160
[ 3100.244813]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3100.245450]  ? do_splice_direct+0x1bb/0x290
[ 3100.246035]  ? do_sendfile+0xb67/0x1300
[ 3100.246559]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3100.247179]  ? do_syscall_64+0x3f/0x90
[ 3100.247709]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3100.248415]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3100.249028]  ? lock_is_held_type+0x9f/0x120
[ 3100.249621]  do_iter_readv_writev+0x217/0x3c0
[ 3100.250239]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3100.250914]  ? avc_policy_seqno+0x9/0x20
[ 3100.251485]  ? security_file_permission+0xb5/0xe0
[ 3100.252150]  do_iter_write+0x186/0x820
[ 3100.252675]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3100.253331]  ? iter_file_splice_write+0x162/0xcb0
[ 3100.253959]  ? kasan_set_track+0x25/0x30
[ 3100.254512]  vfs_iter_write+0x7a/0xb0
[ 3100.255026]  iter_file_splice_write+0x737/0xcb0
[ 3100.255655]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3100.256327]  ? __pfx_copy_splice_read+0x10/0x10
[ 3100.256958]  ? inode_security+0x105/0x140
[ 3100.257529]  ? security_file_permission+0xb5/0xe0
[ 3100.258190]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3100.258857]  direct_splice_actor+0x119/0x180
[ 3100.259464]  splice_direct_to_actor+0x349/0x9d0
[ 3100.260090] loop6: detected capacity change from 0 to 40
[ 3100.260791]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3100.261471]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3100.262157]  ? security_file_permission+0xb5/0xe0
[ 3100.262808]  do_splice_direct+0x1bb/0x290
[ 3100.263378]  ? __pfx_do_splice_direct+0x10/0x10
[ 3100.264004]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3100.264713]  ? lock_is_held_type+0x9f/0x120
[ 3100.265287]  do_sendfile+0xb67/0x1300
[ 3100.265797]  ? __pfx_do_sendfile+0x10/0x10
[ 3100.266373]  __x64_sys_sendfile64+0x1d5/0x210
[ 3100.266970]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3100.267634]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3100.268342]  do_syscall_64+0x3f/0x90
[ 3100.268863]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3100.269536] RIP: 0033:0x7fa51deffb19
[ 3100.270028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3100.272300] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3100.273242] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3100.274139] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3100.275045] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3100.275963] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3100.276857] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3100.277767]  </TASK>
[ 3100.280277] EXT4-fs (sda): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 16000; err -12
[ 3100.396882] syz-executor.6: attempt to access beyond end of device
[ 3100.396882] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3100.398656] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3100.422301] syz-executor.6: attempt to access beyond end of device
[ 3100.422301] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3100.424005] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:30:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x10000027f)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000180)='/\x15.]&]$//)&\x00', &(0x7f00000001c0)='./file0\x00', r3)
unlink(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)

03:30:58 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000240), 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/117, 0x75}, {&(0x7f0000001400)=""/233, 0xe9}], 0x4}, 0x10003)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
mount(&(0x7f0000001580)=@sr0, &(0x7f00000015c0)='./file1\x00', &(0x7f0000001600)='romfs\x00', 0x440, &(0x7f0000001640)=':-+\x00')
openat(r0, &(0x7f0000001540)='./file1\x00', 0x800, 0x116)
sendfile(r0, r1, 0x0, 0x10000027f)

03:30:58 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xf, 0x86, 0xd3, 0x3, 0x0, 0x6, 0x1100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x382b, 0x0, @perf_config_ext={0x100000000, 0x3}, 0x0, 0x1, 0x100, 0x2, 0x9, 0xffff7fff, 0x8, 0x0, 0x6}, 0x0, 0xe, r2, 0x8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:30:58 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:30:58 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3114.193230] loop2: detected capacity change from 0 to 40
[ 3114.198253] loop7: detected capacity change from 0 to 40
03:30:58 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgid(0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r3, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, r2, 0x6, r3, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x113402, 0x50)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x4, 0xcf, 0x1, 0x1, 0x0, 0x7fff, 0x2, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x4, 0x9}, 0x280, 0xffff, 0xfffffffa, 0x7, 0x8, 0x3, 0x401, 0x0, 0xac0f, 0x0, 0x80000000}, r2, 0xb, r4, 0x1)
ioctl$int_out(r1, 0x0, &(0x7f0000000040))
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x8, 0x8249ab9})
unlink(&(0x7f0000000180)='./file1\x00')

[ 3114.205064] loop3: detected capacity change from 0 to 40
03:30:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 78)

03:30:58 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x20000002840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0)
poll(&(0x7f0000000180)=[{r3, 0x40}, {0xffffffffffffffff, 0x1588}, {r5, 0x5560}, {r2, 0x8804}, {r6, 0x12}], 0x5, 0x7)

[ 3114.218441] loop6: detected capacity change from 0 to 264192
[ 3114.219365] loop4: detected capacity change from 0 to 40
03:30:58 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:30:58 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:30:58 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 79)

03:30:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x98, 0x9, 0x8, 0x81, 0x0, 0xffffffffffffff01, 0x83800, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1c9, 0x43840d9a06988e9e, @perf_config_ext={0x1, 0x7}, 0x2, 0xdd8, 0x8, 0x8, 0x4, 0x2, 0x7, 0x0, 0x1fb609d5, 0x0, 0x80000001}, 0x0, 0xb, r0, 0x2)
sendfile(r1, r2, 0x0, 0x10000027f)

03:30:58 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3114.462854] loop4: detected capacity change from 0 to 40
[ 3114.470203] loop3: detected capacity change from 0 to 40
[ 3114.585915] FAULT_INJECTION: forcing a failure.
[ 3114.585915] name failslab, interval 1, probability 0, space 0, times 0
[ 3114.587399] CPU: 1 PID: 13079 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3114.588424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3114.589434] Call Trace:
[ 3114.589769]  <TASK>
[ 3114.590067]  dump_stack_lvl+0xc1/0xf0
[ 3114.590589]  should_fail_ex+0x4b4/0x5b0
[ 3114.591111]  ? ext4_mb_new_blocks+0x64a/0x4630
[ 3114.591719]  should_failslab+0x9/0x20
[ 3114.592241]  kmem_cache_alloc+0x61/0x390
[ 3114.592785]  ext4_mb_new_blocks+0x64a/0x4630
[ 3114.593381]  ? __pfx_ext4_es_cache_extent+0x10/0x10
[ 3114.594053]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3114.594689]  ? kernel_text_address+0x5b/0xc0
[ 3114.595259]  ? ext4_find_extent+0xa41/0xd30
[ 3114.595839]  ? ext4_cache_extents+0x148/0x2d0
[ 3114.596454]  ? __pfx_ext4_mb_new_blocks+0x10/0x10
[ 3114.597121]  ? ext4_ext_search_right+0x2e3/0xbd0
[ 3114.597761]  ext4_ext_map_blocks+0x1e16/0x5940
[ 3114.598382]  ? __pfx___lock_acquire+0x10/0x10
[ 3114.598974]  ? perf_trace_lock+0xc1/0x480
[ 3114.599535]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3114.600156]  ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 3114.600797]  ? ext4_map_blocks+0x6f1/0x1970
[ 3114.601383]  ? __pfx_lock_acquire+0x10/0x10
[ 3114.601943]  ? lock_release+0x1e3/0x680
[ 3114.602473]  ? __pfx_lock_release+0x10/0x10
[ 3114.603031]  ? lock_is_held_type+0x9f/0x120
[ 3114.603631]  ? __pfx_down_write+0x10/0x10
[ 3114.604206]  ? ext4_es_lookup_extent+0xc8/0xad0
[ 3114.604823]  ? kmem_cache_alloc+0x21f/0x390
[ 3114.605397]  ext4_map_blocks+0x763/0x1970
[ 3114.605956]  ? __pfx_ext4_map_blocks+0x10/0x10
[ 3114.606604]  ext4_do_writepages+0x1817/0x3150
[ 3114.607238]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 3114.607878]  ? lock_is_held_type+0x9f/0x120
[ 3114.608467]  ext4_writepages+0x2fc/0x760
[ 3114.609002]  ? __pfx_ext4_writepages+0x10/0x10
[ 3114.609598]  ? perf_trace_lock+0xc1/0x480
[ 3114.610133]  ? perf_trace_lock+0xc1/0x480
[ 3114.610701]  ? find_held_lock+0x2c/0x110
[ 3114.611252]  ? __pfx_ext4_writepages+0x10/0x10
[ 3114.611853]  do_writepages+0x1ad/0x650
[ 3114.612400]  ? __pfx_do_writepages+0x10/0x10
[ 3114.612983]  ? do_raw_spin_lock+0x125/0x270
[ 3114.613552]  ? do_raw_spin_unlock+0x53/0x220
[ 3114.614140]  ? _raw_spin_unlock+0x1e/0x40
[ 3114.614685]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 3114.615377]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 3114.615993]  __filemap_fdatawrite_range+0xba/0x100
[ 3114.616638]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 3114.617348]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3114.617970]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 3114.618601]  ? lock_release+0x1e3/0x680
[ 3114.619139]  file_write_and_wait_range+0xd2/0x140
[ 3114.619778]  ext4_sync_file+0x25a/0xde0
[ 3114.620310]  ? __pfx_ext4_sync_file+0x10/0x10
[ 3114.620895]  vfs_fsync_range+0x147/0x240
[ 3114.621426]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 3114.622039]  ? iter_file_splice_write+0x162/0xcb0
[ 3114.622668]  ext4_file_write_iter+0x36d/0x19b0
[ 3114.623269]  ? iter_file_splice_write+0x162/0xcb0
[ 3114.623896]  ? kasan_save_stack+0x32/0x50
[ 3114.624464]  ? kasan_save_stack+0x22/0x50
[ 3114.625011]  ? kasan_set_track+0x25/0x30
[ 3114.625544]  ? __kasan_kmalloc+0x7f/0x90
[ 3114.626079]  ? __kmalloc+0x5d/0x160
[ 3114.626562]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3114.627205]  ? do_splice_direct+0x1bb/0x290
[ 3114.627783]  ? do_sendfile+0xb67/0x1300
[ 3114.628313]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3114.628923]  ? do_syscall_64+0x3f/0x90
[ 3114.629450]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3114.630132]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3114.630732]  ? lock_is_held_type+0x9f/0x120
[ 3114.631317]  do_iter_readv_writev+0x217/0x3c0
[ 3114.631922]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3114.632602]  ? avc_policy_seqno+0x9/0x20
[ 3114.633163]  ? security_file_permission+0xb5/0xe0
[ 3114.633812]  do_iter_write+0x186/0x820
[ 3114.634323]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3114.634966]  ? iter_file_splice_write+0x162/0xcb0
[ 3114.635594]  ? kasan_set_track+0x25/0x30
[ 3114.636164]  vfs_iter_write+0x7a/0xb0
[ 3114.636672]  iter_file_splice_write+0x737/0xcb0
[ 3114.637290]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3114.637945]  ? __pfx_copy_splice_read+0x10/0x10
[ 3114.638575]  ? inode_security+0x105/0x140
[ 3114.639135]  ? security_file_permission+0xb5/0xe0
[ 3114.639785]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3114.640466]  direct_splice_actor+0x119/0x180
[ 3114.641066]  splice_direct_to_actor+0x349/0x9d0
[ 3114.641683]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3114.642352]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3114.643035]  ? security_file_permission+0xb5/0xe0
[ 3114.643686]  do_splice_direct+0x1bb/0x290
[ 3114.644275]  ? __pfx_do_splice_direct+0x10/0x10
[ 3114.644907]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3114.645601]  ? lock_is_held_type+0x9f/0x120
[ 3114.646178]  do_sendfile+0xb67/0x1300
[ 3114.646700]  ? __pfx_do_sendfile+0x10/0x10
[ 3114.647272]  __x64_sys_sendfile64+0x1d5/0x210
[ 3114.647867]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3114.648528]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3114.649218]  do_syscall_64+0x3f/0x90
[ 3114.649730]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3114.650388] RIP: 0033:0x7fa51deffb19
[ 3114.650871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3114.653114] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3114.654057] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3114.654952] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3114.655823] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3114.656717] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3114.657596] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3114.658513]  </TASK>
03:31:14 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001840), 0x22980, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001880)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'})
sendfile(r0, r1, 0x0, 0x10000027f)
syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0xfffffffffffffff7, 0xa, &(0x7f0000001680)=[{&(0x7f0000000240)="d693f7638a95cb727c8ae49883e6266dd0acb53d0b2150cb65bb8608b6dc2855f3001b6091e6c0467fa291f8aed8cf5d1b3c870d5111beb5744d05322eb42085f49d69f6b32385254bce76b47a0380ec59cf7442b3fec09a5bcf307882d774f82e9cb5bf86bc2b26ba603a2d5038388154d474726001c5259ba846f32702a427c2455a168620b78ff23966f638", 0x8d, 0xfffffffffffffff7}, {&(0x7f0000000300)="a58dc3bf34720043bce9c9d17402bdecab7330e1ff028b75648ac1c43006e8546dd5", 0x22, 0x1}, {&(0x7f0000000340)="2cd4ff852df15ff762228b2cb1", 0xd, 0x8}, {&(0x7f0000000380)="ebb344fcf9685c06699764559f8503072d3b50a123e77b3082363a3cc9ce46d36b83971cdeae8d35314f2c0ceb8f69d2d0b6777e28f3b898ffffe9c0f60476490db3b6f57c8e5a824012161a6495ff7494e2ad11fccc3f8aee0cf48875cb97f5af9222a20a72cab53591ba6a316a8b8a618d895e1efd26ca4ac8e5ef7e36ed24689e96f869c6a72452bb0433583f420dc6346698b4f0118797aa50b0c48750d0d6de41eb1125174839f20e2c0f2d69e9e75dd5e45e1c32ec32d746e489215c5477e825b194830fe9efb2b2eab8b450e116dde49e98ff2a230edd", 0xda, 0x6}, {&(0x7f0000000480)="299f3784d828b0ab7b54ca543642ddc4e0c2acf28045d38815f3da4da4a65351a6d94208b59423c533b87918fb578797ad4e2ab3011a1d7c", 0x38, 0x7f}, {&(0x7f00000004c0)="487931909d9594194024c8d720bd692a2f45c44ab59d16e290f232bcd09ff279974c847263cc8cc48907", 0x2a, 0x2}, {&(0x7f0000000500)="21f75736aee30ade652a6b718a331f4e3e7e32d01a06b0dd7d517744a1222c238622554a166ee48b", 0x28, 0x3}, {&(0x7f0000000540)="696b88", 0x3, 0x586}, {&(0x7f0000000580)="e587f333626ae5508bbcd5a12aa028ecf74bd255b7641aab98904d877805b8886c3167c5013190c8a840e8cadd892a6af1f6396e939ad26a371e608c676a7ebfc64b2a0babd7e051869e6ab533d61184c423cadba438f4cf5b9b90b528e5f5962b48bfe5ca5d3e3963ddfbb38c4ba80ab65025e187d28e298bc7af17970210e90069d8c690d1fbeffa1afe92132fc5051c7eba52dced72368d1dbf243b17727bd7270ed6bca91290a0200a7dcae58c0827a6bd970527a2ec0a003cf0bdc63242fd915170fa6e0f9e15", 0xc9, 0x401}, {&(0x7f0000000680)="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", 0x1000, 0x1}], 0x40, &(0x7f0000001780)={[{'*.*!\\)$$@*'}, {'/proc/timer_list\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt={'uid>', 0xee01}}, {@measure}, {@subj_role={'subj_role', 0x3d, '/proc/timer_list\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]})

03:31:14 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:31:14 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:31:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000006e40)="04000000646f7366d8a02b00080101000440002000f80122acad66958a19a08652781ca1480906d65570177a9668d9db6b23759bbebac722bc8ee230c3c6f7caca3987c66312aca30b0cfa473e1191aed410535a2b82042fcda23e03ef79f8052c1055eec30d796e70eaf4cf2e988a8aceb7b16af663963ce1a9d5d6858ade1c6e858c827ea8d39a57e60a7279e8df802bb3f3aa8c99054f3b552cf78376b4826533d1f3ba6e19", 0xa7, 0x7}, {0x0, 0x0, 0x2840}], 0x802030, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
[ 3130.184618] loop7: detected capacity change from 0 to 40
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006ac0)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/107, 0x6b}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000740)=""/131, 0x83}, {&(0x7f0000000800)=""/71, 0x47}], 0x9, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000000a40)=""/75, 0x4b}, {&(0x7f0000000ac0)=""/233, 0xe9}, {&(0x7f0000000bc0)=""/57, 0x39}, {&(0x7f0000000c00)=""/150, 0x96}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/223, 0xdf}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/34, 0x22}], 0xa, &(0x7f0000003f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000004040), 0x6e, &(0x7f0000004480)=[{&(0x7f00000040c0)=""/171, 0xab}, {&(0x7f0000004180)=""/212, 0xd4}, {&(0x7f0000004280)=""/93, 0x5d}, {&(0x7f0000004300)=""/168, 0xa8}, {&(0x7f00000043c0)=""/54, 0x36}, {&(0x7f0000004400)=""/84, 0x54}], 0x6, &(0x7f0000004500)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r0=>0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000004600), 0x6e, &(0x7f0000005980)=[{&(0x7f0000004680)=""/174, 0xae}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/21, 0x15}, {&(0x7f0000005780)=""/227, 0xe3}, {&(0x7f0000005880)=""/220, 0xdc}], 0x5, &(0x7f0000005a00)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000005b40), 0x6e, &(0x7f0000005c00)=[{&(0x7f0000005bc0)=""/13, 0xd}], 0x1, &(0x7f0000005c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000005c80), 0x6e, &(0x7f0000005ec0)=[{&(0x7f0000005d00)=""/31, 0x1f}, {&(0x7f0000005d40)=""/237, 0xed}, {&(0x7f0000005e40)=""/104, 0x68}], 0x3, &(0x7f0000005f00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000006040)=@abs, 0x6e, &(0x7f0000006680)=[{&(0x7f00000060c0)=""/246, 0xf6}, {&(0x7f00000061c0)=""/105, 0x69}, {&(0x7f0000006240)=""/146, 0x92}, {&(0x7f0000006300)=""/108, 0x6c}, {&(0x7f0000006380)=""/12, 0xc}, {&(0x7f00000063c0)=""/186, 0xba}, {&(0x7f0000006480)=""/32, 0x20}, {&(0x7f00000064c0)=""/137, 0x89}, {&(0x7f0000006580)=""/251, 0xfb}], 0x9, &(0x7f0000006740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f00000067c0)=@abs, 0x6e, &(0x7f0000006a40)=[{&(0x7f0000006840)=""/136, 0x88}, {&(0x7f0000006900)=""/230, 0xe6}, {&(0x7f0000006a00)=""/7, 0x7}], 0x3, &(0x7f0000006a80)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x40002103, &(0x7f0000006cc0)={0x0, 0x3938700})
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x800040, &(0x7f0000006d00)={'trans=unix,', {[{@access_client}, {@msize={'msize', 0x3d, 0xfffffffffffffffb}}, {@msize={'msize', 0x3d, 0x8}}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x18}}, {@obj_type={'obj_type', 0x3d, ','}}, {@uid_eq={'uid', 0x3d, r0}}, {@fowner_gt={'fowner>', r1}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@subj_type}, {@dont_appraise}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}]}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:31:14 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000480)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, r2, 0x0)
r3 = openat2(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x20000, 0x4b, 0x4}, 0x18)
openat2(r3, &(0x7f0000000540)='./file1/file0\x00', &(0x7f0000000580)={0x0, 0x53, 0x8}, 0x18)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./file1/file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000240)="065a1acef3f2ddc1ae3b3fd422515a0732b22f377d52d30c61ac75f86c93a13c29b60215386af719573c4dd7f989878746321b1afe8629c0fe256a9d6178ff28680c52e4c9d1f113cde4c787dd3f14d660291ff8621200439fa906bc0f48adeac6e47da1b08005cc309724d9a4688d3c0acdf0fbf09802cf5b39060b40e0715e389edbf851e66fc3d6b03bf9", 0x8c, 0x2}, {&(0x7f0000000300)="64b39a509dc6de01f2e22045602a9e234e80e266aad2817b16175835e7b8610eeaf015f4d2380492029361efaaca589c39c28c0250216c405490d5aae2744874052967e83acb2538913fcabf28c1c9c14063cf787460324783a568fb95537de43e1aa5490d6e13d13f07e08a09f94534ac64fe8d5558a26442e5a873b9f0255763fa666439755dcdc88ff3c46a1e21", 0x8f, 0x7fffffff}], 0x2001, &(0x7f00000003c0)={[{@nobh}], [{@audit}, {@subj_role}, {@obj_type={'obj_type', 0x3d, '/proc/self/attr/sockcreate\x00'}}, {@fowner_gt={'fowner>', r2}}, {@euid_lt}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@appraise}, {@hash}]})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:31:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
getpeername$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000001c0)=0x6e)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
syz_io_uring_setup(0x409c, &(0x7f0000000340)={0x0, 0x15a9, 0x0, 0x2, 0x61, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400))
lremovexattr(&(0x7f00000002c0)='\x00', &(0x7f0000000300)=@known='system.posix_acl_default\x00')
sendfile(r2, r3, 0x0, 0x10000027f)
syz_open_dev$mouse(&(0x7f0000000180), 0x6, 0x109000)

