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", 0x10a7, 0x1}, {&(0x7f0000000240)="99537d791e9e5aa2bd81281689215968f80c9b5355d711660266b54f40168c48a379c271aacdc524508d0929c264e7d6cd42998216547925d0e8d73af03b99002f548102b01eb86d0bee7f8a0479747261f5407af8411fb8ea86a1b62bdbc1dbc56392d188ff5eb05b", 0x69, 0x10000}, {&(0x7f0000001a40)="6255d9617a81826cd36b7a07089ce2399eaf5dd5b7a1ad86f2f51be556b37e5b333a58d9152bfabd36949611e826ba9abd2fda0f68f46e6c120ba5901b9eab16e58d8de90aaed5627d1fcbb6646b53b6cc105e18860ae320c4a381518d6813c2e02d9ec3a327f6b8f0c0c7b30782efd9138d3e8a80", 0x75}], 0x308040, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@nocompress}, {@hide}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@overriderock}, {@mode={'mode', 0x3d, 0x80}}, {@map_off}, {@hide}, {@unhide}, {@session={'session', 0x3d, 0x19}}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@euid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'iocharset'}}, {@obj_user={'obj_user', 0x3d, '@*@\x02![,^'}}]})
write$binfmt_script(r8, &(0x7f0000001c40)={'#! ', './bus', [{0x20, '\\'}], 0xa, "e5d3c96dff879d6c8f398390a391514aa272cadc00ef65cf431f4ca7370c15edbde72d141f78d2277a8316401109beb637556042189da114cc00f3efe563e120f54047c83c2485e5745a8ef007946bc79d988a88c58b87afb053e1c9ccc8fc3fbb44caa653576287ea6ca7b7b73a3b5ab4c4d6b15d2c0d"}, 0x82)

23:15:41 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:41 executing program 4 (fault-call:8 fault-nth:29):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:41 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  178.397658][T24954] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  178.397669][T24954] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  178.397754][T24954] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  178.397761][T24954] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  178.397768][T24954] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  178.397775][T24954] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:41 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  178.572501][T24984] loop5: detected capacity change from 0 to 16
[  178.582112][T24982] loop0: detected capacity change from 0 to 16
[  178.596754][T24987] FAULT_INJECTION: forcing a failure.
[  178.596754][T24987] name failslab, interval 1, probability 0, space 0, times 0
[  178.609353][T24987] CPU: 0 PID: 24987 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
23:15:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x3, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  178.618095][T24987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  178.628137][T24987] Call Trace:
[  178.631401][T24987]  dump_stack+0x137/0x19d
[  178.635721][T24987]  should_fail+0x23c/0x250
[  178.640125][T24987]  ? ext4_mb_new_blocks+0x70f/0x1f90
[  178.645458][T24987]  __should_failslab+0x81/0x90
[  178.650232][T24987]  should_failslab+0x5/0x20
[  178.654785][T24987]  kmem_cache_alloc+0x46/0x2f0
[  178.659606][T24987]  ext4_mb_new_blocks+0x70f/0x1f90
[  178.664724][T24987]  ? ext4_find_extent+0x7b2/0x7f0
23:15:42 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x1)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  178.669753][T24987]  ? ext4_ext_search_right+0x246/0x540
[  178.675205][T24987]  ext4_ext_map_blocks+0x1569/0x1f00
[  178.680534][T24987]  ext4_map_blocks+0x70d/0xef0
[  178.684570][T24993] loop3: detected capacity change from 0 to 16
[  178.685283][T24987]  ? ext4_iomap_begin+0x3e2/0x620
[  178.696435][T24987]  ? __cond_resched+0x11/0x40
[  178.701184][T24987]  ext4_iomap_begin+0x4a3/0x620
[  178.706028][T24987]  iomap_apply+0x8d/0x400
[  178.710345][T24987]  ? unlock_page_memcg+0xc3/0xe0
[  178.715278][T24987]  __iomap_dio_rw+0x5af/0xad0
[  178.720016][T24987]  ? __iomap_dio_rw+0xad0/0xad0
[  178.724867][T24987]  iomap_dio_rw+0x30/0x70
[  178.729257][T24987]  ? ext4_file_write_iter+0x4a1/0x11d0
[  178.734711][T24987]  ext4_file_write_iter+0xa4f/0x11d0
[  178.740040][T24987]  ? ext4_file_write_iter+0x4a1/0x11d0
[  178.745520][T24987]  do_iter_readv_writev+0x2cb/0x360
[  178.750855][T24987]  do_iter_write+0x112/0x4c0
[  178.755471][T24987]  ? kmalloc_array+0x2d/0x40
[  178.760125][T24987]  vfs_iter_write+0x4c/0x70
[  178.764625][T24987]  iter_file_splice_write+0x40a/0x750
23:15:42 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
renameat(r0, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00')
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  178.769993][T24987]  ? splice_from_pipe+0xc0/0xc0
[  178.774834][T24987]  direct_splice_actor+0x80/0xa0
[  178.778022][T25018] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  178.779769][T24987]  splice_direct_to_actor+0x345/0x650
[  178.779791][T24987]  ? do_splice_direct+0x170/0x170
[  178.779809][T24987]  do_splice_direct+0xf5/0x170
[  178.802939][T24987]  do_sendfile+0x773/0xda0
[  178.807349][T24987]  __x64_sys_sendfile64+0xf2/0x130
[  178.812450][T24987]  do_syscall_64+0x4a/0x90
[  178.816924][T24987]  entry_SYSCALL_64_after_hwframe+0x44/0xae
23:15:42 executing program 2:
open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046)