03:31:14 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 80)

03:31:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3130.229774] loop3: detected capacity change from 0 to 40
[ 3130.243863] loop4: detected capacity change from 0 to 40
[ 3130.252869] loop6: detected capacity change from 0 to 40
[ 3130.264650] loop3: detected capacity change from 0 to 40
03:31:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:31:14 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x3, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000200)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {<r1=>0xffffffffffffffff, 0xee00}}, './file0\x00'})
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x7, 0x0, &(0x7f00000001c0), 0x1000, &(0x7f0000000280)={[{@errors_remount}, {@data_err_ignore}, {@noquota}, {@noacl}, {@stripe={'stripe', 0x3d, 0x24}}, {@resuid={'resuid', 0x3d, r1}}, {@errors_remount}, {@orlov}], [{@permit_directio}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listxattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000340)=""/91, 0x5b)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3130.381367] syz-executor.6: attempt to access beyond end of device
[ 3130.381367] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3130.383332] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:31:14 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 81)

03:31:14 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc31}, 0x50000, 0xc06, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
fsetxattr$security_ima(r0, &(0x7f0000000180), &(0x7f0000000240)=@v2={0x3, 0x0, 0xc, 0x873d, 0x48, "23add5f60c55d4206de794d2a79a1ca1f946858d6981c1e82cbaf958967a7e69cd82eebaa24687fbf1f6f127792efd0b12de9bfbddac0fc20e85f15136d7000b6abe824ecbda3505"}, 0x51, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 3130.458987] syz-executor.6: attempt to access beyond end of device
[ 3130.458987] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3130.460554] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3130.482353] syz-executor.2: attempt to access beyond end of device
[ 3130.482353] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3130.493460] FAT-fs (loop2): unable to read boot sector
03:31:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
open_tree(r1, &(0x7f0000000180)='./file0\x00', 0x800)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)

[ 3130.524438] syz-executor.3: attempt to access beyond end of device
[ 3130.524438] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3130.559211] FAT-fs (loop3): unable to read boot sector
[ 3130.560069] loop7: detected capacity change from 0 to 40
[ 3130.620395] loop4: detected capacity change from 0 to 40
03:31:14 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="55030000000000002e2f66696cfb12b6a426fa74ed02000000a22fca58bd7d653100"])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040))
r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0))
write$binfmt_aout(r4, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRESDEC, @ANYBLOB="ae3f0cc333a0c867852b31de943fc2e3635ac42a0ea521b64fcb61e791a236dd3c505e5aa39cace8e6e18fac7dce599d8faada37e8c65e3b74f7047c924bfdaa92e14b224b1c9cfaa90a06bad7c5026416ccd3b0e0f2cad79ac05809470a4aed6e041e6fa1e9df14640845e4c5a259184f70d67723d6d99307878ecf2cd218efd71de4664e13b21d8c93e808f2beef9e5fbb6bed67dd0768aff5f574970bcb81f620d8ba2ce63e5a8a449dcfeaadf934ed1caeee00209f682eaf3b45ffe0b499b4d25cf5e541048044da90ea64", @ANYRESOCT=r3, @ANYRESDEC=r0, @ANYRESOCT], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0))
ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f00000001c0)=0x4)
sendfile(r2, r1, 0x0, 0xfffffdef)

[ 3130.659844] syz-executor.3: attempt to access beyond end of device
[ 3130.659844] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
03:31:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3130.674780] FAT-fs (loop3): unable to read boot sector
[ 3130.716502] loop6: detected capacity change from 0 to 40
03:31:14 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 82)

[ 3130.759482] syz-executor.2: attempt to access beyond end of device
[ 3130.759482] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3130.769384] FAT-fs (loop2): unable to read boot sector
03:31:14 executing program 7:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x8081, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000001300)=[{&(0x7f00000001c0)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}, {&(0x7f0000000240)="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", 0x1000, 0x2}, {&(0x7f0000001240)="40aa4ad0cdc473295288226a34285fb5982b14c3d0975b4f1ba2afb1f9c05909a3e9d85de5bdf1ec409aaa0abd368c3d5286c5d9d253c52c6befecabc8b48ad9f6b16823ea10c716cca9a9be7f89df843ddf5ef25803e020d42ef9540c617c2c13d4011dc6f2a3d4c2523265b4970352d6eaa65fad347a98b3b73bc13c9aeaf00701b3704022dfaf17e6c223bdb4f06a83d2da74710af41918e386f3f2e6c5aad8de58ec4b3421f7758a1dea7b44c1371dfa535445af0d3febbcd6", 0xbb, 0x100000000}], 0x38040, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x8, &(0x7f0000000200)=[{0x40, 0x6d, 0x0, 0x1ff}, {0x4, 0x43, 0x7, 0x8}, {0x968, 0x3, 0xc8, 0x64}, {0x9741, 0x4, 0x0, 0x101}, {0x7f, 0x8, 0x69, 0xfff}, {0x48, 0xf0, 0xff}, {0x4, 0xb, 0x1, 0x9}, {0x7, 0x1, 0xda, 0x10001}]})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r2, 0x5441, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
close_range(r1, r2, 0x0)
unlink(0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
epoll_create(0xa3)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x10000027f)

[ 3130.915875] loop7: detected capacity change from 0 to 264192
[ 3130.932672] FAULT_INJECTION: forcing a failure.
[ 3130.932672] name failslab, interval 1, probability 0, space 0, times 0
[ 3130.934487] CPU: 1 PID: 13138 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3130.935579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3130.936671] Call Trace:
[ 3130.937025]  <TASK>
[ 3130.937346]  dump_stack_lvl+0xc1/0xf0
[ 3130.937897]  should_fail_ex+0x4b4/0x5b0
[ 3130.938453]  ? __es_insert_extent+0xed1/0x1370
[ 3130.939082]  should_failslab+0x9/0x20
[ 3130.939604]  kmem_cache_alloc+0x61/0x390
[ 3130.940167]  ? __pfx___es_remove_extent+0x10/0x10
[ 3130.940840]  __es_insert_extent+0xed1/0x1370
[ 3130.941483]  ext4_es_insert_extent+0x2b4/0xc50
[ 3130.942136]  ? __pfx_ext4_es_insert_extent+0x10/0x10
[ 3130.942845]  ? percpu_counter_add_batch+0xc8/0x180
[ 3130.943504]  ? do_raw_read_unlock+0x44/0xe0
[ 3130.944102]  ? ext4_es_lookup_extent+0xc8/0xad0
[ 3130.944784]  ? kmem_cache_alloc+0x21f/0x390
[ 3130.945386]  ext4_map_blocks+0x9fa/0x1970
[ 3130.945988]  ? __pfx_ext4_map_blocks+0x10/0x10
[ 3130.946669]  ext4_do_writepages+0x1817/0x3150
[ 3130.947325]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 3130.948004]  ? lock_is_held_type+0x9f/0x120
[ 3130.948627]  ext4_writepages+0x2fc/0x760
[ 3130.949186]  ? __pfx_ext4_writepages+0x10/0x10
[ 3130.949807]  ? perf_trace_lock+0xc1/0x480
[ 3130.950380]  ? perf_trace_lock+0xc1/0x480
[ 3130.950976]  ? find_held_lock+0x2c/0x110
[ 3130.951558]  ? __pfx_ext4_writepages+0x10/0x10
[ 3130.952187]  do_writepages+0x1ad/0x650
[ 3130.952734]  ? __pfx_do_writepages+0x10/0x10
[ 3130.953336]  ? do_raw_spin_lock+0x125/0x270
[ 3130.953931]  ? do_raw_spin_unlock+0x53/0x220
[ 3130.954550]  ? _raw_spin_unlock+0x1e/0x40
[ 3130.955135]  ? wbc_attach_and_unlock_inode+0x4a3/0x910
[ 3130.955856]  filemap_fdatawrite_wbc+0x14b/0x1b0
[ 3130.956526]  __filemap_fdatawrite_range+0xba/0x100
[ 3130.957217]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[ 3130.957963]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3130.958614]  ? ext4_buffered_write_iter+0x12e/0x3d0
[ 3130.959280]  ? lock_release+0x1e3/0x680
[ 3130.959832]  file_write_and_wait_range+0xd2/0x140
[ 3130.960523]  ext4_sync_file+0x25a/0xde0
[ 3130.961072]  ? __pfx_ext4_sync_file+0x10/0x10
[ 3130.961689]  vfs_fsync_range+0x147/0x240
[ 3130.962254]  ext4_buffered_write_iter+0x2ff/0x3d0
[ 3130.962898]  ? iter_file_splice_write+0x162/0xcb0
[ 3130.963558]  ext4_file_write_iter+0x36d/0x19b0
[ 3130.964207]  ? iter_file_splice_write+0x162/0xcb0
[ 3130.964847]  ? kasan_save_stack+0x32/0x50
[ 3130.965431]  ? kasan_save_stack+0x22/0x50
[ 3130.966002]  ? kasan_set_track+0x25/0x30
[ 3130.966566]  ? __kasan_kmalloc+0x7f/0x90
[ 3130.967137]  ? __kmalloc+0x5d/0x160
[ 3130.967656]  ? __pfx_ext4_file_write_iter+0x10/0x10
[ 3130.968337]  ? do_splice_direct+0x1bb/0x290
[ 3130.968936]  ? do_sendfile+0xb67/0x1300
[ 3130.969476]  ? __x64_sys_sendfile64+0x1d5/0x210
[ 3130.970113]  ? do_syscall_64+0x3f/0x90
[ 3130.970662]  ? entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3130.971379]  ? __pfx_perf_trace_lock+0x10/0x10
[ 3130.972003]  ? lock_is_held_type+0x9f/0x120
[ 3130.972618]  do_iter_readv_writev+0x217/0x3c0
[ 3130.973252]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3130.973942]  ? avc_policy_seqno+0x9/0x20
[ 3130.974520]  ? security_file_permission+0xb5/0xe0
[ 3130.975204]  do_iter_write+0x186/0x820
[ 3130.975742]  ? __kmem_cache_alloc_node+0x1cd/0x310
[ 3130.976431]  ? iter_file_splice_write+0x162/0xcb0
[ 3130.977088]  ? kasan_set_track+0x25/0x30
[ 3130.977665]  vfs_iter_write+0x7a/0xb0
[ 3130.978190]  iter_file_splice_write+0x737/0xcb0
[ 3130.978844]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3130.979533]  ? __pfx_copy_splice_read+0x10/0x10
[ 3130.980196]  ? inode_security+0x105/0x140
[ 3130.980767]  ? security_file_permission+0xb5/0xe0
[ 3130.981416]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3130.982079]  direct_splice_actor+0x119/0x180
[ 3130.982681]  splice_direct_to_actor+0x349/0x9d0
[ 3130.983306]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3130.983959]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3130.984661]  ? security_file_permission+0xb5/0xe0
[ 3130.985302]  do_splice_direct+0x1bb/0x290
[ 3130.985860]  ? __pfx_do_splice_direct+0x10/0x10
[ 3130.986485]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3130.987163]  ? lock_is_held_type+0x9f/0x120
[ 3130.987749]  do_sendfile+0xb67/0x1300
[ 3130.988276]  ? __pfx_do_sendfile+0x10/0x10
[ 3130.988916]  __x64_sys_sendfile64+0x1d5/0x210
[ 3130.989527]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3130.990188]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3130.990892]  do_syscall_64+0x3f/0x90
[ 3130.991409]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3130.992072] RIP: 0033:0x7fa51deffb19
[ 3130.992571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3130.994807] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3130.995758] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3130.996659] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3130.997570] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3130.998473] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3130.999374] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3131.000303]  </TASK>
[ 3131.085019] loop7: detected capacity change from 0 to 264192
03:31:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
write(r1, &(0x7f0000000240)="0c5aa803ee050076ca2b954dfdd8f6f33391eac963dc070b994977db534e47b477da192f2c3468e1a411071d40104635ee0a94e46a5bfe162084cf3999bcbb296c4bcc54982bfbef64660f86f5584482a6ef00b9ea6b62262f34e6a80843e2f32850fda8393dfd0d515e6e5c0d01cd38c46a58fe73759fe4617862481599956b016cadf4fc4748aaf7f487be98074a4b7ea22092d2ec416c7e97043b015ae72edef2a56bf5b1f49299258878daa4f95b277b9a0ea00fc1fd72bd8f55e55fd37d748479e63cf90584ee65e33ad2a2596671b37284a6a3703878d12528c2efe739b8c104cbc35566b26eacd0b83842e67cb94f3befe4d41c94f07ee1997f1355441ea0eabf390688306d996f85686606d3a0864c03a9ec1c3f2d156c5c2285fa3c91a4ff0cc1d49852b513bd7f6830ee510dc09b0d0cf1dbf04beb9125fe468eb12b2010b5c545f14df45b56c2fbf6c62d489bf012d17008f6330bd3f894fcd9bc34835dfc1f5767ebcdac60512801d6255c9edeeec328c033c99dfc0ffc0b73a642a4bda6fa85e8418bd40b16148558afe44a3cbded0fa9cf22ea3f368e42580edc9f021426df05d5728cbc44bced969c25a603925f96060360ebf11d4af7ec04b44ad6d4f244f241a4cec4024945b5961fa951f456f324a159cefff2be265967852c6bb1c784d14c6a792bae47d92638b556aab5cc2affd43197ba43f763a44541f40529f0c7837e42a5fb3a6131b88d48022cab36e4c4b31f47212b718c26126c62922c5f1801d85262d31b1dc53ee40549edcffb1674dd22d09b5851ab833c7be5fc9d4635d67c72580577b6718084b48592010519aee889499c1718d982d387f09ede17d2e7d321c859d1d08bf00d4e1e4dc1d8266201344588b49f6fb64eff76cd0a222b0a6545d0bb3d1f434061b0d7892701f89c09c65a0da4d2cfaec4fab09ed4e9e9fe0e353170348ed2c4fffedc58ec80880534095934c4889fe0beed224e3cd05da45761ce47fe1f172fb06e0c494949912953b90716da9cdeb1b602cc9d4d3c9e9d1b96e18c98fa0872d70aa5bf3d9d09f14fe46eb42d082e07042b5ac19f66c0bd99faba1095e7f1becbc0dc02a639b1c5f63cd1fbe19935ae2c11c1e869a53c69b2180282f4cecaf398c5dfe739d0cf5179a9778a960b04fef6a50914b12461c9e38af389d39a38273d8cb6d4e17263c9c7fb53f1848b0cb69e249f44cb078d4a1b81f8ce047d1fac225ad3f448ca341114e88e247c56cbc782b24d2b0e9571781715f1c5f1e58ec1c40e9a83dafcfd1b5651d7f6ba84aef46c82c18d4f6cf24691641c1c099b99fcf660ebc37045f2df311909290431688ff9835bd97843e873d2e16aaa5dc65fc43d5ccb11126590916df55ede440992be72542bb344cf32d3b427c51d2a5ff58e95013e8a8a5ce56dbf05d5171ada52174e760cbae51ca2de64dba0b3711a9fcb2daa2fed21356cc41d85ebd85a8cd3f5731597b1f4ea2bf36ac401d445264fcbced563b63e5cc9dec38018f4401a273179c53190aebea11bbbf3d525d26f313db44c4fbfe1dc2436fb7b453680363e7d693292e0c4a8f6e10b6cf68d53b64399fea0514a7bb0cc406963a3244091a4321985ed005461cb0c6476bca9424195afcdcba01c27240a4f9be8b049179c69ca3ca90b38ca0fd37a8eae564ead2c0533a9f114c292691bdad0da003435e21d6c83e7ffc9db422dc500fa73dafa8f2175dd18d01cb29ea6e9a7186a1e49cd7cadc4b32ad6333d70f6d63eb19cfd874af46e49dd52b43d6c3b990e356af0fa0eba8846a01373745bf3a3f1750aa6ed9f52152bcff93a6e21d6e8bd10653c10fb5eb850f96cbd7fd9c426ebcceaf772bb8363805fe1fb86147fad71dadb7123d806ce9a73b0f2ddf9e474a50cb0ee498cfe3c1e846e2db8aff1002aa7022e007735690f0eee25a299be31b58bda1e71f50a3e4534381a766eec1ddd68d82688656fabc089baefb71a7e596ce597f20a843df8f86c26d023b245b5db0153b447408b54d7df524188eeedd98f7183e44fc4a657f37decab2dd89a75e1a0dbdab9e3a4574836e0ca1fb3365cc9a905b1548f40c757dc47930f5442ae8e1fef31c557a3282a43deb22417beff99dd5b04d78e40bc5f3604d33159c648ad356b21ac7cb77630d72dbfa784fda0b62b3e068af6041a7309115966538d0dac1b7a3c0e7c99d57104473d23e2f4b852676e2c9cd538bb84610bd14d1047b985c911f489302dd88e33a3b12d59c9a7738f053a66b16d070c24fe0dd84bb9ea4abd278b4161db7548d96a8bcf9613cda0dd181dcecca5e098fc30249266b7431d8de666f167681fd5f629234669d9b01eb1adff755433450e76c817b895ddff716125b2193cfd0329891be4723f6e388b01d3c2e584f5d8a396c12e65bfe9691ec5f2ba22cc2dd8e9d44295a20ee3076c6ef3911d53e145a992b291965f1d9affedea965686a8c5b45730a85f1bb9b96a376131c674256fc8476a03bd73b2a7afe2f4f86da2cbeac7970014a6abe7749ffce29826df25a98bf26996da8254d8a1ea602023f67aec1a3de454862c54878187150a5d8459b1a58db7e6e30d8a0d2271b13ba84999ebe65b94494144e6856a21c7983f7e9f77b6e1e8e01d69f3d8dcdd7fff48213ab3a820987269ccefaa5f5463142a947706444114d9ada67fd1de061a29182c84f5da04b9affe568da20f0785592175cae97fb7f1b037c5164b8bfa23d1d77b22cdb9bf69a5109d0a830c224f6e3e18781c8897b6d394633f98e08e30d43a1bee05e792bc63c823f09ef5f8e464af2d0a730d22eeb8038e2cc06f44957cf78dfea2ce638269ab15b9897f96e0f41b937fa132da28535ba5d194babeeca87252c9fc4f1b88f3f2aa4d411833c643bc13f9bf67b4432dec4020c9147ad69c7bca376ddf6bbd884911de1d82a69cb5b064bed2c862d0f3a8c8dae2a771b8da6201ad84f58440dbfda20c23ea7d7588cae906f821ea2ec6a3078d93bbd6427314f6f4cf4ee3a18f641b0aa9031be309f54d3baebcb979fec5f6da9cc6da907291c369e80b8c7e37bba25ed2384c32b6fe50e80957e6d607bf4510126c21fc0e894f4e591d22681f09016c8ada9035898244832ff2b7cd41f0ca87544033ad91d01a8dc0f5f223866aa730e076f9abfea0dffb860117b64fca7f670d2cdc5ed6cb184de06937453422dd3f4b721d430bd02ad30d19967a3bff89142beaa449fa311897a82a4ebe9a93c9de5c968e80d22d682b6c931049eeb3db146b070bede910eaece393aa49e53cd0488d37080cf3ef5d0fe00091fd53e867abde0a6c3cf23c582a722af80b300f6182451a08a27f4f877076cb6088fd4fb049bb06de75e22b96d3cd9022fed4718b7c2c8f9d6e6952399f80c2b7797c11b8f4ab94643c0700703a56eba10d002a197e5b23dbe4eef7ea750f76c272624445af8143ea88db00983bce64eb2f184ca5cb7a3434b93b8d28c7043a05038689fcd949675a8f7daabdf82b508b29360de075e7a8a348d8264720d20209cbd02de9790fe79022c32b25d5d68bbbc7b4a657227715b135804b9502cc985be77df93928cb4595ee1a86f3f88ccd823c8bd8090c214d3a138812a9351f40e12252fdd261beebc662bbed1b6d12fe4f731212a37a0964eb6f9d161b5dfa0582624d746891b7d1cd840381eeffde4383fba868a2f12b75ea615886bbfa5c4c524c66d5e1f63d0307b115d11884bf9154537aa89cf162efcd2232f624563b81d34feb15925491a6653aea338aa77feb7f40c38ef0d57651301aec6bbf4202b8bc95b6c805fc25ccdbb646f0a56f6a94b69e7004506999feb97252c506905db993b2d320d939865176a7ce3281f816e8dc9467a193a6dd644b6485cbe66cb5e5c989ef2de77c3bc13916d99c8f2f2c5e804187738cbbb25b19462114132f2cbc62c386f9b66a8f9811c0bed099ef1fee007bf07e66c3025b7a1f705f0a22ea449ac42d56605d4d54fbcce3a29f6a2b1163688cfa2eb2d8b796c5039ae9a26f2ab59e3d9179b1a6e5c3c13ab664fcc7314ab6852ab4b304d415d8552d55fc1875bebefa327dcddcd0bee592701e6325ab0beddf30b43e8dcb84d9de7efc8517d0db430656bc08f96dddb7321ce308eae5cbb98bbc5d208c99b2592a47436aa711e8d2292b39cee0e38e23574496316dfbc3eda5184b4a172e6f5a05cd611b3bca1db4ed204d0c6f78749b9de999d4217fb768245e9c05c923bfdffa07d201bacd6258a620963e3a42a05365f5063c5757f3c9b409ab439f17a5280dc4119fa5eed1e285cd220dff9ce3f547b950e19418ec7a0f2cc4319ec3514d4de7979e2a24f18604ed58af2b5debf8ca2e583673756ed1d20dcb4706f09dd4f22ac3716c35dd349676743d9a68da5af02970c02e2bf1694595b4f0c7581a430dd0b830942218c8b0be527ff999c2305f4826e1c99bb14a97043f9e1b17e446f73ca63da406cd5eeab1927229532e3fc7faeb0f846743ed56aad0c66ce5dc7ace4d7add0d6c48182ef44d14f2591eb5db184622ae2a0d913bcb1c6543cb44e6aa133ff27ec04729c3860f884e1edf842c1e5221ad901e985d8a12affc3d9aa692c23fd456f5cfa37db7b32eab2f5eaa1384af51ed390e26e697f60c906b5c8cbf243809f514eca992b906d10f7bcdec18b3337b345c8c41e6d637bc0cb80f36ba4d4aad9b27cabf9be8664b82146b1f7fcfdfad8706b959289794351377c270c4b19a0e1c3cff5efeba89070940077670825aefd0ed7665a722322699b3affb6e04589c7c90ee7863fbff4389d819d913a7bfd71e949d0946178255db73b93390696b1025645fdfa0f8628cf317e3c8e896a6d14f076f5a5919646a2abf1832dab19c5b3a3906817fd05c76ab30a717303249410f5823cd42e2a851e9073273e330155f976ce908c4b999f83501b0d657c877649d8aad265977c49c54d2f7be0329a369f188d325ee19920b1dd9f4cdc375ca29ba21ae5b5fdad73fc75e8988f157ef5763d60c38512065d6ef1f8eb4d15556a604b80191c2dd041dff7ed5d3b979ce6f4651117a6234e3a7348154ac1f53216c2d528fee1e38ee306f42f4662751d19a7be95e6079bfd6ce77b4ca2866caeef2650f06b467a9fd281eaf68153a822100dda2cffc32c93032c27ca9f6b5bee6edb4680bfda5282c9d06da2566c1ab46e9fc101ba2f79ec6adb3c66b8362e89fde86943531ec6b40697d90ebd6f3ab0813072d3b05d0cd56fed2041a095c4a71ca862ca24b1633c123cfc673b5e7e962de632720d48c9561a1ebac3891bb0912dffa49b6810c0357b4101947a712fe051b6a6be898d8ebe9edf08312beb8ef3927d134762acfbedffff1f954c21b3d53d8950339dc4facefc999e51364a137799d82716748036e85a8a2340638c71048d4664ce2c417d166523bde0302f20b9a7bff64e96e0474e4dfe4cf27e66f5f287761fcf60da5d1669a5fcdec07ebd7a3bed48a0f44f76fcc6739d440894c9fd3e30751b9986d6e7a0ca3ec9b80c86efe555c6ae3b6d26a853dead1b36344006c81157e28a6e60b73afb172faa536a158cdefb56944398bd4da2475372f35fcf6bb1b86f233ec757349a984065b594d9ad9007d92e22803f3efb28200890db5e6ed5b74a4064715774afbe89f875ca7c08173013167eb0eea3d14a4e0c8fa271a3843592856796f904bcbf4e1303eb9d05522dac542b13d5613ad09b5ed6f544a7361d7b5f5fa2b358b2f991185f4647e6230", 0x1000)
sendfile(r0, r1, 0x0, 0x10000027f)

03:31:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000340)='./file0\x00')
chdir(&(0x7f0000000000)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000002000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf35, 0xffffffff}, 0x0, 0x9}, 0x0, 0x0, r2, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000027f)
openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x208000, 0xc0)
r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x7, 0x1, 0x0, 0x2, 0x40000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x3f, 0xffffffffffffff31}, 0x80, 0xffff, 0x400, 0x2, 0x4, 0x4, 0x20, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x7, r6, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x1)
tee(r5, r3, 0xfffffffffffffffd, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=@v1={0x1000000, [{0x1b, 0x2}]}, 0xc, 0x1)
unlink(&(0x7f0000000180)='./file1\x00')
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000400)={0x3, &(0x7f0000000140)=[{0x2, 0x11}, {0x9, 0xf0c}, {0x5, 0x81}]})
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f0000000300)=0x1e)

03:31:31 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x9917}}, './file0\x00'})
pread64(r0, &(0x7f0000000240)=""/217, 0xd9, 0x8000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:31:31 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:31:31 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:31:31 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(r0, &(0x7f0000000280), 0x8, 0x400)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = dup(r3)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r5, 0x5441, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x2)
ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
write(r5, &(0x7f0000000180)="7c9b9943188942b0e47c45c8b66e4f8aef7884d6907a72cf8ce73bfb7db67daf750d2f395078f708cb3aa3d60bfdd1531079cc5a1d61c99bc2c093f880f800478683d37a8a22c1ce0f19309339b926c3d7deb76a1c01f28a23a3143cf7978508dc1903c9fd1a18a8a7e27dfa6879ae7d40b895bf1895cb64160ac89d2f1f84a4748630c76ed333177f48a6a38f54b018305f9fde1058eb167a941bcd10d08ce039cb9c5a427a7f28864f05c46c31051d2b07", 0xb2)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)=0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000002880), 0x4000101, 0x0)

[ 3147.211252] syz-executor.2: attempt to access beyond end of device
[ 3147.211252] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3147.222666] loop3: detected capacity change from 0 to 40
03:31:31 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 83)

03:31:31 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000240)={0x5e, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e23, 0x2, 'lblc\x00', 0x14, 0x9, 0x1}, 0x2c)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x8, 0x81, 0xff, 0x0, 0x1, 0x80020, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffffffffffe1, 0x891}, 0x88, 0x1f, 0x0, 0x6, 0x40, 0x3, 0x9, 0x0, 0xc32, 0x0, 0xfd}, 0xffffffffffffffff, 0xc, r2, 0x3)

[ 3147.239894] FAT-fs (loop2): unable to read boot sector
[ 3147.260623] loop4: detected capacity change from 0 to 40
[ 3147.269215] loop6: detected capacity change from 0 to 40
03:31:31 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3147.351763] loop7: detected capacity change from 0 to 40
[ 3147.360018] syz-executor.6: attempt to access beyond end of device
[ 3147.360018] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3147.360995] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:31:31 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 84)

[ 3147.380009] syz-executor.2: attempt to access beyond end of device
[ 3147.380009] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3147.383730] FAT-fs (loop2): unable to read boot sector
03:31:31 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r1, &(0x7f0000000040)='./file1\x00', 0x101000, 0x180)
unlink(&(0x7f0000000180)='./file1\x00')
openat(r0, &(0x7f0000000000)='./file2\x00', 0x0, 0x40)

[ 3147.420944] loop3: detected capacity change from 0 to 40
03:31:31 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:31:31 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r0}, './file1\x00'})
openat(r2, &(0x7f00000001c0)='./file2\x00', 0x8000, 0x124)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r3, r1, 0x0, 0xfffffdef)

[ 3147.510627] syz-executor.2: attempt to access beyond end of device
[ 3147.510627] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3147.524401] FAT-fs (loop2): unable to read boot sector
[ 3147.534791] loop6: detected capacity change from 0 to 40
03:31:31 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = syz_io_uring_complete(0x0)
mknodat$null(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103)

03:31:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:31:31 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 85)

[ 3147.572102] loop4: detected capacity change from 0 to 40
[ 3147.577408] loop3: detected capacity change from 0 to 40
03:31:31 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4, 0xdf, 0x7, 0x15, 0x0, 0x6, 0x11, 0xd, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x1, 0x800}, 0x0, 0x401, 0x3, 0x3186c37cad8f4395, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x5359}, 0x0, 0x0, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/boot_params', 0x80000, 0x82)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 3147.621023] syz-executor.6: attempt to access beyond end of device
[ 3147.621023] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3147.622917] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3147.630645] loop7: detected capacity change from 0 to 40
03:31:45 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:31:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 86)

03:31:45 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:31:45 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0xc}, 0x2000, 0x1, 0x0, 0x1, 0x7, 0xfffffffd, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x400000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'gre0\x00', {0x4}, 0x1})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000180)=0x2)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:31:45 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2006, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x2}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:31:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4001)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x0, 0x40, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800000c, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xeb7, 0x10000, 0x2, 0xc547, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x10)
sendfile(r1, r0, 0x0, 0x4001)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_gpu', 0x0, 0xa0)
ioctl$KDSKBLED(r1, 0x4b65, 0x6)
clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x2, 0x46)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)

03:31:45 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000a850a9b5de05bc1c4ec624617b251f1cec6b92d857ccf3d7a68dc96604a504b741db188a806a795047d953716ae845ff8094f6449f8a808d1a559f75dd701ac98aab5ef11fc5dc1084093e6a99c2a06a34c9f5673286f584db275ea0e4bb3e5a72ca63a1386da9df7eccc3514b5d772e5c39115e768897d47f47de7a5d92c3ce7bb3ca06102a01bc720d867a0e493d9b0e318f82345482490b4359642b5cb3a78568bb74c8aea892bbc16755f6933e40cccfde25a0b19a04fe599b7b3e9c5e8c6d5e6558a6d8e1c5eba05e"])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

03:31:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x83)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0)
r1 = getpgid(0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x8, 0x9d, 0x0, 0x33, 0x0, 0x7f, 0x4c202, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_bp={&(0x7f00000001c0), 0x4}, 0x808, 0x2a, 0x4, 0x3, 0x9, 0xfff, 0xffff, 0x0, 0xfffffffb}, r1, 0x10, r0, 0x5)

[ 3161.770728] syz-executor.2: attempt to access beyond end of device
[ 3161.770728] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[ 3161.771824] loop4: detected capacity change from 0 to 40
[ 3161.772823] FAT-fs (loop2): unable to read boot sector
[ 3161.774116] loop7: detected capacity change from 0 to 40
[ 3161.782097] loop6: detected capacity change from 0 to 40
[ 3161.788506] loop3: detected capacity change from 0 to 40
03:31:45 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3161.887022] syz-executor.6: attempt to access beyond end of device
[ 3161.887022] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3161.888432] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:31:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0xfffffffffffffffc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x0)

03:31:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 87)

[ 3162.011914] loop3: detected capacity change from 0 to 16383
[ 3162.020871] FAT-fs (loop3): bogus number of reserved sectors
[ 3162.021484] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 3162.048601] loop2: detected capacity change from 0 to 40
03:31:45 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0))
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x800000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b000000fbffffff002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x210800, &(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="556fd4960686fb3a7b2d8a7fcfe4b8619f59bef39a01e70ebcfd73352b780379bbf4d947eac9294ee11abe3e031cddc537126310b4b5ff96509c9de0832ceca03a393253f773d08cc4cf525cdfb91c07d56daf32bdaff08906c2452ad37d4306ec854b64861bbd487977fdfa4adf15e5297a6d66a3a70a2a5c5d8c881c20cc5952098d4929b42b92453977e4f7a13646863001e0a9ac38df1d028aadb0b79699f7d359b0d90cfea843b92701b0012f3923a37b0cd895b5456742221e", @ANYRESOCT=r2, @ANYBLOB="b0b70a8078eb84b8aed54943d181d47681819e2857aa208bdcd121fc8c9c161c647074ef2856d26c7b92f1e5b403e8b420f7ebdd54aa4b31bde0b2b153f2bbbe3bec16cdd2dd46726f4c0d32d8de7567f2e2ebbc0eafa872fa39937de24b7642de929de105252ebcb8497b1f1d1956877e286902fd26942857c9e4970e73819bf704d9803c2d33d7ac6bb529283a213551a5afeb7971329f7ce738cf5854", @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESHEX=r0])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)

[ 3162.067966] loop3: detected capacity change from 0 to 16383
[ 3162.069383] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
[ 3162.073766] FAT-fs (loop2): bogus number of reserved sectors
[ 3162.074540] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3162.119359] loop6: detected capacity change from 0 to 264192
[ 3162.121886] FAT-fs (loop6): Unrecognized mount option "" or missing value
03:31:46 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3162.240627] loop2: detected capacity change from 0 to 40
[ 3162.243504] FAT-fs (loop2): bogus number of reserved sectors
[ 3162.244229] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3162.950113] loop6: detected capacity change from 0 to 264192
[ 3162.954227] FAT-fs (loop6): Unrecognized mount option "" or missing value
[ 3176.230856] loop2: detected capacity change from 0 to 40
[ 3176.236545] loop3: detected capacity change from 0 to 40
03:32:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 88)

03:32:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x7977c1a4f872bf35, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
unlink(0x0)
stat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
statfs(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=""/153)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='^.\x00')

03:32:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x101000, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r3, r2, 0x0, 0xfffffdef)

03:32:00 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e20, 0x5, @private0, 0x9}, 0x1c)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x40c, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
pipe2$9p(&(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x84000)
preadv(r2, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/9, 0x9}, {&(0x7f0000000540)=""/18, 0x12}], 0x8, 0x100, 0xfff)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:32:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:32:00 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = getgid()
r2 = getgid()
r3 = getgid()
setresgid(r1, r2, r3)
r4 = getgid()
r5 = getgid()
r6 = getgid()
setresgid(r4, r5, r6)
statx(r0, &(0x7f0000000280)='./file2\x00', 0x6400, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{0x2, 0x5, 0xee00}], {0x4, 0x1}, [{0x8, 0x1, r1}, {0x8, 0x4}, {0x8, 0x6, 0xee00}, {0x8, 0x4, 0xee01}, {0x8, 0x1, 0xee00}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, 0xee01}, {0x8, 0x2, r6}, {0x8, 0x0, r7}, {0x8, 0x1, 0xee00}], {0x10, 0x2}}, 0x7c, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x10000027f)

03:32:00 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:32:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x600800, 0x41)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3176.251005] loop6: detected capacity change from 0 to 40
[ 3176.258194] FAT-fs (loop2): bogus number of reserved sectors
[ 3176.259009] FAT-fs (loop2): Can't find a valid FAT filesystem
03:32:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3176.303119] loop7: detected capacity change from 0 to 40
03:32:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3176.366297] syz-executor.6: attempt to access beyond end of device
[ 3176.366297] loop6: rw=2049, sector=48, nr_sectors = 4 limit=40
[ 3176.367294] Buffer I/O error on dev loop6, logical block 12, lost async page write
[ 3176.376056] loop3: detected capacity change from 0 to 40
[ 3176.380863] loop2: detected capacity change from 0 to 40
[ 3176.391849] FAT-fs (loop2): bogus number of reserved sectors
[ 3176.392475] FAT-fs (loop2): Can't find a valid FAT filesystem
03:32:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 89)

03:32:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17, 0x4}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x1, 0x3)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))
sendfile(r2, r4, &(0x7f00000001c0), 0x4a1)
unlink(0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x10000027f)

03:32:00 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
mknodat(r0, &(0x7f0000000180)='./file1\x00', 0x1, 0xd5ba)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0xecba112393bc203c, &(0x7f00000002c0)='.-\xbb\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
fcntl$dupfd(r2, 0x0, r1)
sendfile(r1, r2, 0x0, 0x10000027f)

03:32:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:32:00 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x6, 0x62, 0xff, 0x8, 0x0, 0x4e8, 0xa000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x9, 0x6}, 0x4000, 0xfd32, 0x3, 0x7, 0x6, 0x2, 0x100, 0x0, 0x4, 0x0, 0x6}, 0x0, 0x10, r2, 0xa)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x9, 0x7c, 0x5, 0x0, 0x3, 0x10c00, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9f, 0x1, @perf_config_ext={0x101, 0x7ff}, 0x10000, 0x80000000, 0x3, 0x2, 0x1, 0x95, 0x3ff, 0x0, 0xfff, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r1, 0xa)
sendfile(r2, r1, 0x0, 0xfffffdef)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x10000027f)
write$selinux_attr(r3, &(0x7f0000000280)='system_u:object_r:syslogd_var_run_t:s0\x00', 0x27)
openat(r0, &(0x7f0000000340)='./file0\x00', 0x402, 0x110)
r5 = inotify_init()
fsetxattr$security_selinux(r5, &(0x7f0000000040), &(0x7f0000000240)='system_u:object_r:audisp_exec_t:s0\x00', 0x23, 0x1)

[ 3176.533548] loop2: detected capacity change from 0 to 40
03:32:00 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='configfs\x00', 0x20a082, &(0x7f0000000240)='vfat\x00')

[ 3176.539740] FAT-fs (loop2): bogus number of reserved sectors
[ 3176.540350] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3176.565806] loop6: detected capacity change from 0 to 40
[ 3176.588039] loop7: detected capacity change from 0 to 40
[ 3176.590645] loop3: detected capacity change from 0 to 40
[ 3176.628663] syz-executor.6: attempt to access beyond end of device
[ 3176.628663] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3176.629603] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3176.659641] syz-executor.6: attempt to access beyond end of device
[ 3176.659641] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3176.660583] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:32:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file1/file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
getsockname(r0, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x80)
acct(&(0x7f0000000180)='./file1\x00')
sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000027f)

03:32:18 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:32:18 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = getpgid(0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r2, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, r1, 0x6, r2, 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x9, 0x22, 0x0, 0x0, 0x3, 0x6401, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x29e, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x2000, 0x9, 0xc3a1, 0x8, 0xdc9, 0xff, 0x0, 0x0, 0xffff0000, 0x0, 0x1}, r1, 0xc, r4, 0x4)
r5 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0)

03:32:18 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:32:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r1 = getpgid(0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x7, 0x440002)
openat(r2, &(0x7f0000000280)='./file1\x00', 0x0, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r3, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
r4 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x7, 0x8, 0x64, 0x0, 0x7f, 0x10010, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x6, @perf_bp={&(0x7f00000002c0), 0x7}, 0x40480, 0x6, 0x6, 0x7, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80}, r1, 0xf, r0, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000380)={0x90000004})
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, r1, 0x6, r3, 0xb)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x9, 0x0, 0x20, 0x0, 0xef, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x153f, 0x4, @perf_config_ext={0x7fffffff, 0xf5a}, 0x4190, 0x3, 0x1, 0x6, 0x7, 0x2, 0x8000, 0x0, 0x8, 0x0, 0x7}, r1, 0x2, 0xffffffffffffffff, 0x3)