23:15:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x1c, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  178.822850][T24987] RIP: 0033:0x4665d9
[  178.826793][T24987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  178.840534][T25024] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  178.846479][T24987] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  178.846504][T24987] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:15:42 executing program 2:
open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046)

23:15:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xf}}, 0x0)

23:15:42 executing program 4 (fault-call:8 fault-nth:30):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x10}}, 0x0)

23:15:42 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:42 executing program 2:
open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046)

[  178.846515][T24987] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  178.878889][T24987] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  178.886854][T24987] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  178.894834][T24987] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:42 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

[  178.956165][T25041] loop5: detected capacity change from 0 to 16
[  178.967284][T25039] FAULT_INJECTION: forcing a failure.
[  178.967284][T25039] name failslab, interval 1, probability 0, space 0, times 0
[  178.979903][T25039] CPU: 0 PID: 25039 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  178.988660][T25039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  178.998705][T25039] Call Trace:
[  179.001994][T25039]  dump_stack+0x137/0x19d
[  179.006331][T25039]  should_fail+0x23c/0x250
[  179.010763][T25039]  ? mempool_alloc_slab+0x16/0x20
[  179.015801][T25039]  __should_failslab+0x81/0x90
[  179.020596][T25039]  should_failslab+0x5/0x20
[  179.025084][T25039]  kmem_cache_alloc+0x46/0x2f0
[  179.029846][T25039]  mempool_alloc_slab+0x16/0x20
[  179.034706][T25039]  ? mempool_free+0x130/0x130
[  179.039400][T25039]  mempool_alloc+0x8c/0x300
[  179.043896][T25039]  ? ext4_es_insert_extent+0x1825/0x19d0
[  179.049506][T25039]  ? ext4_fc_track_range+0x130/0x130
[  179.054761][T25039]  ? iov_iter_alignment+0x77a/0x800
[  179.059991][T25039]  bio_alloc_bioset+0xcc/0x480
[  179.064735][T25039]  iomap_dio_bio_actor+0x511/0xb50
[  179.069823][T25039]  iomap_dio_actor+0x26e/0x3b0
[  179.074581][T25039]  iomap_apply+0x1e2/0x400
[  179.078972][T25039]  __iomap_dio_rw+0x5af/0xad0
[  179.083686][T25039]  ? __iomap_dio_rw+0xad0/0xad0
[  179.088558][T25039]  iomap_dio_rw+0x30/0x70
[  179.092870][T25039]  ? ext4_file_write_iter+0x4a1/0x11d0
[  179.098436][T25039]  ext4_file_write_iter+0xa4f/0x11d0
[  179.103703][T25039]  ? ext4_file_write_iter+0x4a1/0x11d0
[  179.109272][T25039]  do_iter_readv_writev+0x2cb/0x360
[  179.114451][T25039]  do_iter_write+0x112/0x4c0
[  179.119019][T25039]  ? kmalloc_array+0x2d/0x40
[  179.123615][T25039]  vfs_iter_write+0x4c/0x70
[  179.128102][T25039]  iter_file_splice_write+0x40a/0x750
[  179.133498][T25039]  ? splice_from_pipe+0xc0/0xc0
[  179.138319][T25039]  direct_splice_actor+0x80/0xa0
[  179.143227][T25039]  splice_direct_to_actor+0x345/0x650
[  179.148573][T25039]  ? do_splice_direct+0x170/0x170
[  179.153633][T25039]  do_splice_direct+0xf5/0x170
[  179.158375][T25039]  do_sendfile+0x773/0xda0
[  179.162760][T25039]  __x64_sys_sendfile64+0xf2/0x130
[  179.167851][T25039]  do_syscall_64+0x4a/0x90
[  179.172254][T25039]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  179.178118][T25039] RIP: 0033:0x4665d9