03:32:18 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:32:18 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
setxattr$security_capability(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x2000000, [{0x1, 0x1}, {0xfffffffa, 0x40}]}, 0x14, 0x2)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x81, 0x7, 0x81, 0x3f, 0x0, 0x7f, 0x2, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x100000000, 0x7}, 0xbce8, 0x5dfa, 0x8000, 0x3, 0x1, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0x6, r0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:32:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 90)

[ 3194.881273] loop2: detected capacity change from 0 to 40
[ 3194.888585] FAT-fs (loop2): bogus number of reserved sectors
[ 3194.889504] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3194.907621] loop7: detected capacity change from 0 to 40
[ 3194.918430] loop3: detected capacity change from 0 to 40
[ 3194.919808] loop6: detected capacity change from 0 to 40
03:32:18 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 91)

[ 3194.956746] Process accounting resumed
03:32:18 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3195.019965] syz-executor.6: attempt to access beyond end of device
[ 3195.019965] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3195.021782] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3195.048287] Process accounting resumed
[ 3195.073767] syz-executor.6: attempt to access beyond end of device
[ 3195.073767] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
03:32:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="5be4f015f91dd0e3949dc6bf7fcc5107fba6182c80b2f1968b3d6fae120e52648160e6e41cd6c2eb4b634fcf98908faf32f1238569ae869e887ea6c2b2cafbc02bf00436151c506bcc2837dd6e5c9a46e8af9a0b57598ef96c2ea96762fd3c3987c3e9be836f1c406e84cc93840a420a0564417198f07a99bcb8146fb8c880abc8144743ff5f8812", 0x88}], 0x1, 0x8, 0x6)

[ 3195.075442] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:32:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="81c6844b83ff7e040000a02b0008010100044001dfab9901", 0x18}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x93)
unlink(&(0x7f0000000180)='./file1\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r1, 0x5441, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
sendfile(r0, r1, &(0x7f0000000280)=0x20, 0x2)
removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'osx.', 'vfat\x00'})

[ 3195.154536] loop2: detected capacity change from 0 to 40
03:32:19 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000001c0)={0x9, 0x100, 0x4})
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x888}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1100)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1010c2, 0x0)
acct(&(0x7f0000000280)='./file0\x00')
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 3195.186008] FAT-fs (loop2): bogus number of reserved sectors
[ 3195.187102] FAT-fs (loop2): Can't find a valid FAT filesystem
03:32:19 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000002780)='/sys/module/snd_hda_intel', 0x208800, 0x12)
setresuid(0x0, r2, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x9, 0x6, &(0x7f0000002600)=[{&(0x7f00000002c0)="8a81bd6b032b4531547b0f5f7dc6a52e92068def050ec6c5c482999cbf58a6542b20bab4cffa0c268ab710aeafd00657af60b2ef98d4135aa0cf5f7ee3b2a98cbff532e68e0c38614e6e26fb9d32d268b921ec4c20f2a46c9c0c74069c27e6c73fdb5d0a9ee9ddff416fde9951ef55ec31f3e1fa7d9dfe51eecf8014dbfbc38db24c4a86443765f18b8455f44dc3b26d85a9e0ae1f60ce14947a9eda7db0c560c429a4f3358f14665a02542ab66d25e0e612065c6e3ed413a17215dd14afd2ea1396e19190e07cf3a471f72fa4246661b264a65c0dcda8d77a943dba801c076fcc3d980c12abff5eca25dad2690c", 0xee, 0x1}, {&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000013c0)="5b61b762d074b5d90c4d2bca19e298bbca9d146feff1a73aaf42a955f47c67aaf2730770d763c57af4686f02de10610b0c83fed4073e106a1b1eb6f472275a31576855beb9fd5bf87a3bbcc66a48dbf92519918d2dc8e6a54be20469a0a333a50bb980c1dff916e75d48d0ab5ac4e23dad9fe101ca1ce7f5d922695f52cce038624baa7019d3cdbdfcc30f2923c9126e231f4ad9b1fbec705eaf22101155a60a03a86afa0ed36bb6629a43cac9f3bfb2c5503a0211fe6da3e8db1416fc5cb08da633216e3a8f6e251b55b37b8715c7cf49f112f77253928430e561d5487c352105c39327a2df522606af38e754", 0xed}, {&(0x7f00000014c0)="e2654c28f7bc0ef8dc0fac0a5ce2e71e8d49fbb76714304d64b1474bd81751b3d046f1abfdd58f1999aaa85439b7af04d861a33e0f503d1b62f46d6efbed098e348d3df93dc3ecb8780fb4fb8c553289f2275ecacc1238f8ba791a8f4b1609e86629cf9d8f14c9decbe63cf18d83f93c479830ad8ebbf65d6db063c1d0df067a5bc84dc9962f6e038b21fbd4a162c2751be22c69c0f009480ca49fc0fdbde64e7ec8af92768d74aaa40f3d8cd87b1a292e71c7212b1cbca426b79b52b6ef3af248950d41440ba76e059ef9f7e9fd8ed205ce849d6dad8bfc20b84a601b033af58e327ad6ff6f29519da4b114c6f0200a53bd033f67fe8c46963bfddb1271723ac900c210e1133b02aa10087e9b2d72d816fcd119ef21bc05f7aa8d5eacdff87a87fb545d9950cd9704b4bb6bb51fa409b3f57150687d2b52e68e75d063e97fca6227850b23f7c97b4544b93c7c3fb72f7eaf02d87470ef1290db817f40319e8bcb27effb4985abdb7f916776f10279da5d1c02dbeabbdfe3c063a2068fa2f3e92eefd3e0ef3711eadad55b5635d74fdddd2142413106324d14ec2d0757a036cab42c4d488877e47c7067d5f629527b9f4cdac029ce3254def2800963a66a0948f1141612032f855c475a5da60b37b119eb5e7c6a8a14b70232e8dca796cbff59eeecc45dbfd60cdec800f0adacc67353c95bef779a0f984d1baf12d53411cad1053f2e61ef890f9d9c3d4600837c6b800d34b624aa24dd05f56ac3ceced62f83d783a0b9f40338b962a8383492cd4d3309f62170b34ccb54adcb84045cc816175c4579a236c95373ce1baf7b93f71121aab44d8cbb5cde1e42d003d609d1c89995cad7fa948269cb213ce6dd61274f2cd5c7de56107ad20f8cc7dd3f8e42b549214ec800b17ad5798d69b8dbbe3fa7cb4bd22de3302d5373de474356433f66846a1a1a80041ebeaa5cc8e8ba5d892a29f113f61a5ac06f9ef58af7200d333be2c81b78503e971020c52e7297e7a0a750e022c2a5cef98cf30dab1b2d8611b10de23927139af91843242ebd7d0959411a3b1b56854dc91f198268c1ed6a9314f21c78ee66050eba3d5d593ceb514e3af842cd605a7dac2e3555378ffcf0bd6fb3151b76fb305292e3a4ef61accb5da834525b210d6680ff5971ad095337ccc3dc6584cd21e0dd9e69f95fdf4af57dd269d56085e1a1c310eaafccf6c1ec0631da226cc42fa0f75e882e4b4e9f037caade9667e4c61c51886176af9b92bd5aa1d7272a2577a7dd12d7c34733925f334b693e939f307edcccbb0703391cc43d0909f3d1dd51dafaa998b89884c096fb6fe4336df28ef0f3304e85dd4828ebfc15f651e00e409f059bef305d01e823860d98fecbf7620c1d7bd18467350139da89d53fb403b1dcdfe466c868015105d5ef8e2e247a5919cc462d305136141d4023f5478963defc32458f80575fea40e63261cddca2bd995aedadbe66bce2555a962c0d59df63890308768fb2de9a33a1d75a129286000fe855c5cc8096f878cab7972116b9e0e4735ec75a615ab619ab208d3755fb6730792aba180c34145bbf4ed8a904c2756bb161ac27f5cd7a3e58873f0ed9916f537dfc54f3f2191d75330081623620d8c9550aea09aee42d600b8dabce489bd9c47232c0a2474c905a764aa8afb836d6fad1509bd6b67fcd13d55fb4bd415d98adb818ec68bb6f8d915e9504af0b6786105abf528b6bbba94f3b29ebbd2f371fbb721428b70d9c902bd8d02ee7c6cca8dde196083a3c42f440e0a6d5a76c9733df2f53c2ae0cbf45906b5a5aa949a47f77d776a2f6180c949e476915093ea3bd9e6cd13b1a77786c1d7bc8fb7c452de054aa7ab2dc30fda483fcaa774fcffeae5d16f71621abe064ace5aeb99439a520fa282c79f489fda052b9e5f3b3779b07aa038ce02f1b4fc5492e9e3c0526bb0175ebb7871355f7866296b791a50a5e402199e6b7e3b6f2bd38ad0c9d5a84d4c2c2e661a143549ee57a1e6752dd83448759c9ae7b9813021bfa23e7f22f9b697cb663db2c208292410d2de02009349ad79a0abbff68cc776cd445b081208270fd8f0b414738b75a72093b3c2b6b93d284d899bb360126fd7804f1135115e3a7defdce49d86feba0fcc377420fc286f74a85aa9c9d0c745907314aea9aa684bd712e88c80b5b33cc5541ff508dc79bd89573a825fc803e41f890b33dbbf6177e42c33a5b01981b609bf32b13c7c773a839fed07bfe191232377f0dd1e92b5281db8e417cbf7f23fce5399b74ddde0f93beec40555ccb2a9e1be076af2d7c16559739f0930d388e0690ab7c8f6b19a8e3555b629875eed0384de0f9c3c5eb856ee744290f7669c151265f0f081e30e085e4aa17ac2d21da4d17af31b58868966328fab79108ddf2c91cc61ab01f482b029af5e11df4385596ee005c058a24ccaa0588fbb7e2f53547b5c55c84be5bb2f2c47b8c60353951d4d0a609bc9e628c6c9cd9e283c5e5e5545e83919de19ab0bc6c512f8eeb1fbc7bfb730e1ff1c8f85df11cd54573538b416ddd91ffa7dc041d6b2a477430c7cac05db4d604ff992f22e9ef32fab1683be89034ba9efbea2d373ab4d863130f35ac8b74c459fa8d931c851a94d8b63b5c06721825e27956c386600be1042bcb3e698d5193f61d26838e0b9563e34b75d8be3c634a8bb86b1fd4f4040b2cad84b0fb230c73780cb0468838ffd61574a5ec74bb498a711294ea33cbfd3b4031214926fd0b0ec99c58d5017f0cd691a0b71f7a9fd195246800049d0e2c8798c1242db7134a6456b645042d7885ac69304a30dbf984b8eeab94820ccb9f6fb39b99e8f37f63d2f9df432f74b5abdd2da489d8374fee0e5c9a21a614c565885e1bd8e7014e816b84cc7d032c72cf2d5cae6eb2fe8928532e292662cff7fcd7d5ad40cbf816b28d131f2a4d02ac776c8eace7223dca99f00270936bb3fb82ab69fcd866b3ec82470bb4de920c3408feb0d3feaf326f02b6d31b8185dea12fb732e52a946438bd02c088fd1434b4e8d4ed5f5e9894aa8da121bdb9fe1801b3bb5f6389b6d04fefa10581d0ea61972f5f0dc4c9e54bef4e1f3a3f7f597f86087bd42e87d723f3c81b749d6415c5c20d7afbbf541e2f5f997feba7abeb94edc061335dcb553a5b1580c2a07f559cd7fec094d0502abd638fdad0705e295988da1e215701827dbbf3487dd930026a51f5afe51c5dea0e528e6bf12abfc9131fcc580b4f7fd7efe780a496c53085cf0f7df6903c0ea204c868328accf87f9e2254ec22940304a0fee52edd52f5d06858f3b3bacbe38781bd72364c6ed21d117e39d7a1c7febcf2e3d4568f65fdff078ddd06704ee22cc4377d1f29a5649bfe5e6396ead08f7aaaa57e22a89b14df76fa77752a85716c0242c9bcaa9c8d1b805ffb5d04b4291ff5488191a1bbeddce70834ae6dc79f7146050a8e9cf0af0724166f92731cfa7671c0b3a81ac8d39bdf9a1be131108b8d4a3b19aa94cb60eb75d1a311a6c6fdbeab80f3909d122b39f62a50a4ada8358a919ea5a1392dc05449a0e22b6e19814b4ec9d707e681b6e762585ef093c743753dc646655a12c364ce678c35e0076683e81a60580849ffc04920f65ef8c26ef977c07ca50d96c9ce94fc9616b7b569c6b64f2dbfe8d0d025f724cfbd1d6cc4defe25b7d3da72d5029c08c8a64e53b4d606e48f6c16909e46d2bd5b677c2ba0350be1f131f0b10c11c56c153c214936e47a45a201eca7a9910dce8cc04558828d03d3f9ad4ccffee3d673d24c236b516983b4cfdddcd4e98fc7f7cb8a09ecd766ea8f3884023526a0d76ab39dab452d535ec94d15427b82bc3c2d14206571cc2ce6737787c49c4eb13d0e524dc65ca4efc5083eda3392e0959f5ea59171045e92683922154d5611433baae6b008365e06da813fab220a1822eb7800efef38fecd3b9ce9124766da366d6ad3331e1a9f676906e2ba03bf288926dbe287f5352696e2829a4c00b33594ae0a8129bbc418a9558d413f468cec66a593bc2be708df272a4529fd2f47f929aed243f0151eee419af16d35ad0a743f5391b7adc3ab3ec32995508096d559b1669f1566b6fb02901d8c8588f62036db204363a57930eb3aace3782dcde42748b462baae54495d238ce802d7ff41a0673cca268c1806f2d226f5eb1c4baef2fb0d01ce6c5208a9ca4abfe5c8e9ff352d2eb57023eb8d71f18bdce877bba716811aa0c4fef0f4ec77d264961f23d87bc5acb4847dd338c9a7318fc4e876c1ad60f59bbbaa469a2454daeacbc4d03b32f94c6f585377a7a8a50be40fdc9bd2123c385b0a740ceaae708dee4504db1b02b9d1894b0543aaa7eaa283b1768663aa9e5bcaec884ef3f3d217d612375f2bed2bbeffae2ed1f14ea947fb2e7b6d06e0360788be2a4468532df1014d107ee62e5b820dc2d6b858942c08e057c847706f43a7e0c698b52a2e26dd89ed58c99696a2d15cfd0e2924f57a519931921fc0efcbd8b6591b5be2f7a189d9a361fd9e0a1e6c831fd71b19285b4943bcdc49d5443c6f047174e0ccddf9b7b66101aceaf5c4b969684a98f23db4ab3bf0d679f511fa9a43f1926c2272ec372eddd41e65392450a66009577381ef4acb11e2ef21bc52387e01a7e824a14c5b016ca1bd60507557c025c5971d010ee4126ecdf9f6dc0963ff0d0398a5fa066e58fa52571e8e4e694d7c70e6d81794e3047509a129cc3fc823d61261e89a6df2e15de50966f94afc015c5d8dad855c0b39ec608d706f28d6a4afb66530f8282b86a651858528ccae0778ae6243358fcadb139576591c9cc65541e1f058bffe32ea9b5a8770fa961e8968bbcedbc111a977d6ed0cff2a45ac5385b9d341cd4a0792d8781f0b26955e94e140233a0a21e7b3d7d3a8f7c7b9f1af7434f60a5bc24db77969e7be1498ce27b235201f8f068e0736f7d7059b5b63cecf1e459a825a4031c3e6f7b0d1313dfde96bc2585c1ed0b05babb945aded860a55b453b4970ed74ca211249088f91d5e0b19aedbf7c841471db850af5c5e77262d78cd40e74bcdc9db57cd2f240abfd323f891099786e356cfb5f96da0a9ee2d4b6c64d24fe9f87a2499e11cee78f34ca0aa4a2a8fccfcb7c9d4a6b7c7eee5b7aba2f8b1025f46d6febc9bbf6abb982ef7275d0ed5030d3b62422398c16128b97b849810b3c27d0fdfefb07913ee25125b858c98426281e36121be320e55610b12b7aec2add8e7bbae3518f92be9445b8257ab21eb1545360e467f00412d1d1cbf26a87768fc2235c356b9d65349c6b4862c8d8a3663a2a57fc1da5601bb7894bf675f4e466d907b60008e6ea86db760ddf8433a15d3f472c4e3a6e67ba9e89619444dbafae5f873115849c4641a70a5e270ce7b10e0529429ebe668ccf8fd8ed3ece68bd4ae7ea348c9a2457315c7df71c56a0af59287bd9f544ddf29be4db065901a03f6cfb4c12bed1a3392f04f4e37a2e0e6c19ab40a5d13ba9e6f27f7f4f489ceec76ebce69588735f72c1faf0b7d43bffabfe672b4a4f8b377c9cdbba53290cd5815445c078dba60b1e62baea42a615cafa597c6f31881187db8db11fc25bc6d26063443dfc96a88b77c0a56bd699f64341eb811d41b3ca58822018df411e887a34a169bec8794cba8ccf03595ca226ade0632d736ca3aafd673199f089677844d89694d3dff0731d4ed1f45e1508e432160efe566696cffb8b355c13d1ab03911851c66cdebe4eecd7bd93ecad73d7e58dbe199cf47b94f117d56c9e4dad97a293d5e97cbfd10a9fb", 0x1000, 0x5}, {&(0x7f00000024c0)="769262b6b49b20cf3ea1d6", 0xb, 0xffff}, {&(0x7f0000002500)="4aa497041e1167bc361c28e97721c67f0f6ce533c72018fba5038a5777f599e7571c81a343978c85020ea264c6b4b832eb22a8369155a345dc834a83a6458cb04d0c7227d88188a1df9ec39964dff89b2bbc8728015ad559fa118e33ac989d11ea8cfa9e07f5ac28b2a670e7fdf303eb0db46f214fa661c2025f61516693658f0f91b6fb1043ba2f851b6ff65ca75851fe2eaa2c8c09f5aab11963331da08441b7257ab3c3c4992bfa8d220fc7b00a4daf5fbd393f2a4e2b5898ff50f0f948aa939b8265", 0xc4, 0x3800000}], 0x400, &(0x7f00000026c0)={[{@numtail}, {@shortname_winnt}, {@shortname_lower}, {@shortname_mixed}], [{@appraise}, {@appraise_type}, {@dont_appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_lt={'euid<', r2}}, {@smackfsroot={'smackfsroot', 0x3d, '\\'}}, {@dont_hash}]})
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:32:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 92)

[ 3195.256358] loop3: detected capacity change from 0 to 40
[ 3195.267780] FAT-fs (loop3): bogus number of FAT structure
[ 3195.268753] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 3195.298685] loop7: detected capacity change from 0 to 40
03:32:19 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3195.335550] loop3: detected capacity change from 0 to 40
[ 3195.354750] loop6: detected capacity change from 0 to 40
[ 3195.356069] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value
[ 3195.391402] FAULT_INJECTION: forcing a failure.
[ 3195.391402] name failslab, interval 1, probability 0, space 0, times 0
[ 3195.392954] CPU: 0 PID: 13356 Comm: syz-executor.0 Not tainted 6.5.0-rc2-next-20230719 #1
[ 3195.394015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 3195.395035] Call Trace:
[ 3195.395397]  <TASK>
[ 3195.395709]  dump_stack_lvl+0xc1/0xf0
[ 3195.396258]  should_fail_ex+0x4b4/0x5b0
[ 3195.396797]  ? iter_file_splice_write+0x162/0xcb0
[ 3195.397451]  should_failslab+0x9/0x20
[ 3195.397964]  __kmem_cache_alloc_node+0x66/0x310
[ 3195.398601]  ? mark_held_locks+0x9e/0xe0
[ 3195.399139]  ? iter_file_splice_write+0x162/0xcb0
[ 3195.399792]  ? iter_file_splice_write+0x162/0xcb0
[ 3195.400436]  __kmalloc+0x4d/0x160
[ 3195.400919]  iter_file_splice_write+0x162/0xcb0
[ 3195.401568]  ? __kmem_cache_free+0xe1/0x330
[ 3195.402171]  ? copy_splice_read+0x65b/0x900
[ 3195.402791]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3195.403467]  ? __pfx_copy_splice_read+0x10/0x10
[ 3195.404116]  ? inode_security+0x105/0x140
[ 3195.404698]  ? security_file_permission+0xb5/0xe0
[ 3195.405369]  ? __pfx_iter_file_splice_write+0x10/0x10
[ 3195.406052]  direct_splice_actor+0x119/0x180
[ 3195.406675]  splice_direct_to_actor+0x349/0x9d0
[ 3195.407335]  ? __pfx_direct_splice_actor+0x10/0x10
[ 3195.408025]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 3195.408734]  ? security_file_permission+0xb5/0xe0
[ 3195.409426]  do_splice_direct+0x1bb/0x290
[ 3195.410003]  ? __pfx_do_splice_direct+0x10/0x10
[ 3195.410649]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 3195.411377]  ? lock_is_held_type+0x9f/0x120
[ 3195.411971]  do_sendfile+0xb67/0x1300
[ 3195.412520]  ? __pfx_do_sendfile+0x10/0x10
[ 3195.413143]  __x64_sys_sendfile64+0x1d5/0x210
[ 3195.413762]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[ 3195.414444]  ? lockdep_hardirqs_on_prepare+0x27b/0x3f0
[ 3195.415179]  do_syscall_64+0x3f/0x90
[ 3195.415705]  entry_SYSCALL_64_after_hwframe+0x6e/0xd8
[ 3195.416391] RIP: 0033:0x7fa51deffb19
[ 3195.416878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 3195.419163] RSP: 002b:00007fa51b475188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 3195.420122] RAX: ffffffffffffffda RBX: 00007fa51e012f60 RCX: 00007fa51deffb19
[ 3195.421045] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 3195.421956] RBP: 00007fa51b4751d0 R08: 0000000000000000 R09: 0000000000000000
[ 3195.422859] R10: 000000010000027f R11: 0000000000000246 R12: 0000000000000002
[ 3195.423770] R13: 00007ffd5685803f R14: 00007fa51b475300 R15: 0000000000022000
[ 3195.424729]  </TASK>
[ 3195.458762] loop2: detected capacity change from 0 to 40
[ 3195.475619] FAT-fs (loop2): bogus number of reserved sectors
[ 3195.476428] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3195.503031] Process accounting resumed
[ 3195.518013] syz-executor.6: attempt to access beyond end of device
[ 3195.518013] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3195.519682] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:32:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8144addba9ba1874, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r3 = getpgid(0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r4, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, r3, 0x6, r4, 0xb)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
kcmp(r3, 0xffffffffffffffff, 0x5, r0, r5)
sendfile(r1, r2, 0x0, 0x10000027f)
openat(r1, &(0x7f0000000180)='./file0\x00', 0x2400c1, 0x100)
unlink(0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x10000027f)

03:32:19 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 93)

[ 3195.579042] syz-executor.6: attempt to access beyond end of device
[ 3195.579042] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3195.580710] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3195.607807] Process accounting resumed
[ 3195.618020] kworker/u4:3: attempt to access beyond end of device
[ 3195.618020] loop7: rw=1, sector=48, nr_sectors = 4 limit=40
[ 3195.619826] Buffer I/O error on dev loop7, logical block 12, lost async page write
03:32:34 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:32:34 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8240}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'sit0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01030000000000000000060000000c00018008000100", @ANYRES32=r7, @ANYBLOB="f1f267733e6d0a365111152b7dfdeb5ee416686379a8d786f10588925f961335"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:32:34 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
openat2(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x1, 0xca, 0x2}, 0x18)

03:32:34 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:32:34 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
r2 = pidfd_open(0x0, 0x0)
r3 = syz_mount_image$msdos(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x0, 0x3, &(0x7f0000000b40)=[{&(0x7f0000000900)="b6e52cda446db9c6a069f4c8a383b5adeb5ebc2351f7c0cc0ba627268e3c0f61a8c7812cfe88a33752d971e66d137e9b13cc3441ed3fc454ef2c5eb4949d6b563a5b2f63e5e153eb835a8638d23c810aa05eec8554bbfe61f7be183dd1fd4462d8aac8acdf5d271c53dc2fb4a74c5aba7b42e92251fea13a1c7638242d3bef4640340b48cc15eaab849a701fd2616c4aa42cd557d8e0b12fccce07dcd6fd754f7feee9a5fb768bd4babe59d23ebae95ab092bcd9f09f5a8f268ff1cca827b25c1a7789ddcbe30538a378", 0xca, 0x6}, {&(0x7f0000000a00)="b53786bbe4b7dc7b5492653fa67c9f9610f5b29b29aca91a8f22d7538c1ada8c58246fea4ad1eb51bb9ac2640157323c9a19e86134cf3a931d445c020ec439d57b4a5edbb5fc88902376d5d889109b84e68817855a62d9", 0x57, 0xaf0}, {&(0x7f0000000a80)="563091313cebc0084adce5ffb4aa47a37a2246af19e2842f2144621dff5a7085016b82bedb4144b3acb861aad35005c4cb9519e8d67b386127d3f85f360f83ecd574f6d7059db96ff3544d45ed4465d303421540c7008e8949c15828f9f93aeb1c22506dfc63552bec84f23fcd69a9d1d546792c8a782ca59c731e53eb7e520ef31a2853f02f986fbb09e6a79f958b701c29465bff2818a3b8daade39f83fcb643e78eb3a5649d09", 0xa8, 0x4}], 0x8001, &(0x7f0000000bc0)=ANY=[@ANYBLOB="646f74732c6e6f6495bb27d43d30313737373737373737373737373737373737373737342c71756965742c6e6f636173652c6e6f646f15c9846b6f74732c7569643d00"/78, @ANYRESDEC=0x0, @ANYBLOB=',obj_user=vfat\x00,fscontext=unconfined_u,permit_directio,\x00'])
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000040))
r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000040))
r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0))
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)="a928e2fab7cd36a56f1705c141ebda3a4530eeee1d1aea763e2aa1487f14c0b893b97d4b03d4f725759d7c9c9298", 0x2e}, {&(0x7f0000000400)="9339f99bd9d436dfbb8cdddecf1504207a5c995aebf9bc517258d5d3c698778f4ef9c04a38815aaca8ebc81ef599d5d2d7bee05612d1f2b3208d943b073434dad942f396cdd11ff504b4ffade35322e354aaff184c837fb8e130db606eb7d382a21028013249fb052f6b0371a353c9bcc51e73db981e5b85dbe90b97dca488030be68bd694316c21065d6868cbfbe59c09fb4eb040038c327308caab5ba9789e455813cf7a84c5f6b2dadb0f4e78679670edc42d230ced4aecb666c8a1adfe9f35c09606ae3fb7172dfb37cce8a5b9064a5ed9a37591d227245b6a6114d8cd", 0xdf}, {&(0x7f00000002c0)="b7716b6ac78f4b24d66f79d1d4700d345493f89f338abadfc72cdeb5c03a32092ef278d715fe25ed6f77654e7a7a219d5eb3da6d5be67c60ba4d1cdf6181738a2f9701948d18ee1aeed7e86ac05954fa20eaecba53bf30685ede3e3d403e656bdcc6a625cb954c64", 0x68}, {&(0x7f0000000340)="c8da066920018b569f581adde9248ba6231922da7d7dd75bd0648491af9d708cab885ef0006cea8fcce19017230fc92b624f5456d41f438a4ec3e5996b15acec26de7b0d79d28e64bc29064a46d476c8592aa8c2190aba44f2ae611cedea1da06051774af3825b28ad1a2614", 0x6c}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c38075eac000000000000000100000002000000", @ANYBLOB="d53447935fb41935da707a3d1bf5a4cb4382fc5b95c0cdfa0b4427290315f77122f603e805e383948e61b86721ee7b8e7e976e3bebbd3556", @ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB="0000ea2918000000000000000900000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="30c60b06de81541bde06493321c2aaa0225d6fd8e512e90457f578c21429ce38eb111e00", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES64=r6, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32, @ANYRES32=r1], 0x68, 0x10}, 0x40800)
unlink(&(0x7f0000000180)='./file1\x00')

03:32:34 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:32:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = getpgid(0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r3, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, r2, 0x6, r3, 0xb)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x3, 0x9, 0xf8, 0x0, 0x9, 0x520c1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x4, @perf_config_ext={0x101, 0x4}, 0x80, 0x6, 0x8001, 0x2, 0x12d7, 0x3, 0xf01, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0x0, 0xffffffffffffffff, 0x3)

03:32:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 94)

[ 3210.202397] loop6: detected capacity change from 0 to 40
[ 3210.213222] loop3: detected capacity change from 0 to 40
[ 3210.218871] loop2: detected capacity change from 0 to 40
[ 3210.221337] FAT-fs (loop2): bogus number of reserved sectors
[ 3210.221780] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3210.230098] loop7: detected capacity change from 0 to 40
03:32:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 95)

03:32:34 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:32:34 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f00000001c0)='./file1\x00')
rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)='./file2\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x80)
openat(r0, &(0x7f0000000180)='./file1\x00', 0x181600, 0x90)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

03:32:34 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3210.340636] syz-executor.6: attempt to access beyond end of device
[ 3210.340636] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.342727] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3210.390278] syz-executor.6: attempt to access beyond end of device
[ 3210.390278] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3210.391830] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3210.418632] loop2: detected capacity change from 0 to 40
03:32:34 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0xa462, 0xc)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = getpgid(0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r2, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
r3 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, r1, 0x6, r2, 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x5, 0x1f, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x4, @perf_config_ext={0xc8d, 0x7}, 0x4010, 0x2, 0x9, 0x3, 0x3, 0x6, 0x6, 0x0, 0x558, 0x0, 0x1}, r1, 0xc, r5, 0x8)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x10000027f)

[ 3210.456054] FAT-fs (loop2): bogus number of reserved sectors
[ 3210.456944] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3210.458337] loop3: detected capacity change from 0 to 40
03:32:34 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x4000000)

03:32:34 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3210.597649] loop7: detected capacity change from 0 to 40
03:32:34 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 96)

[ 3210.637573] loop6: detected capacity change from 0 to 40
[ 3210.652528] loop2: detected capacity change from 0 to 40
[ 3210.657560] FAT-fs (loop2): bogus number of reserved sectors
[ 3210.658083] FAT-fs (loop2): Can't find a valid FAT filesystem
03:32:47 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:32:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x701900, 0x80)
renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x5)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:32:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x82, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff, 0x5}, 0x1074, 0x0, 0x0, 0xe45457a3d91f35c}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
unlink(&(0x7f0000000180)='./file1\x00')

03:32:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
openat(r2, &(0x7f0000000180)='./file0\x00', 0xc6280, 0x11a)
sendfile(r0, r1, 0x0, 0x10000027f)

03:32:47 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
signalfd4(r0, &(0x7f0000000180)={[0x800]}, 0x8, 0x80000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r2, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x0, 0x6, 0x0, 0x20, 0x0, 0x9, 0x40, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3ff, 0xffffffff}, 0x0, 0x10001, 0xffffffe1, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7, 0x0, 0x8}, r1, 0x1, r2, 0x9)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x10000027f)
r4 = perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0x81, 0x3f, 0x5, 0x13, 0x0, 0xfff, 0x85a64, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3fff8, 0x1, @perf_config_ext={0x1, 0x2}, 0x8, 0x1, 0x3, 0x3, 0x6, 0xff, 0x5, 0x0, 0x4752c100, 0x0, 0xef9}, r3, 0xd, r0, 0x1)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000003c0)=0x1)

03:32:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0xe9, 0x0, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x40400, 0xb483, 0x4, 0x1, 0x6, 0x3, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffff1e}, 0xffffffffffffffff, 0x5, r0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:32:47 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00", 0xc}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:32:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 97)

[ 3223.240891] loop7: detected capacity change from 0 to 40
[ 3223.257483] loop6: detected capacity change from 0 to 40
[ 3223.268643] loop3: detected capacity change from 0 to 40
[ 3223.303039] loop2: detected capacity change from 0 to 40
[ 3223.335422] FAT-fs (loop2): bogus number of reserved sectors
[ 3223.336271] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3223.343785] syz-executor.6: attempt to access beyond end of device
[ 3223.343785] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3223.345333] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3223.366185] syz-executor.6: attempt to access beyond end of device
[ 3223.366185] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3223.367721] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:32:47 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:32:47 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
statx(r3, &(0x7f00000001c0)='./file1\x00', 0x5500, 0x400, &(0x7f0000000240))
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000180)='./file0\x00', 0x105000, 0x8)
sendfile(r1, r4, 0x0, 0x10000027f)

03:32:47 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:32:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 98)

[ 3223.464983] loop2: detected capacity change from 0 to 40
03:32:47 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
readlinkat(r0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000240)=""/4096, 0x1000)
lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001240)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x1)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

[ 3223.489045] FAT-fs (loop2): invalid media value (0x00)
[ 3223.489787] FAT-fs (loop2): Can't find a valid FAT filesystem
03:32:47 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 3223.562034] loop6: detected capacity change from 0 to 40
[ 3223.573367] loop3: detected capacity change from 0 to 40
03:32:47 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3223.578020] loop7: detected capacity change from 0 to 40
[ 3223.656727] syz-executor.6: attempt to access beyond end of device
[ 3223.656727] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3223.658521] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:32:47 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)={'U+', 0xfffffffffffff1f7}, 0x16, 0x1)
r3 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x200200, 0x11c)
chdir(&(0x7f00000002c0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'})

[ 3223.711992] loop2: detected capacity change from 0 to 40
[ 3223.725225] FAT-fs (loop2): invalid media value (0x00)
[ 3223.725815] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3223.814978] loop3: detected capacity change from 0 to 40
[ 3223.905018] syz-executor.3: attempt to access beyond end of device
[ 3223.905018] loop3: rw=2049, sector=52, nr_sectors = 4 limit=40
03:33:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f) (fail_nth: 99)

03:33:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440", 0x12}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:00 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:33:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x6}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3013c3, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:33:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f0000000280)='./file2\x00', 0x7fffffff, 0x7, &(0x7f00000006c0)=[{&(0x7f00000002c0)="2283f268420aca50ec2debf31f76d35adc6dffbbd2ec239aa303e7b70f1f7b307715fc2c39456cb5de8035dc917b75487579ddc7b87600e97fb10d212007e4511869ec1befe6a58fe10537bcca01cd41e09892453f422e563f2fa486fea2f702736f76f0ab1d7f3f", 0x68, 0x10001}, {&(0x7f0000000340)="45eff67e4a48a6105befe85bb9df9b06a5a7f7fd3d534fe23fe0beec0f857a44b2057ae443e93a3d2db99c709964c6f9062323e68585e79c2228", 0x3a, 0x3}, {&(0x7f0000000380)="5573c807c914d14146e831f7d7e4131d486fb481e948f362059e0989fa1eb2ff3c117ce66919567a3d3cb524c5bba2ade431e0de07040421ee33ccc4ece27acefaed3351ead0c501695ce33e8c058c09e4ad795c326b8d063edf374923305f7134269da68a5116dad1375a5c3c66bd1d36d29607c4341d32170cf347b64346629e077c5cfa9bc71b2cefa2bd81fb4bc8732722db935e7911a0daec198adcae9f0ded5cf767", 0xa5, 0x9}, {&(0x7f0000000440)="961de2abc0a8d52bf49075d292bed7291ea4407b2a8c3916d4d5e81a195b298496baf3901c3ff945b2906516afd4c3e50b97fd14408cfebcc1d81fa4df6f7d2bcbc0b4b1f2a65680f3f95163a5735003224b5db962e0b0604ba1d1d10cff4a6c84f89785c69f950f06dff1382f9a63cb190d549fe0881b58adbcd55e9f55809449ddbcfe4e67c463eeeef870dce25eddc8761b82ca2fb3dd0ce2db48088acd4a5f65bc27426b32604a2bcbe3", 0xac, 0x5}, {&(0x7f0000000500)="71bb942d8176d3859c514fe2f9227fbf5514716eaeb9e4cdb2404059c0b7603da002", 0x22}, {&(0x7f0000000540)="638686f89b4dcb58d7cc1352cf72e15efa5fed0fc285b7b4c2fa5f41bd05ea3dd8af6db881ad5fa00850f7264853824c6b0c022906728ae2669395f8c697935c8aa1de535a96b93ca864d1a5ccb3551df7aad79fcc0b33d158d4b5fa2e32417338d0dca7362300ea2f3072a44ca2dd5761a9714a6dac5947f631e885d73228f6e9a315480595bbd3aa0efd2f9f5142a527927431a2be3d877c45e9ddb6163ae0218a54426720b3", 0xa7, 0x4}, {&(0x7f0000000600)="fbb61d8c65060e8e90c17833abae9e2c1cb20d4d7cc3a3c17c3ea6b1b538c5a9050447b2829992db0a119b0a73fc741b6d12cba6fb1dc83cd96ae0701516ca69368b3a5ad8dd17d47efb679157d7c7105f0aeef6651f7b590d22d1e21f48e2dd6150db304b72db161cc5460a1efd2295734abadd9e7a154f8f9b623c5791ac4b0b291c0ff991e8e01e94c7a6f68177", 0x8f, 0x1}], 0x300000, &(0x7f0000000840)=ANY=[@ANYBLOB="2c2f707207684f5719f0cc5d6f6c662f613474722f736f636b63726561747e572c7065726d69745f646972656374696f2c6170b5c1cd34ec457072616973655f747970653d00000000"])
openat(r1, &(0x7f0000000800)='./file2\x00', 0x20200, 0x88)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r2, r0, 0x0, 0xfffffdef)
r3 = geteuid()
setxattr$security_capability(&(0x7f0000000040)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x6, 0x2}, {0x44, 0x7f}], r3}, 0x18, 0x2)

[ 3236.130685] loop3: detected capacity change from 0 to 40
[ 3236.132499] loop6: detected capacity change from 0 to 40
03:33:00 executing program 3:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80080}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x20200, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

03:33:00 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file1\x00', 0x5, 0x5, &(0x7f0000001500)=[{&(0x7f0000000300)="b3fea9593cc3f930f746a0808023e90e4372b24dab3cfe9699059393e127c2e3bea944dd6d60fb6d4d9a8ef120810aa55bd72093490cc97c8fcf9f6c1b3b4a78a2fd8f7ffd541664b0e09ea161506117ddb3894900f0657e4f93fbdb82f89c34e5776888fe74c6f1adf543c81003764ee4d548678e55c3b71ffc26f321977a6668e26000e1bfc5cb0963cab07304d7c0d05bb00b5259f1330708a2d43f97da4a7d7c8be38654140e120011ee4a613ad7aca79c294b9bb87f60099254eaf61acd00f019089e0eb69a5e1922a8eca024f5aa82aac8d767fbe09abfeab51475dd7786", 0xe1, 0x3}, {&(0x7f0000000400)="d0cba076eaf4a9d440eb0bdee2589b904537b463714f84a9b2e2dfb83c11672884ff84fa9ab2fe68c9e3a2bb56c0a7cbb269", 0x32, 0x5}, {&(0x7f0000000440)="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", 0x1000, 0x5}, {&(0x7f0000001440)="65b3521efbe1c9469e9d89f827253a11b9bfd0f272a9857fc07098", 0x1b, 0x5}, {&(0x7f0000001480)="4aed997a65fd6d19c34c93d8e9c5338f534724dfabd555a6f5d31a96db2590a37286178487993cfa232ad2c017f629ba08cbae3ad53e7a877e746f693f8ecb239c38e354902331e452394d9b74c4474d497aeceaa6f407a8e2d4bf9ad4e7f989edd63a725dde4f0972b2c1982201", 0x6e, 0x7}], 0x20, &(0x7f0000001580)={[{@jqfmt_vfsv1}, {@journal_checksum}, {@errors_continue}, {@debug}], [{@smackfshat={'smackfshat', 0x3d, '/proc/timer_list\x00'}}, {@smackfsroot}, {@pcr={'pcr', 0x3d, 0x30}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, 'ubifs\x00'}}, {@uid_gt={'uid>', r0}}, {@euid_eq={'euid', 0x3d, r1}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]})
unlink(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1814c2, 0x5)
open(&(0x7f0000001680)='./file1\x00', 0x400000, 0x13a)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='ubifs\x00', 0x40080, &(0x7f0000000280))