[  179.181980][T25039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  179.201566][T25039] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  179.209977][T25039] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  179.217919][T25039] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  179.225863][T25039] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  179.233852][T25039] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  179.241810][T25039] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  179.264856][T25048] loop0: detected capacity change from 0 to 16
[  179.283703][T25067] loop3: detected capacity change from 0 to 16
23:15:42 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

23:15:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x14}}, 0x0)

23:15:42 executing program 4 (fault-call:8 fault-nth:31):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:42 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:42 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000300)={{r0}, "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"})
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:42 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

[  179.354487][T25048] loop0: detected capacity change from 0 to 16
23:15:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x22}}, 0x0)

23:15:42 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

23:15:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x25}}, 0x0)

[  179.439335][T25094] FAULT_INJECTION: forcing a failure.
[  179.439335][T25094] name failslab, interval 1, probability 0, space 0, times 0
[  179.452085][T25094] CPU: 1 PID: 25094 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  179.460839][T25094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  179.462687][T25092] loop5: detected capacity change from 0 to 16
[  179.470875][T25094] Call Trace:
[  179.470883][T25094]  dump_stack+0x137/0x19d
[  179.470906][T25094]  should_fail+0x23c/0x250
[  179.477139][T25103] loop0: detected capacity change from 0 to 16
[  179.480310][T25094]  ? mempool_alloc_slab+0x16/0x20
[  179.480335][T25094]  __should_failslab+0x81/0x90
[  179.504906][T25094]  should_failslab+0x5/0x20
[  179.509446][T25094]  kmem_cache_alloc+0x46/0x2f0
[  179.514205][T25094]  mempool_alloc_slab+0x16/0x20
[  179.519055][T25094]  ? mempool_free+0x130/0x130
[  179.523773][T25094]  mempool_alloc+0x8c/0x300
[  179.528293][T25094]  ? ext4_es_insert_extent+0x1825/0x19d0
[  179.533921][T25094]  ? ext4_fc_track_range+0x130/0x130
[  179.539195][T25094]  ? iov_iter_alignment+0x77a/0x800
[  179.544455][T25094]  bio_alloc_bioset+0xcc/0x480
[  179.549212][T25094]  iomap_dio_bio_actor+0x511/0xb50
[  179.554322][T25094]  iomap_dio_actor+0x26e/0x3b0
[  179.559110][T25094]  iomap_apply+0x1e2/0x400
[  179.563536][T25094]  __iomap_dio_rw+0x5af/0xad0
[  179.568297][T25094]  ? __iomap_dio_rw+0xad0/0xad0
[  179.573145][T25094]  iomap_dio_rw+0x30/0x70
[  179.577472][T25094]  ? ext4_file_write_iter+0x4a1/0x11d0
[  179.582972][T25094]  ext4_file_write_iter+0xa4f/0x11d0
[  179.588324][T25094]  ? ext4_file_write_iter+0x4a1/0x11d0
[  179.593779][T25094]  do_iter_readv_writev+0x2cb/0x360
[  179.598964][T25094]  do_iter_write+0x112/0x4c0
[  179.603530][T25094]  ? kmalloc_array+0x2d/0x40
[  179.608101][T25094]  vfs_iter_write+0x4c/0x70
[  179.612579][T25094]  iter_file_splice_write+0x40a/0x750
[  179.617928][T25094]  ? splice_from_pipe+0xc0/0xc0
[  179.622757][T25094]  direct_splice_actor+0x80/0xa0
[  179.627705][T25094]  splice_direct_to_actor+0x345/0x650
[  179.633064][T25094]  ? do_splice_direct+0x170/0x170
[  179.638091][T25094]  do_splice_direct+0xf5/0x170
[  179.642860][T25094]  do_sendfile+0x773/0xda0
[  179.647407][T25094]  __x64_sys_sendfile64+0xf2/0x130
[  179.652501][T25094]  do_syscall_64+0x4a/0x90
[  179.656891][T25094]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  179.662898][T25094] RIP: 0033:0x4665d9
[  179.666819][T25094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:15:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66090000d5ea98309dab64fdbab15e850000", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:43 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