03:33:00 executing program 1:
r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x81, 0xc4, 0x1f, 0x0, 0x8, 0x441, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x1002, 0x4, 0x1ff, 0x0, 0x8, 0x9, 0xf542, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xd, r0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000002c0)={0x0, 0x9006}, 0x4)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', <r6=>0x0})
sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0xffeb}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @broadcast}}}], 0x20}, 0x0)
dup(r2)
sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0)

[ 3236.161565] loop2: detected capacity change from 0 to 40
[ 3236.166889] FAT-fs (loop2): invalid media value (0x00)
[ 3236.167415] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3236.182906] loop7: detected capacity change from 0 to 40
[ 3236.196079] syz-executor.6: attempt to access beyond end of device
[ 3236.196079] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3236.197063] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:33:00 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
r2 = open(&(0x7f0000000180)='./file0\x00', 0x701900, 0x80)
renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x5)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:33:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x40, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

03:33:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:00 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x100000, &(0x7f0000000040)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0xa0800, 0x89)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
openat(r3, &(0x7f00000001c0)='./file1\x00', 0x20000, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
preadv(r4, &(0x7f0000001640)=[{&(0x7f0000000180)=""/21, 0x15}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/214, 0xd6}, {&(0x7f0000001540)=""/238, 0xee}], 0x6, 0x3f, 0x3ff)
stat(&(0x7f0000000200)='./file1/file0\x00', &(0x7f00000016c0))

03:33:00 executing program 7:
openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x1, 0x180}, 0x18)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
fsetxattr(r1, &(0x7f0000000180)=@known='trusted.overlay.origin\x00', &(0x7f00000001c0)='vfat\x00', 0x5, 0x2)

03:33:00 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 3236.323661] loop2: detected capacity change from 0 to 40
[ 3236.340692] FAT-fs (loop2): invalid media value (0x00)
[ 3236.341086] FAT-fs (loop2): Can't find a valid FAT filesystem
03:33:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3236.417837] loop6: detected capacity change from 0 to 264192
[ 3236.436747] loop7: detected capacity change from 0 to 40
[ 3236.455817] loop6: detected capacity change from 0 to 264192
03:33:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x6000)
setresuid(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x80000001, 0x7, &(0x7f0000000640)=[{&(0x7f0000000240)="2f4706283b2cffc948a8243280ae7d17bfac9e7adb191345323d1ee8f40bc9843ab04cd9f87c966ab138a635b4ab63677dc823159be5cf8fad643d292a7ba06d8b7040138bfbd9fb1763e05821f02ef10bde7ed71c7dbcdcf34b60a9aa3bccc4616dc3e170a44a9c198c75b4dba3", 0x6e, 0x8}, {&(0x7f00000002c0)="aa126b3d87adadf78d444abb77a9e495df148fb8e51879124135d87d9fc3192b4d7fd3b527affe081e36fec9ca57bcc37a55aac1e83b38aabf26f68a78beb160c27175ede0f44e9a60462ac788ea2b45327466", 0x53, 0x1}, {&(0x7f0000000340)="b2286e24f2b58a782475d91a1ebc4694b054738a20d1c809fc4f907ed404d4a3bf163032d3f55964607733ff9e5243dcc67d1876438d42670de2424caecec8d0d918745ae674e31242e315ef785de5b31c151e7613a35b98a0bfaca9b499b3c762c2f09190ca6069ef4ef5f3b71c0ddcc6f2591a1fdef8aaccad3507a779cf60", 0x80, 0x1}, {&(0x7f00000003c0)="fe3460ff15771699cf3ecee8b5349e51b1a17833b5f5c00b9df4d39061d60144d083b48c45071ffd6422a32b6876900cf44125f8b1743831fcd84db019e50fc6f6237e794c4b455facd1dccfd9d2043bcab1381e7d663514c4747e3b229c80a6bccc37b40940c6a06e10d6d455a16e76005cc5bd0a149f8a5b83612eb1408ac50f994703062c93c90c210eb045e647db8bcc1d434de2c7c637a3a190edb72e24da4a0862e908025afec17be648a69c4876b91cd126c2bd4badf476a3cea169fb3506793472c2f297e07268cc409a90b0deaa", 0xd2, 0x8}, {&(0x7f00000004c0)="758f165d18ad0dece7efc7c49772928f55bcd9bab69671e1b1fbeb84159808ae828bdf3594a016afc87c0d", 0x2b, 0x8}, {&(0x7f0000000500)="a406bf918f9b47dd8532952694b08eeb6d63904eb197e4de971ba9018a90d8a52069595297ae82bc5bc2fab28264e2eac641035b609ca1a66221dcf0d99e88498ec4a4e0e8c20e875ed26e3c7451b8af5ba6f650c117befc98c827a201d826e2411d9241ca43d659ac68e5e3c056b13c3278a94b81e23ee4726b01a1e4d517fa0a13461f9f54c77e5f7c186dc8a189c1d1c97033c7af40f4cc425601fdc4006ef94cb03284cf9b32439a93c82851893a3a97a9690dbe639a1020c1230476757d61ce14d4de6100a2811d21", 0xcb, 0x100}, {&(0x7f0000000600), 0x0, 0x4000000000000000}], 0x8000, &(0x7f0000000800)={[{@rodir}, {@shortname_mixed}, {@shortname_winnt}], [{@seclabel}, {@seclabel}, {@fowner_gt={'fowner>', r0}}, {@hash}, {@subj_type}, {@euid_eq}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
pipe(&(0x7f0000000600)={<r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {0x2}}, './file2\x00'})
unlink(0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)

[ 3236.550905] loop2: detected capacity change from 0 to 40
[ 3236.572018] FAT-fs (loop2): invalid media value (0x00)
[ 3236.572803] FAT-fs (loop2): Can't find a valid FAT filesystem
03:33:16 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x10000027f)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x10000027f)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000240)='/proc/self/attr/sockcreate\x00', &(0x7f0000000280)='./file0\x00', r7)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r2, r3/1000+10000}})
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:33:16 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e20, 0x5, @private0, 0x9}, 0x1c)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x40c, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
pipe2$9p(&(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x84000)
preadv(r2, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f0000000280)=""/152, 0x98}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/71, 0x47}, {&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f00000004c0)=""/2, 0x2}, {&(0x7f0000000500)=""/9, 0x9}, {&(0x7f0000000540)=""/18, 0x12}], 0x8, 0x100, 0xfff)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

03:33:16 executing program 1:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = signalfd4(r0, &(0x7f0000000000)={[0xb2]}, 0x8, 0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x7f, 0x74, 0x0, 0x0, 0x2, 0x8c495, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x81, 0x3}, 0x200, 0x6, 0x6, 0x7, 0x3, 0x1, 0xa14f, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x9, r2, 0xa)
r3 = dup(r1)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880), 0x4000101, 0x0)

03:33:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000002a0)

[ 3252.332206] loop2: detected capacity change from 0 to 40
03:33:16 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000", 0x15}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2000, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:33:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x10000, 0x5, &(0x7f0000001400)=[{&(0x7f0000000240)="5df7d750e9b1d8d4cd75d4a70f7bee8bef4fe17235640140d6", 0x19, 0x7}, {&(0x7f0000000280)="4853a634c62e9a104a4e8a1313b35fc642608b19645b577dabeee87c128a5c7e2c6ee1c7caa344bf5926a7f1cbe12bd3e6f040dd839ece534ae8bfc4327a6029f19569aebcafc325c1221cca502889c01523464cba476b30fc47a0b56608355e7fba3042a27870ac36200a6c5ab7637412ec2eafc43dd8bba6f634374b182c6ac6ef09a23a40b8a0b901d1cacc3517ddf7b58615952732ba7bcadbdf73d28f9ad4254247", 0xa4, 0x5}, {&(0x7f0000000340)="6c908700f0838865cdd7d610b958b4ece5ae7b32e7963d679a3ec5e6d672bcdc63d7cef898ef579b68e7e7175513666db6183cec79503c6686136ec2f22eb43c2bcfd1cc026792679c5ebe", 0x4b, 0x7fff}, {&(0x7f00000003c0)="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", 0x1000, 0x5}, {&(0x7f00000013c0)="3e43df9fa4044210abcad41ae85a8c7d3eff2ec0875e9bf7dbf2", 0x1a, 0x3f}], 0x800000, &(0x7f0000001480)={[{@utf8}, {@shortname_lower}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@utf8}], [{@pcr={'pcr', 0x3d, 0xc}}]})
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000001580)={0x3, 0x80, 0x3f, 0xff, 0x20, 0x1, 0x0, 0x2, 0x14260, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000001540), 0x8}, 0x10200, 0x4, 0x0, 0x2, 0x3, 0x800, 0xcc71, 0x0, 0x8, 0x0, 0x14}, 0xffffffffffffffff, 0x8, r0, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
perf_event_open(&(0x7f0000003b00)={0x4, 0x80, 0x82, 0x7, 0x6e, 0x61, 0x0, 0x6, 0x20, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000003ac0), 0x8}, 0x20, 0x6d1, 0x9, 0x5, 0xfffffffffffffe00, 0x2, 0xffe1, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
[ 3252.337450] FAT-fs (loop2): invalid media value (0x00)
[ 3252.337856] FAT-fs (loop2): Can't find a valid FAT filesystem
syz_mount_image$ext4(&(0x7f0000001600)='ext3\x00', &(0x7f0000001640)='./file0\x00', 0x8000, 0x7, &(0x7f00000039c0)=[{&(0x7f0000001680)="0f51aea5e189d4ca3d23fadfb0c9aeb1b4072f4019a107421899f696a2cf18e848fe0cbb10024db1e769747b517caac894077e989e36367bf037723997de", 0x3e, 0x8}, {&(0x7f00000016c0)="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", 0x1000, 0x100000001}, {&(0x7f00000026c0)="8e6561a429b8a2994652d03aa2f9a5fdecbf186bd29c25bbbbfdcbe69fc3e41751cc15e0609a39c6a8aa0a6892a9db174faf42599a29da18875a11c4fe94fe14fe29203c8c2c218a1628ddf74e466facdf766f10e1e592b6a3d630512353e097d3dd11343c966b231b24fff062ca57a7ae557462c2436756c54bef3752c71243c0f3cfdae89229da1443b24d89674525ead272be37bad0737b52dff6095b4aeaaa28d5cf592faec8d3785180f168aeb5f0d19f03f1dd5416575db88e62d7c4b10f8c010c9771cde3625b80c0cd3fc16894afb53a4fa9d29acdb08b37090e776f5e5ee9311d31215d7c60aec5f9f3f7f36721bfd9a9f07896", 0xf8, 0x800}, {&(0x7f00000027c0)="383cd0e2cc692d767098e8cdec66b1914d39a47a8e54677a386f71374ee909ef0039183fbd7f09c141aa3633deec0c945ab1cf34376b156f68e144f0bcfb5d6922dcbbab30e050633dacdd40af5bb1df3e9ee5f10c9792682176afe50d5f2aeb404b20ce4c30276317f8f0b4f8488bd8310f8563746537854d89da1503df31bd491b", 0x82, 0x4049872b}, {&(0x7f0000002880)="d34f058b96147a72ef70f624769500e7fcf7a4496b8c0b68d68de11dca0a268c9fd65130c8e0607780b786c6d1b3eaa747ad7f3531c1eed2279dd1ee18b6ec21b9265996b15ca9a905acfdb3e3eca1a9f056778dfa28246c632b1a2095badbcfbe8506ecce50410538a91b9a5da17a37d1ab22c484ca4ed7a9bf0fe1ebb0acde88cc3bb0226525a4ab2fcf00d188c57172dc77b62383030a", 0x98, 0x3}, {&(0x7f0000002940)="47344bea6cb4476fe898f98df43758447775259dc0cf7bbc96411a7ed45334046bbaca29a0ae29ff37c7dc81eadc0fdd61a7e91640e2c89d93a6dde4385c18a88a0b4ce903ab1dbdf307ec252efd97b498109958ed116f1f9c3a0de28fb51c83f11a2ee0ffa2b60022b25e28e106065ab2acd27826c822409bfc0598d41cc4db7093dc6e135a4c719e1e7964126fed5d062372b463640477cb9a9cdc85b7347e424ff503f397f4055628ece9c1256b7dff657a1a29719aeed28419f0af006c53e7cedb29e94c31e3f4dfde7df9169e1526b969addcbb2880efce0b226d1a4f0929ecc17cc1c775a8a2ee011dc76f4d88709098583dbdb9d7f2880e8b4fc19fc887da068c2df0722cd5a5d301040979e56cb693aad49dd279904514593bba314b3c6bdc465d99786b342c25e1f776abcb27493d02667090f568643d4d19d2aafc431339374fe55d57f2fb201653aa93679194fb4c231ceadb3dfdc92dd0653176a0a4a4f409bd46a78bb1a975c3d4a6d87e4f8451bcbb4ee6e073169bd4bf46b5b5648b10170cb92ed72d65270f8302d23b9a7e1cba332899a2c582905c0323e6a592fca3c3e9c879dc031fe96560cd375d730c3f1fcadf8edb23f92ff187d903514f6b06b03dec0cde427b3e664501534fdf722494765799b982c1fc48033c2ab5fc0b9a76bc1b9f00a655d2f32004f751d66cf7ad83b548cf40bfef367e5c6f4297e92e0a9a6662dc9f85c16e3c6248b9de5294865614df9001bff397bfe548a3f2bc7f7824ded8b13a61afb7dd34681ce78da1ca27e84f15f43b06cda8228a53f385ee25cb9535a198343d1ea2981c6e1f8bef5bd2e8675d4475f2862a9eda9cdd7f67006a8bd374368bbd6528aaa9ecc54265c3847adce9a6307ec8f8d8119349782400e6ba85adbdf40077e49da85d9e7accf3dfaa4dd4b5129e83282b8dde878482c7d8f11ca18eebb18ef4b7bbf73feaeab5330964b3e9e5af9f81e3be528c530be1d5cb0240394bda35f7e18caf23c791ced27e8809e3db4f5a2b2172e72b4d857ee0e8f6b833e7d46b3661434e27b06efe7a34e73a9c82db89279e474646da608ea1880c71bc298115a1fc5bd5bdb1139fa48839e6f69035c2db8f4a1794073be0b73a09bf6f7eb90a35d50b020ca0983aa1a4cea7bd5ccec906e75e55de634f6840cf8a3d171203751b30931aeb4cc2abdea288bdaf2383ffbe6b1ff675abb8e0cdffbe0d304679fcff0f0b902f885305d3e41c198890c7789674e614c80b9fff3cf0af090e8727f474c3005bd04cdf9590db22eaeb0b0ed222e1e0bb97d6cab150369d49f5cb65481790bd22d9d4a79eb2b42e1a6abcbb17c06b57609b33f4a8fbdb94165d5fa983455a620ed6dd10c630bcac7556d5209a7cad97f03b33df9e880155b56e0aebd35dfe5d0d654708b9a77a8abc3ac444d88f1d06d54bcb7457c7f410ea5a85e83b575ffcba5285f92a6e30642f6aeb1a09efa44daa40c361508cb1667c6134f77ac42fde2989b99bb23850f38b816bc7bc47608a070da616545540a575fc904feecefd3835c1d611d21e899fcafd074881d28b732a041a565c12417f28437191bf620625fd4809320ff4ad8fbfcc24dd39e147b2fd4dae0178e4ab96567a3747a4adff90cda26ad6c7e78c06a4441555cf17fe17f4e0bf71aa2bc67dba1e282ab16b3e50004787319d9ab893e1bee85190e7f22d9ba140d41229862864a52822e3c169571ca301f77922d8c43a46dc28a15b57edac86fbddf681b56a696a574d0537250b366b0727be48d6d60bc80d8e13ffeadce591e70fe0abc41b19a7ec53398f4b1445c03580a7602ba7facf0925691e15b1880e5e67cef671719e7b452112eb7b547072d29234ce14ba4a57b18f239c36160a770f387b9a2e08277356d7fe1d8bafb1b87ca591883c7b41f8d71a778d15447f0f2164b25b2afa5cf37f1ce97e2e6030db17bafbe54b2875b978336d4fac1db90584e9e949fe6dfe3e852f130eed49bf9de5e9a21db25353b248014e8c0b556f31f2d2179771ca1db6488b7000ab180340a36a504db4842cdea227e81d8b34c5acff67ff9d59c5c32837e5509ff2835d23f445a8f7469fb0f56ca0b857a87e202843003369d2e2d3c26ed09c645cb2bef866916ed2a49f5575792a6fe618e1a20c35b977f4e51fccd62d55a5a4bc0cb5b93985c194d9de85d6620314a4e7acb079b4de7c82f5410559788d6ac3812488661e24978ba2e7c7739ce09ec0826c90a451701a3524ca29544284ed21f9437b527fc9e0f525ea43ebb72e661b2461fb7c2cd46c859926d5c7e01271d689d09605084cd3e2bf5a65480e880c8ecbd8a1f43c6746ac4cc88aaab1f3f79c2ed5a773a03622393d8aef6a0642767498f55765b33a3ee3c2284fe40237cf4bc440164542c4f0a0373cc724feca5dfb74d51c1d97007d91ccdcc79d70628aee42897dcfde0f5cad2c1992e70570c79852f0d00b256d2a538d9c19e83c114db8e875208aff0be8c06f7627e9173ee89a7b50937d6a10bc354f5fbe7e9f2b95ae3619282a3dd3533088c7ddb527be3c98d158aef68e4caf48bc3e84adf846c57efb044fb2702d0155473088e18119e9c2b12dab834415a54df60c511fc0a117c3cbb8d798cb10b8f10c2f9236e35683d8feded563616074a4113e912f3ff0beb1306a2131fdd435982d93f6dfec4931878712def46dd74245545dd5aa69207388e23c4b738671365a66961f3b3ad48f2eb2384cb7ab1bd0504264fd45410460022449add30a45c37b5e032027fe79c5e590444f38aaf5201b9a932f4741e8488b5ba5b133d893e5c8ba419540d1ddb1360cfc8e01b9c7585a1a2b581817197eb4e1118eb6f5c78adca6e14f62e98a9d580d58a7125c16a2598a8d2c6f74873f94b37f9137e8ba5e70b97c3d60a6874820e3fcc528913c70adf54bef159a785e2f1b2e7ca33c3643f5e76d33f14eb19e6dfc1b2c93b2a497d3371bf2f7b21e7e45756f261114b2e749ed4b81cb492f8830a46ec40d5143059e10d806c08c89fa40e5b4970fe923f44d829615f4335394a65ee1e4d50f79572ad932ed6f6c570db3ab0f78fd190562e42c1bd0718a08e0f5f473e19de3a1a65b2490eb62c027f689722e8acb808b11f63a8550b474a82085631fc6d9a877ca5ca234ca003a6f504fb6264957857ed8df75ffdb3ecf4d761364fc99ee9b1f3f319044ec4733c979df0bb36f2e37db0195e409955e5a8d8d17a9397742f033ab4c05f6c5519ab9d66299249ee9d74db6d99551b12b39d283b369d09d2937654c2a4d801aadc330768aa960cca437ede99dc68733f4866110b020eb3aa110668ad09201556f029c6987e31da62c9e9a64074a5e0409359bb9fa9509ec9021d1e836a9acca20f6dedebf49cd9802e0a5738d65ed8d2d7ec921cb9893aa255b996bb18b07440d3bf8d190aaad93540311cf9e5a62146e895619bee05693bc12bf5258f07e3a9013a2cbacadcc0bacae9c92b38bb7c7ceb944fff5674791eb2cf52f2235ccb58fa4325a51f08450c3aedd0ff7f09814b74a6bf6d761951bb62ec7c32c3d4baa455f42d65950b070205fd279a6c8b07f261bc3f72b18586b1a4a082c44f9e24fd763bb8fb160560c8287b3ae0a50251ec3cb5f9f66a6e85d49def769506dc598f214815dde581b0375bc1c2e066ce3c0eb8a756682863761856c8f4804c81e9f4a0d0516f1c2aea12f699a4331b1e1643efaa0f577e08a30034241f4ee9477ce7991742f6c792740d44b7f42a1b3e60c70a73effc1bb0ff52a3e515268d8540328a6dcf93cfa1536e65c9e8e521ebef892beda66ceabd74145f99ae406ba4d59c68d079b8e2e0767a86ff90940a4724984c09cd3701a72d95cf0b33ba38c91775357b384e4a9ff577b0f2042b2b94ac1e9e339d8b832d45a5f3d0508e92add07810e571ea1e7d99235bb91acef470dbd354d4038cbcc314e54c2062d9e37b413404e124c695aa324eba65cfe67ca4a96c3808441f3d02630b4f95110503f1b2558331bae558df040e2c7b6d7df50490368408a95c2dbf2099f94fb4ebf4a582af4b504547236f66698616e252d0d5d7dfad89b1cbf2b3af0926215e648277733fef7d1028e9b7e740850f81b8a4045a2074b1428983c1750773a98aa8f21ce94d0a11dc9a92187b42d1828ee19f00c498989b68d192834b6464de66f2154742efa2f286249eb5103e0e05ea12f65bf578f61460231981a98897a5730b2ec6e923f629e5b1d3eb374ba026340a0911abff51d787f1d775325b3147ad2cebafe57fde1b4c98366c5295e700ca4634b3e4c90d72716fff87b96a5f40ee99d6e829ed1d819ece697d8defcf054b9b956fe82cc844d07b4b1eb8f50e0d67e34337fda3bf6dbd5317720eade92084901e953d26fc429f310eaa9a66ea98be2142afb8f63ab16e4e5724b1268710ea2176fca7f46b7ac306dcaa111b0a18db21f0f5d35e0b6684c7c1637bc7746111f376d453afe5d9738a977f9c852ffba49894fd938b789a8f381b4408c0c94689f1672e2b91f4507a050e0820d20bd602cb6388f57578ea0a850c7ca6320e090172102b8b2299b249f42d41b544521d54d36a63338e80490b37c58d8efe309bcf8e499f9de397e625f162c33ddb30b55cc19f5944265d216b57932ae3a8152a3cdf08db29116d84883755aa70b22f855135eb0a504d99872b644065f23059ffe4e8d0fb7075f6dab8a07597135ceaf2bf8464bcd52da800932b0b308679e702389387ef568bd75cf930805d18027e49af173def0d4e0c7e3cbdbe97dde62ff567b2a22e730dda3e3e2b117c19fd46f9fadd9cb830bcd5804168a10ee8db70ca0f47c69a620b565f75b1da347ecb5c957625e52929e6d1a0cecc599b7db8f09d79999d2534179411e6bce73bddf2108e327ea6f9cd66f239a7ad746471b6f8fe28e3a14b58a30f2aa5fd38ab75cc635c7d83f9835b6aafa9db23bc14923a53d3d5f8d7b493a83fc2c29f093a850297cb34b1ab22dc97f57480b809ee061f5dbf96fbc253f1dcc1c602fddade9f58768c1c42265bcadc03e3a926ec75e88ec819a84791d0734661f9aa34e5f9fe89e5dcfb03bfca1f769fdc8c8c8bbcd2b3732efcc89600ac36f53ff27aa04d8bc7b1943f14336d6f34a723e52face2e30f13488fd3db12b81ab08dee2c3568022d371e9f3e9adc0b808f68fca7989f5bd9029295803d74e50901a5fb8c7769f3e6d8e8bd428fc43e217903b29d33e8e267fbd12584bb2250262970d1cd76f4026851bececc39561b6ed902603de1a85265130aafa97b4eee28e1b5307447857f7bcfd41019d984a9640993f27760b462fa2d854ff4585d333144133462934899b236087c6ae67b400c32cf0addd3020b5e4911bcabdfc6c4c0e87f898ec03ac011e5608b0a74c7d96ab6cc4b0f6a7110ad51780e3c6da17e548e4dd7c668a1ca3a9c1ced12bac56f038f6d316fc274e83f25a56b34934dbdb76cc5ddff5fc9880378dfe08c21da270958508795a583f5a0e1fe6347ff5c7eccb92f5b4ada2da51284648e6aee2b6041a1ebf23e9227a86c2d1c07703a0b41f25b4819723eabec46cbc216fa3d02a28d0994c106bd0dd3daf9117c3521e650057e724432ea5beb50a19af86373c8706ca4562e906554ea326db96170eabc53e59d072d81a9fba5995f0dd84c51ac0bb3b9231de1833050f035cf1be6a44b9fffb38f55ccabdf8fcf8f93ab352d823414e202ef8e0e11019a5fbf9209801a92d42e297bf209b10", 0x1000, 0x8}, {&(0x7f0000003940)="d3db6fa801cfdf331e1b9000e443c55dd6ad8855cc973bae04d83f9df0bf7bfc91c2e0e596193dafaec1e1e6205b4c74e7d9ed6520c3aaa57777ffa5a5716677fe5a33bed7dd7dd65d8e5c30fcba2e013b6f8cf5b5e627434dc6", 0x5a, 0xa82}], 0x1003, &(0x7f0000003a80)=ANY=[@ANYBLOB="6f000000002c736d61636b66b20ac3c0cc338d736b3d4d41595f415046454e442c00"])
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