23:15:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
openat(r2, &(0x7f00000000c0)='./file0/../file0\x00', 0x200002, 0x40)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xc0}}, 0x0)

[  179.686415][T25094] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  179.694854][T25094] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  179.702817][T25094] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  179.710805][T25094] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  179.718759][T25094] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  179.726710][T25094] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:43 executing program 4 (fault-call:8 fault-nth:32):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xec0}}, 0x0)

23:15:43 executing program 2:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  179.791884][T25129] loop0: detected capacity change from 0 to 16
[  179.799853][T25129] FAT-fs (loop0): invalid media value (0x00)
[  179.801076][T25130] loop5: detected capacity change from 0 to 16
[  179.805886][T25129] FAT-fs (loop0): Can't find a valid FAT filesystem
23:15:43 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000400)="ebf8bd132b177f04000000f09d32ee06a7bda262001400000040008000f800000000000000005c1bf4702af966ab864c1909b82cffeb87da701442012d1baf0e01afa5fde913c48433894755f00a949dd627ff7acfa1ac01bcd448ad314c6371429906", 0x69}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x1cd842, 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000000)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
socket$inet_icmp(0x2, 0x2, 0x1)
r3 = openat$cgroup_subtree(r1, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r5, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r5, &(0x7f0000000000)=""/25, 0x19)
fgetxattr(r3, &(0x7f0000000200)=@random={'trusted.', '\'@-(\\\x00'}, &(0x7f0000000300)=""/216, 0xd8)
read(r5, &(0x7f00000001c0)=""/25, 0x19)
write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202e2f66696c653020593a242e2a487b2d2c2a2e5e26207666617400202dbe23213a2076899f9ff84007f6666374002076"], 0x33)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:43 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x7044, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000533000/0x6000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0)
r5 = dup(r2)
syz_io_uring_submit(r3, r4, &(0x7f0000000080), 0xff)
io_uring_enter(r5, 0x6708, 0x0, 0x0, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
open(&(0x7f0000000bc0)='./file0\x00', 0x200800, 0x68)
open$dir(&(0x7f0000001d00)='./file0\x00', 0x80003, 0x169)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1546], 0x60a)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x431400, 0x102, 0xc}, 0x18)
r8 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffdffffffffffffc, 0x5, &(0x7f0000001ac0)=[{&(0x7f0000000940)="7ab941f7b77a9054608f346917433d956f9aad90d66efce3ca457544a2338fc713893f745eecfaa50980336ff9be91a5a4f299c2a170cb0b8f585a8b34c6aa26f6fdea256fb54872a2b947a9117f450c8643487f6725d16968b15d06ef93c1752b9d2e566ee4c2df2c7ab4193f263e7fed1f08e85c2fafb9505e0898b151b8ea30b88f922861d54f93e41f1bf5783cc2202a9cc3c40cd6b6a33da9be7c6283b39af85dc0279dce476b23ca9ba99067b4235d900dfe918b4c871a69426443200360a00ae10a8748a18c10b84ad54568bc09db1f5d8a503963b2", 0xd9, 0x3}, {&(0x7f0000000180)="5f34ec2cd70a3af9b1ac56032d86d3a686b072a079185854a81aa2f7665e6487a28cffbf65cff34e4e01e0116c052186ac2771bf8d90a0470ef8d0df521d43ecf02516fbcda11b2ebff2eb7fc0258e93c0fa735cb5995fd1ba7d", 0x5a, 0x7fffffff}, {&(0x7f0000001d40)="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", 0x10a7, 0x1}, {&(0x7f0000000240)="99537d791e9e5aa2bd81281689215968f80c9b5355d711660266b54f40168c48a379c271aacdc524508d0929c264e7d6cd42998216547925d0e8d73af03b99002f548102b01eb86d0bee7f8a0479747261f5407af8411fb8ea86a1b62bdbc1dbc56392d188ff5eb05b", 0x69, 0x10000}, {&(0x7f0000001a40)="6255d9617a81826cd36b7a07089ce2399eaf5dd5b7a1ad86f2f51be556b37e5b333a58d9152bfabd36949611e826ba9abd2fda0f68f46e6c120ba5901b9eab16e58d8de90aaed5627d1fcbb6646b53b6cc105e18860ae320c4a381518d6813c2e02d9ec3a327f6b8f0c0c7b30782efd9138d3e8a80", 0x75}], 0x308040, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@nocompress}, {@hide}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@overriderock}, {@mode={'mode', 0x3d, 0x80}}, {@map_off}, {@hide}, {@unhide}, {@session={'session', 0x3d, 0x19}}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@euid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'iocharset'}}, {@obj_user={'obj_user', 0x3d, '@*@\x02![,^'}}]})
write$binfmt_script(r8, &(0x7f0000001c40)={'#! ', './bus', [{0x20, '\\'}], 0xa, "e5d3c96dff879d6c8f398390a391514aa272cadc00ef65cf431f4ca7370c15edbde72d141f78d2277a8316401109beb637556042189da114cc00f3efe563e120f54047c83c2485e5745a8ef007946bc79d988a88c58b87afb053e1c9ccc8fc3fbb44caa653576287ea6ca7b7b73a3b5ab4c4d6b15d2c0d"}, 0x82)

[  179.874855][T25148] loop3: detected capacity change from 0 to 16
[  179.909784][T25151] FAULT_INJECTION: forcing a failure.
[  179.909784][T25151] name failslab, interval 1, probability 0, space 0, times 0
23:15:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x33fe0}}, 0x0)

[  179.922425][T25151] CPU: 1 PID: 25151 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  179.931169][T25151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  179.941283][T25151] Call Trace:
[  179.944550][T25151]  dump_stack+0x137/0x19d
[  179.948882][T25151]  should_fail+0x23c/0x250
[  179.953288][T25151]  ? mempool_alloc_slab+0x16/0x20
[  179.958316][T25151]  __should_failslab+0x81/0x90
[  179.963116][T25151]  should_failslab+0x5/0x20
[  179.967353][T25163] loop2: detected capacity change from 0 to 16
23:15:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2000046c}}, 0x0)