03:33:16 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

[ 3252.409053] loop6: detected capacity change from 0 to 40
[ 3252.467268] syz-executor.6: attempt to access beyond end of device
[ 3252.467268] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3252.468907] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:33:16 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3252.498981] syz-executor.6: attempt to access beyond end of device
[ 3252.498981] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3252.500898] Buffer I/O error on dev loop6, logical block 10, lost async page write
03:33:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1000002b4)

[ 3252.547676] loop2: detected capacity change from 0 to 40
[ 3252.575522] FAT-fs (loop2): bogus number of FAT sectors
[ 3252.575931] FAT-fs (loop2): Can't find a valid FAT filesystem
03:33:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:33:16 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:16 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file1\x00'})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x2, 0x5, 0x4, 0x0, 0x3, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x80, 0x0, 0x1000}, 0x0, 0x6, 0xffffffffffffffff, 0xb)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setresuid(0x0, r5, 0x0)
lstat(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003000)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000002c0)="64c1d05a5c8363d3b4ad4648d4b132504c4dec4af2558e7d6c5dc418fa96527c3c51cf92e15176360e895eef7f84a7e4c5e7d8debbc5d21888e61a40e5a96565301680e361e3f3cef5ba5b482c6a0bc3b795d37f44", 0x55}, {&(0x7f0000000340)="9915200a75e1e95f5de62c74c1144d8049d43615cd484c30b5ac49e150d425461b700ad5eeeacdf7f35d46c585a73cb14b8a48c20b90cffb44a480869f3458ac39e4110a20d4f178d1ef4f89afcb53ad7a2c47f2c9f156027f10e0629f3745050509bad57dbfc65cd74c9e379a8d870ef0a5efb91ba9cd4bbf85ec357c7ee9c945964dae7c3e23f6d6494a27fbfe7f737fd9fe497a93f767e6c4d237946cf7ee083e", 0xa2}, {&(0x7f00000001c0)="8b50a2e1cdc69fad256bf8529e2b7ca25b1c6c495c2a7c7182e1e142eac5d960b8c4a714cbaf3bcb64eaff2d858f524352b741ffe2449bbdcadda8", 0x3b}, {&(0x7f0000000400)="d2a9574204bd4f79f6b7e893ba7e9f0ca05188ea80cf4797a8d307cdbd75b4bb154ba43c4628393d14053953d2e4c1ae4df168e98a9fa590c1a6ef7b797a7dc8e3a6318626f4a8cc5e6cb406bed636e3bde1089813c0b00c935dfd8ba6b4f93ddd6e480cc049", 0x66}, {&(0x7f0000000480)="5f26c2d76513ba5c1ea0b0c878de1701fd129fab2890c35f8a5ce5ab42da945a18e639a13a4c52ee4185469102e8246ca2570a715c3468c3ba36622701e985eda268ff168056621bfa0330623b796fec241a62a8192caa787c3adb93afe6780a501b356f0deff3cdf41fac7d3823e91a15b047a7fe361279763482419eefdeb8577d836c0b2991260b1f8e30d6bb213db2cbd20c18bf1d718fdea8a704730b9818883286cb8407a9ddf24d5a5b3b47d262462dbc14662b2b45dcde4e42a0a1f32c36db826b", 0xc5}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="89941484306994b7bf30a8d9a8e344e525db6e3871131c258902d86c47674e164b0ecd8688233fcc8fa4f077c967476ec92941936d7751cc81600f4169477a0bc3561c3d63eecac85ced851e2f3d08ff0eafa552d9164a92e97f5fa691a7d78d9b578bbce52f3e2d5511452140d80e7d39ee49aea913de0956fca4f773548932a7cb82702522fa1538fa916082efeb7b01518b021fb878c8dcd5601f746ad23d5ba48f49174196213a78c8c5708dba7b84c9d75b83a89dbe384ceeef2e23437f42c68a255a374047c90259d70e642f16657921e31c3c323e51e51609970487468f6bd7ab9f050f763bc52e1143352e942e2721db", 0xf4}, {&(0x7f00000006c0)="3e805a40e3ce86624927aa6c1d13760d181e6c31955d478c250954444f4f955494e545bffa1dfb9a85e4081f09f53cf0c4118469ab159fa953d39b87c33e70b6fa4b2eb090c85251c73e10c1e96775450e41361b248d0d84c034fd9330439d429cac1e9cd20f9827929eb33f66f9c891c30d6647434cc22dfd814424e9289a35fc038cf403034971223deafbdc0ca79f85bd4f398165bc60497c65eb48cf4be4d27a4cb5ed7f23a0b3f4df698dff325723f16c99bfa9d0507e7f3539ea62fd7b375c87cbb606f5d34b7e6cee44", 0xcd}, {&(0x7f00000007c0)="0e1a6db5b1a964856b812b4b78c7c33656c71f6475d111949252dee90d08379edb577e908e85d2e01af675e4e1fbbb3a7f842ab8fc0562e2abcd52103bf0a53f743db66dba590208a4e71789257491fa7a2347fe57a07dd6bcfcc57581021a6760aca462308afca4428a5813b8217e6f7690958c138907ec03ae0fe35925859e720fb25adbd6a5309f0adeb2b4159e51c779fd33abec0b020e554981c49ad75401cd55f844b5537d4d6e0decb17915ee1bc6e5", 0xb3}], 0x9, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xffffffffffffffff}}}], 0x40, 0x4008810}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000000ac0)="c9f3731f467fd9457ed31d4d6a7f41ca7345f9e58ba2788c6df562b6b1af792dfda59dbc29cd169a493ae2b74b81d692ebb1f489de8305d4478d2f5e82bba2d9a5eeff2123a2c6f1e020ee8be316aa10dc741e9a8232901a0e66702d77a32b021864725505bbd62732a06f98d89e51dca63a881d35859df6efce9b391eddeea751fa37a778d680f7ea96682d64433ce3d276fd4fd4", 0x95}, {&(0x7f0000000b80)="5b5a89fe67c1214cc935a8c77ccaabe7646726eeca39526582976f1cc269758d1a0c68906bb6627a1995250258774ec8b2040cebfc42afb8fc9971dd29998a49a8e22d6e091ecaf8b1e8dae2acb8548e2493b9761c49837284f20491e64ab87fdee38805291cc481d555d9c9b204af4f7b4c149bde7f8b47a1a07f15526a833217a1aafd533df8bf295cc8bd0c49bd1cd44b48a75cefdf19706fdf49751d748bdb20738eb2092a9cbb0c805f1a1b299e35fcaeebad841bf318be52c321a7d253e652fe7a435116b47f7863d249c9c7b9d04c3f2b05a22a5941f6666cb82064cac09be2467afe94", 0xe7}, {&(0x7f0000000c80)="031a4d8e6a087d9c773519169a580281c03ea47510ee94ca3eff0890c566c320611df324e89a735ce45cec6758a548a5440dd2bdaba61cce3cd032364fff5a1ed4c0838c607aa0b22ad9fc9fef1a8f5eeb63e0347588563d8a3c8bb2b0ba70600e5485b5483cc383ccb0b26e34cefe9fbbb1eeefd85e7bb6b3821a5131ea8669ab6d6e7f3f", 0x85}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="45e5c879282a4b68ab09fb7f63b28d7d0c5bf975443b65639a9a378a986acf1f467004b35116a67705168bf5453892dfba22cb28f6cb5a2ffafdfa394065fba09f3a5e6af01f84948b06c7f8f4b1baaf1636b84a698295a4bdd6308790109a988205cba82e6156c4de0f19647a65607f04af384f1d5e3bdd35d85c95bffa70e1ebeeb48bdf902c63025e04c3e2c847cda2", 0x91}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)="9d354f0cf8b8ad5ceebfd6d130c2e1c5967a4538736f71e6b726a5f8ff63ac04afd4fb2862b43c8e8bc936cea2bb5fdc2c558c878b395935aab31688ae43257f0be2ea77affcaaee3a897b61974a72e4c2cb9cc530cbd212722dd81a46d48a2afb4e347bbc425a77c71cacfdab8db4438088e35e85fc31493ff76ed20c822ef46dc6283837fd1bedf42652ef9bc71679dcd0b3578bf97a130ee66fdbfa1d1132ecb86e5b3715fe4381df174fdb03bf134dcf8597fe713d4e8cbc153ac5c14384a95e40c3dda32ed4901b4f26126d14e3d1d10e87bfbb5c03f64c6aeab23ae899bdd0764b0f1c8807514b374018c3f337", 0xf0}, {&(0x7f0000001f40)="4c852437d4ff564add36161aeb5461fbc65b46da06409cc945ee563a0673a703cc8077d857f039b75f5f74e14e2050a7c8684bfc260ffbaf87faeca6597830604c081f6d63253a5c6c5c1c3515a97846ca2930c2a7af9cc2ad4bd6265fd8e057c719437827c58a33aa90ce2e6118f0256cfa698e333895337c333e64a2f06d7f16610c9cbdf06b700ab126970addf0cecdea27ff5f33fd695a0ded081403901a15a38297aa63bd219ba05f7bb37832473321c96581e6e7f5967dd1fc7883fa9c5bae5cdfb4a7394b7c8e0a3c492308445070dffcce9471858f63ef0dab30b35ac0278f31ace1ec14c46a4dd3777d6c0999202a8a7c4966501e3bc8e0609ed45c6c9147af68c173166037e31d23326d26468dea20d8743ab5b5cd559aae765a29f3bb0c008a1d775413ae71ecdec349d88b5c911271d9f5055f8dc1cba62c306a0b43ceab7c2abe34fea45828848f518df50c02904e4f13eee84bec499918087d0aadf177904aa9a27ac010c6c49427ed5080c7a067e69c5b636c7293c5db5d2999db6b4f4559de8d33e0df421477eb95e2cb9d9b2787273912c51003c36069785a06435ca9124a85189e336c14f7ee08ca114d70d134de1fb9e512433d7f14f777fff3dbd8afbe013b6a08fcf7c7b876589e09d3a6d05436f609424ebdd10666ca4da2283bc60244911291e47a7259eb91bd427c26d234dbb08c81c7af4831c494929a3d9962b9424a3b4cfbcd190d2f94818f8b3148d8c3f263f7f76bf2b70425b7cb39ac9489747b7610da440db71e0697e9e191a56c9d6781c254bdb0d1d09746b99408bd44e0b79a755a8876a37b7a28ccd5fdc762ff4cc1989099b09b9e121944d68fa59af024fe65d89dfa13cfd85087f8b82c13ee91d0fa16396b98f36dc7581e90a09efbbbd84ec0b416832691e4d8925f410865881f8639bb44d7389e013901c062e393962efb26ac3ca734a18ac9eb0c46d5f7d0eec59244f44fb6210e8a74365b6889af8714745b2ea480f2e08d26146ee23a357aceaaed6447cfd8653ac6c411415ee81da14d2caea0d351f24c015c38305d527e1aa6e80b8c6e8e1354eddfe3f4cf7c0f08353fe18f65e55ef81c2480574fbf1c37c57ec7b569ddf06144326a935551fda0401b7337087504b499cd1e1a19d76b83bc0af767774595c896c27eba3108b55439d22ab96bf1c1d136dd6f0d621b807bd6f95cd3100cc1d7349670dec23630dfbcc206d6e22bfd3a1c4aca5b4fbe7a99144ff723078ae55012152f81279c02bcd9d983432350fedac9f886a5fe897ca3f4ede4808f69609054bc1e76070ae0480bc90dd2cc45a0918851d351cbde8377943fb5b9b1e193025a35b5e84fb8e0b589276be29f36e9aef15bd2b6cbf6221ad950b9573d5c5d30d380f2fb151b15bde321d9fa299a7500624eeb4a5324f92064ad9626fbda944ff614a6bd48fb85ea2e9dd7135780db832521be02adb58e5345b454d90664d839d1cbe28293b9c7192f8d373d0d07e7c4071486a18a5f934c5e1221da0156172def60d062ab2b6850fe2f63e3f8348812ef69f6596abd8a7d048103ee4efd8bff6a9897b2589e687c48ef078c67929c4c097c6f33d0262e274aaf7a0bfb9af636e6b1d43ed6c5cf55dd2107162a9e73c7e2b782cde9a85f577a89ab54db6a0a93e3873c665d98ffd72b6b9160fbb735358d1c1f1dc2c9a271e1bb65abe4e68977212debc476ca445c148e52849201698bba8749a47920b2f6eff4c05f4f678f083f92f9ce71a345e2cfefd3dfe92235f0901589588435a24f7928f811982bd477c1c4317ee0821f20cda154cac886a47f5b3ce99e8e37c1182f23ed8d35650a50b9818948b234c903af7459d5cbe7f2ff4e3fad1db70e88720694d506157341ae881855e58aa700e1780db3f52bf4a2198928912db42a460f3809bbd2710c8975f2d25dc6d57ac5bfbce51069d3acf6a723ebf0e67174d62efb10a4706a58f3e07f7310c485cec76e42bee68380004e900404cbed1541488c60d5897f5cbf670a8a6071b3d69ffc9829a44216459c3b407152949f82de13d5d1883fa16dbc8f6accfefbe154f3a85e33e89247d7e220a6c1eb883a83f06359ab0cb2590e77527ba1ea0870407cdc8cd07238e3b04e425800c537f757ee4739cfb370624949b28aacae8b9062657ead1886fac55739bd5cc89515fd5d64f9b35f825a06ab5b88feb5102539566eec4a409a058dc31f13fcac8c37553ed44fa35368cb96322918c67f413bc339cdcb6c94df8efea18b74a3fc7363a90983c7658e0e33aed0c043992d30e6d9293a1475ad0f1d13524d90af97b1d50b7b64ce0b7410bf17cdabe5c873066d84a0398d05bc324eb277511cfaf506159a23191a25816499e8d9982d3df1d46777197e9147bbc4b982b4e4d2567380badc71601c001a2d929014d09ca6d90804ec3deb5a5bc5d814a733090998e73b32cc08821af30eaef38ee1ce180758962a5f005345417ab323dcf8823f343224b8f219a0d357157cc6134dbbe125df3d2c959057c573a560146b1a7f7e40a7cccb4e5905d65f697d32deace1b0df8ab45a8bc7a2c00e42b106ec0714e74285feb49e590965dc3f00fa55f55227528ea55ba9f983b71f922748b5b96719a8db0899bff8db1c44948cf1272a750335682df1442b28a39406e3d8fb3474409ed516ce7411ea5243999a9c53785d9e493021f9884044687d7fcde68afec0aa34072123259229ac939991386426b9ffa4134aeb9f4224fa9233345ac5dc7cb1b66582021ba15f8dca5077962b8e3d5ac429d1479056361fd8e62b96653c0b78c092c9ef76611419566c69487fff27e9890cf700b79acff15db2f431748e305f1d0c248340a049dfa61604327f9c5f8cc994a3d78e911638fdfb57930bb089fb527874ddaf73a32c97fbe4028128a9e94a3ea2ad204102630a48fbc50ac1cc8772ca13eedd7c2afb6c1bf50b14645990882d8e6ff51b3695364e77e3aba437ab2818c69db39840bd87d2038a91fe6cf1c6566698fc24768935cb8e524860e7d1cccb7d2a4fa825dc021660e98457bc73f5affa4f24e2fd3592de9e2860728c594ad66876385d90e7bce64b6418b317862a7542e45df35e9540732890d9ef9a5cfb1877f4f523098989a066e22b852015dee64b5c2b55b6d53bda6e8ae9781eecf175ffdcc2f5244294e9a643641122d3ecc6004d8fb0ef1ad688ba1cc0d01c21de8f219224d0b4f573c24cdd0b0dbb6d51f1739b9cbe32909a6acf86e6636eb6004a4e7f48efad17532b8ee8a8dc4c2fd55b7d601b9acefff16f108b368a3142d186706fb5a35cf671b83c8aa7d8dad4e008f572ef31c26b761f3ed20397a38ec2ace5808895ef8daab2158b3166865d8b65445b2d0a5eb463e8e66ea4107dac989222b5f201fbd6f3b2fe6dfe2911c65c802509f2f168331fb41d4df1983efff8f46499a82e48da7493d9f41db299dee7f0321170bb15af7ae32e001d7fccbf61320f02dd3810a229cd644fba4ff3d0c5290abb1f1dc79e8f6c796216a0c5beebf5b5c06d15a7fa6ed577c1024617681c126e881d075da2c262cf304225bc56db0dea26e0b85c83b467c01e4279cfc135297bc1d448cb4728a71c11ba87bf72d3d4f48e3dfc4cfde11100fa1423bd32e0d191ded67f0e86fe7fc2f424b3540cc29e4af4c22fb3246b5bb88f8b5d74bb4ec98628098595b9a866eab018d738f7e0048c3513381068827a51be6e63246d22668474129fceec890246203bba62d9d6ff42f3cfd137f5b048ea68964efac8eb3b3f43f6f465051fee78082ecbb183916f6f03861cedd44f14bf32b24b29c62c87635ab4dec37e29ec768498555ec1f7ad8ee5aab1799c827d6ebfff89719215c8cb0c2754c2456eb81facb0a220bf9b4354596444fac9b5f056fdb9d313bb6ee544daa26b4a3ad80dfed7338ea0623f8489a6e5aeee19880dc6e7e459abe6cc1ef247193e4e9df6dcf89a0eddd6cbd9ac1e70e5ded154e78e8a4797da9c9d591f301fe4f3d187d74f9cea733210afa7dfae53d3fbc1a36fa4c22705478740d3c2ecd9a4b1498aac25787860a77f534b705babf9be7a087cf544f5bed44589e953a029f346c8aad252003822dc1924b771e6cd63c0b6221817eaeefd87ea373453605e8e9dd12964c0d320f3c890cb4e5caaf5e652ebd7be5b791fe1089f918c86e15e34498863f48de7c2c956d9eb731208ecf0a46c6e313e77a8ea1fb3e9273c09bcf00865dc8469ec12d07c360a25387dbd0d232bb5f86d261ed6c1697d40c04c464bcd78197ed23d4796f7d20cafd37fed08eb45bfcdb2011b8acd6d87537196f962fa5d69fdb70ee467b0180d18dc20cf7f29e1786a5a2cb2e901ad9bf4e3683d8eac7d60c160f1a0e75d9987930fdf9e358cee405d4f119e318b9b2dc11667cc5a319d83053fd4044cc29e624ebde8cc920134fdf16d43bbf22f69b47dc73230f3c405a2af9806ff7c7d46185edde2dd254043aabcd34c155be00ff9f64850bc4c7246b4a1da0b0fa25194acd67e47238d42c23c851d505f7e6784de95d584b47a7b0c933ea90c91f61a00809618bbf49644b10ade454b5526eec3fc52f8871a8bbe90f571775fb2624df889e96a30d88d27fd15246fd18361cb442146657b73b172284aa4707555e98744faecafc4d36338a2c72e3d05f092bfbeff93132d34cccc696fab44369a71e98e6435e15741abdc96e0e76c760d6ed8432ed6e3e84824416f4f308907dc550ac148de483dcc8288753251175eaa74fb18086dd7e9820a7fc6c64d5b27452dd1eddab14bbd4d7a494b2691cb26b85df8a86b804005010ae19e2adae9085198c8fb42619b37170ec518ed3139e09dda191ba0388ffcc6d1f7c81bfa58bdc0486b8fb7d9a49b24b80e15b558630211562992686ec258ecd4d7cc6f62fd96b107fdbbcf4ef0807d73f5838888829fca653ba3e9d33641af3a5fef845cdf7d6d323f127a6d38c5eada42e1a90c5c665c3a4d842ddc4ac8be765f5162d6f88fc44bf197937df15a62c69c4ae7a61d90575e8919d181ce0df91ceb9b96551500ce476bab31119bff1dd8383b9bad22ec21ba24d2b5a13e9d474910b81b4ad37f4789a4e3696753a0f66b4ff667bc57a8dd9dbe8701092b8e8899faa2f3058e5ef4a24707c7dbecc5f16e503f94794f77b2129b58404b48442048d8b248dd9fb08d697605c147a110842beb590985069cf1534564ef26c9d9c6c38b26da4e23dac8fb74a1aeaf182d3153bf37256a0bf7ee4ce39951ce4070f65555911af52d684ed3f58ce125578febee08d5bddca6b888e170b1389681217442799733218f821c47ac5402c7b61467f07e0aac57a9f4d94e413908c3bef5115c20f68284186c08aecff95aab246d5600389cd68027580e2cd0cf2c6902a5d5ddd2308891b2ae86715e09afe93cc3a43dcdf57adca16b26bd0b68fd2999b68bdc692eac120cd54f6eb2adbc20d1172b6f4726dd8a1b56e012cec629cee2c75269949a9bd832ac9165e2b874b0cefef1c13bc2d1310a7ff1b360469ada092092bed7bfead9afeae89ba1ff8e22a389effcdfb899b454ad1e66ada4dba430e935c69a3b89938ce2f2fc148e433764955c4f38be77f1accd4ec4137c0f86989b38b11a868581925025c039be4a9c8b8eeb3fa07c23e61be6c6477c600d222a599acc8c33afa7e5f85151dcb213d4ce9830395b66c96c022d5c35624d8c91c37ce55eb89a040515693d45ddf912ad5ee2ad2072d64fe6862ac23241", 0x1000}], 0x8, &(0x7f0000002fc0)=[@rights={{0x1c, 0x1, 0x1, [r4, r7, r3]}}], 0x20, 0x40000}}], 0x2, 0x4000090)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r4, r3, 0x0, 0xfffffdef)

03:33:16 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
mkdir(&(0x7f0000000180)='./file1\x00', 0x36c1f1106c9ca1)
truncate(&(0x7f0000000300)='./file0\x00', 0x1001)
creat(&(0x7f00000002c0)='./file1\x00', 0x40)
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
connect(r0, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x10000, @empty, 0x20, 0x2}, 0x80)

[ 3252.692523] loop2: detected capacity change from 0 to 40
[ 3252.717877] FAT-fs (loop2): bogus number of FAT sectors
[ 3252.718304] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3252.739339] loop7: detected capacity change from 0 to 40
[ 3252.739462] loop6: detected capacity change from 0 to 40
03:33:16 executing program 0:
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0xffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 3252.836839] syz-executor.6: attempt to access beyond end of device
[ 3252.836839] loop6: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3252.838098] Buffer I/O error on dev loop6, logical block 10, lost async page write
[ 3265.784283] loop2: detected capacity change from 0 to 40
03:33:29 executing program 1:
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgid(0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp6\x00')
pread64(r1, &(0x7f0000001400)=""/4110, 0xa3, 0x2)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x4, 0x5, 0x4, 0x0, 0x8, 0x0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x20c2, 0xa42, 0x6, 0x3, 0x4, 0x9, 0x7, 0x0, 0x7, 0x0, 0x1000}, r0, 0x200005, r1, 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYBLOB="71dff35300c168dea4712708c7c48badc9149e4c649f1b74ffbaa0decac4601d3c3453f3ea93fc9fc306f37eabaaed5ee6a4d9c2f8981b209c04e44f0eba0121fddac5374cf81fdf555472c1b0f23fbaeddf89b2991feec49fa63293acb66c774452c833b065c927d45cc92601", @ANYRES32=r1, @ANYBLOB="00010000000000002e2f66696c653000"])
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = dup(r4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000002880), 0x4000101, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000380)=""/81, 0x51, 0x5)

03:33:29 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f8", 0x16}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:29 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:33:29 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e731d9c65d5e925836da26f8cbf9726d0dc6d0a40c6e57", @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES16, @ANYRESDEC=r0])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r3, 0x5441, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x2)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffefff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
write(r3, &(0x7f0000000240)="9f62d7d4bd66ce48a613973da1bfa929cc64f872f43e13b71aa7c1c13a40fdbaee5d9d36bf14dee275c1c6bc6dc6d9d55a77de7889873cd60be5adf906a177fefb3ae4498f46eb787248a4e451456f28215917f2c7b4545d708999e008564905ee0f64ff6f04dd11daec3806b287dc3492b547205eb70030da58f211b7e9aff3edab3ce73489354b88e65447709bf81353ec2dabc5aa1e4d9985cc7155", 0x9d)
sendfile(r2, r1, 0x0, 0xfffffdef)

03:33:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x14de643bf00c0fab)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0))

03:33:29 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240))

03:33:29 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000100)='./file1\x00', 0x200, 0x20)
sendfile(r0, r1, 0x0, 0x10000027f)

03:33:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4001)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x0, 0x40, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800000c, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xeb7, 0x10000, 0x2, 0xc547, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x10)
sendfile(r1, r0, 0x0, 0x4001)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_gpu', 0x0, 0xa0)
ioctl$KDSKBLED(r1, 0x4b65, 0x6)
clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x2, 0x46)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)

[ 3265.789457] FAT-fs (loop2): bogus number of FAT sectors
[ 3265.789846] FAT-fs (loop2): Can't find a valid FAT filesystem
[ 3265.809371] loop6: detected capacity change from 0 to 40
03:33:29 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

[ 3265.830644] loop7: detected capacity change from 0 to 40
[ 3265.842008] FAT-fs (loop6): Unrecognized mount option "ç1ÙÆ]^’X6Ú&øËùrmÆФnW000000000000000000000000x000000000000000000000000000000000000000ÿÿÿÿ00000000000000000003" or missing value
[ 3265.850588] loop3: detected capacity change from 0 to 40
03:33:29 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x20, 0x6, 0x1, 0x6, 0x0, 0x0, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffeffff, 0x1, @perf_config_ext={0x8000, 0x4423}, 0x400, 0x5, 0xe0, 0x3, 0x4618, 0x2, 0x8000, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)

[ 3265.957024] loop2: detected capacity change from 0 to 40
03:33:29 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:29 executing program 7:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r0, &(0x7f00000001c0)='./file1/file0\x00', 0x220281, 0x22)
unlink(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x7, 0xe2, 0xe4, 0x0, 0x10000, 0x32004, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x6, 0x8}, 0x800, 0x3, 0x800, 0x1, 0x401, 0x9, 0x3, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0xf, r1, 0x8)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000180))
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)

03:33:29 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
move_mount(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x3)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)

[ 3266.106650] syz-executor.3: attempt to access beyond end of device
[ 3266.106650] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40
[ 3266.108743] Buffer I/O error on dev loop3, logical block 10, lost async page write
[ 3266.145449] loop2: detected capacity change from 0 to 40
[ 3266.230697] loop7: detected capacity change from 0 to 40
03:33:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x7, 0x0, 0x0, 0x1, 0x0, 0x6, 0x420, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xd0b, 0x80000001}, 0x40804, 0x7f, 0x8, 0x2, 0x8, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xa)
sendfile(r0, r1, 0x0, 0x10000027f)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x98001, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x446002, 0x0)
r3 = memfd_secret(0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x80, 0x80, 0x80, 0x1, 0x0, 0x80000001, 0x421, 0x1a, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10000, 0xffffffffffffff00, 0x1f, 0x2, 0x4, 0x81, 0xe550, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x7, r3, 0x9)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file1/file0\x00'})

03:33:30 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:30 executing program 0:
r0 = getpid()
ioprio_set$pid(0x0, r0, 0x2007)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = gettid()
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001600)={{0x1, 0x1, 0x18, <r3=>r1, {0x8001}}, './file1\x00'})
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x81, 0x1, 0x6, 0x7, 0x0, 0x2, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x387, 0x4, @perf_bp={&(0x7f0000000140)}, 0x2, 0xa78, 0x1000, 0x0, 0x8, 0x5, 0x7, 0x0, 0x100, 0x0, 0x7}, r2, 0xe, r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)={0x0, <r5=>0x0})
wait4(r5, 0x0, 0x0, &(0x7f00000002c0))
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r6, 0x0, 0x10000027f)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r7, 0x5441, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x2)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "9131a2d079df38b0b7cfe6edbdb1de27effdf1"})
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000200))

[ 3266.485077] loop2: detected capacity change from 0 to 40
[ 3266.658971] loop6: detected capacity change from 0 to 40
[ 3266.680289] FAT-fs (loop6): Unrecognized mount option "ç1ÙÆ]^’X6Ú&øËùrmÆФnW000000000000000000000000x000000000000000000000000000000000000000ÿÿÿÿ00000000000000000003" or missing value
03:33:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
unlink(0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4001)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7, 0x0, 0x40, 0x0, 0x0, 0x40, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x800000c, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xeb7, 0x10000, 0x2, 0xc547, 0x0, 0x7fff, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x10)
sendfile(r1, r0, 0x0, 0x4001)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_gpu', 0x0, 0xa0)
ioctl$KDSKBLED(r1, 0x4b65, 0x6)
clone3(&(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x2, 0x46)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)

03:33:44 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)

03:33:44 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f00000006c0))
timer_settime(0x0, 0x0, &(0x7f0000000700)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000080)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, r1+60000000}}, 0x0)
unlink(0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000027f)

03:33:44 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file2\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:33:44 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:44 executing program 6:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0xff, 0x100000000000, 0x101})
r3 = creat(&(0x7f0000000040)='./file1\x00', 0x18)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0x5)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
sendfile(r1, r0, 0x0, 0xfffffdef)

03:33:44 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x40000)

03:33:44 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\xff\xff')
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r2=>0x0})
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x6, @local, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000000340)=[@hopopts={{0x130, 0x29, 0x36, {0x1d, 0x23, '\x00', [@generic={0x5, 0xd2, "6732c98a01cd32ee88289af7b0cee0eae96069880857675db1d1694952cec9135c8a8e143d6192e23f8c99e95972412cbd4ad81e77db29284ea986188a0adc1cecdec6fb44755ffacc7fda00210361fdf610e9a6e672a9d25b699a7e2430991f9fa74de75e9b8cdc3cd5515b37fed62a0714822b270054611b3ea344775bb97ac5952d74e399ba34c211b67c98a9fcaa227ba9312a5972a5ddfd21d642a4d4ffcc809c59bce0d835daaf6da2a64de42925135551ec238a27e24f450626c668da2863ce950ba0790833ab441a45fde47da2ca"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0xb1, [0x3, 0x6d0]}}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @rand_addr=0x400}, r2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @tclass={{0x14}}, @hopopts={{0x58, 0x29, 0x36, {0x2, 0x7, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x2, 0x2, [0x6, 0x3, 0x1f, 0xffffffffffffffff, 0x10001, 0x1ff]}}]}}}], 0x1f8}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x7fff, @remote, 0x8000}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000600)="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", 0xfa}, {&(0x7f0000000700)="0ec88a75802318ce3c662547ecaab42c7578715c42557964dbc54b389c1f5cffcdeaeb7b9284a2f1d2c7c54de3993b16ed6bc702bb823ffc", 0x38}, {&(0x7f0000000740)="da7a9a835ca284633ed7d77a148b544231c5b7b63dfca61ff2d279a65f2055d6311876878c5807a6cdea9f08fc7a8c90c894fe55170a98bff0a9962f96d35c5ddfda71ca9c49c3d716a4cf8f1099", 0x4e}], 0x3, &(0x7f0000000800)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x29, 0xe, 0x1, 0x1f, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @private2, @mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}]}}}], 0x88}}], 0x2, 0x4)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x480002, 0x0)
pread64(r3, &(0x7f00000001c0)=""/107, 0x6b, 0x20)
sendmmsg$inet6(r1, &(0x7f0000002880), 0x4000101, 0x0)

[ 3280.924605] loop2: detected capacity change from 0 to 40
[ 3280.951467] loop6: detected capacity change from 0 to 40
[ 3280.955382] loop7: detected capacity change from 0 to 40
03:33:44 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:44 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:33:45 executing program 7:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffff8}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

03:33:45 executing program 4:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000180)='.\x00')
chdir(&(0x7f0000000140)='./file0\x00')
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unlink(0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)

[ 3281.208824] loop2: detected capacity change from 0 to 40
03:33:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x10000027f)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x8021, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x97, 0x2, @perf_config_ext={0x20, 0x8}, 0x2400, 0xd, 0xdea, 0x1, 0xe6b, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x5}, 0x0, 0x8, r0, 0x2)

[ 3281.289486] loop7: detected capacity change from 0 to 40
03:33:45 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
dup3(r0, r1, 0x80000)

03:33:45 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0xffffffff, 0x9, 0x6, 0xa4, 0x0, 0x1ff, 0x8258, 0x1f, 0xfffffbff}}, 0x43)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[])
syz_io_uring_complete(0x0)
syz_io_uring_setup(0x51dc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x14, 0x0, r4)
syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x4, 0x7fffffff, {0x0, r1}, 0x8000, 0x0, 0x0, {0x0, r4, r1}}, 0x8)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r6 = creat(&(0x7f0000000280)='./file1\x00', 0x42)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x400, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_L}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '/'}}]}})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_aout(r7, &(0x7f0000001180)=ANY=[], 0x220)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000)
sendfile(r7, r5, 0x0, 0xfffffdef)

[ 3281.442863] loop2: detected capacity change from 0 to 40
[ 3281.527102] loop6: detected capacity change from 0 to 40
[ 3281.539686] FAT-fs (loop6): Unrecognized mount option "C" or missing value
[ 3282.308074] loop6: detected capacity change from 0 to 40
[ 3282.313285] FAT-fs (loop6): Unrecognized mount option "C" or missing value

VM DIAGNOSIS:
03:38:48  Registers:
info registers vcpu 0
RAX=0000000000000002 RBX=000000000000006c RCX=ffffffff8441aecd RDX=ffff888043c90000
RSI=0000000000000000 RDI=0000000000000001 RBP=ffff88804330f770 RSP=ffff88804330f5f8
R8 =0000000000000001 R9 =000000000000006c R10=000000000000006c R11=0000000000000001
R12=ffff8880416a1110 R13=ffff88804330f668 R14=00000000fffffe00 R15=0000000000000002
RIP=ffffffff814c968c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd24638b700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557e1811a618 CR3=000000000f758000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00000000c0c4c8c8cf91eb6a514b
XMM02=67be396f2ae7239dbe8419de7c4ec0c1 XMM03=a0b1153f87de8bbac8e03d8e2e3bc802
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003
XMM08=bff0cec726c287000000030000005e07 XMM09=9fd6e7b9db33f935af1a7e7fa200141d
XMM10=1fff7179db33f80cb276ccfff85f5539 XMM11=a7fbc856dce3fad33576ccfe73d3ef93
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000001837b77 RBX=0000000000000001 RCX=ffffffff8453b82e RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff8128cd15 RBP=dffffc0000000000 RSP=ffff888008e0fe70
R8 =0000000000000001 R9 =ffffed100d9e6a00 R10=ffff88806cf35003 R11=0000000000000001
R12=ffffffff85d44750 R13=1ffff110011c1fd3 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8453c7bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb54576f010 CR3=000000000cd6e000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=000000000000000041853782c0000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000