[  179.967603][T25151]  kmem_cache_alloc+0x46/0x2f0
[  179.978487][T25151]  mempool_alloc_slab+0x16/0x20
[  179.983349][T25151]  ? mempool_free+0x130/0x130
[  179.988043][T25151]  mempool_alloc+0x8c/0x300
[  179.992567][T25151]  ? __getblk_gfp+0x3f/0x590
[  179.997150][T25151]  ? find_get_pages_range_tag+0x33e/0x390
[  180.002890][T25151]  bio_alloc_bioset+0xcc/0x480
[  180.007684][T25151]  ? __ext4_get_inode_loc+0x3ce/0x920
[  180.013130][T25151]  submit_bh_wbc+0x130/0x330
[  180.017714][T25151]  __sync_dirty_buffer+0x136/0x1e0
[  180.022827][T25151]  sync_dirty_buffer+0x16/0x20
[  180.027671][T25151]  ext4_write_inode+0x285/0x390
[  180.032524][T25151]  ? do_writepages+0x110/0x150
[  180.037287][T25151]  write_inode+0x8c/0x180
[  180.041604][T25151]  __writeback_single_inode+0x2a2/0x450
[  180.047222][T25151]  writeback_single_inode+0x177/0x590
[  180.052596][T25151]  ? sync_mapping_buffers+0x33b/0x8b0
[  180.057956][T25151]  sync_inode_metadata+0x57/0x80
[  180.062903][T25151]  ext4_sync_file+0x359/0x670
[  180.067580][T25151]  ? tsan.module_ctor+0x10/0x10
[  180.072409][T25151]  vfs_fsync_range+0x107/0x120
[  180.077150][T25151]  iomap_dio_complete+0x2d5/0x3c0
[  180.082298][T25151]  iomap_dio_rw+0x4e/0x70
[  180.086704][T25151]  ? ext4_file_write_iter+0x4a1/0x11d0
[  180.092163][T25151]  ext4_file_write_iter+0xa4f/0x11d0
[  180.097434][T25151]  ? ext4_file_write_iter+0x4a1/0x11d0
[  180.102891][T25151]  do_iter_readv_writev+0x2cb/0x360
[  180.108067][T25151]  do_iter_write+0x112/0x4c0
[  180.112634][T25151]  ? kmalloc_array+0x2d/0x40
[  180.117199][T25151]  vfs_iter_write+0x4c/0x70
[  180.121674][T25151]  iter_file_splice_write+0x40a/0x750
[  180.127044][T25151]  ? splice_from_pipe+0xc0/0xc0
[  180.131871][T25151]  direct_splice_actor+0x80/0xa0
[  180.136831][T25151]  splice_direct_to_actor+0x345/0x650
[  180.142231][T25151]  ? do_splice_direct+0x170/0x170
[  180.147278][T25151]  do_splice_direct+0xf5/0x170
[  180.152025][T25151]  do_sendfile+0x773/0xda0
[  180.156454][T25151]  __x64_sys_sendfile64+0xf2/0x130
[  180.161587][T25151]  do_syscall_64+0x4a/0x90
[  180.165975][T25151]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  180.171839][T25151] RIP: 0033:0x4665d9
[  180.175786][T25151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  180.195378][T25151] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  180.203830][T25151] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  180.211828][T25151] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  180.219773][T25151] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  180.227731][T25151] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  180.235674][T25151] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:43 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:43 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
creat(&(0x7f00000001c0)='./bus\x00', 0x4)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './bus', [{0x20, '#*-\\'}, {0x20, 'vfat\x00'}], 0xa, "24dcc5"}, 0x17)
readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/4096, 0x1000)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:43 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = syz_io_uring_setup(0x7044, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000533000/0x6000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0xa89a1c1bd660819, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0)
r5 = dup(r2)
syz_io_uring_submit(r3, r4, &(0x7f0000000080), 0xff)
io_uring_enter(r5, 0x6708, 0x0, 0x0, 0x0, 0x0)
r6 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
open(&(0x7f0000000bc0)='./file0\x00', 0x200800, 0x68)
open$dir(&(0x7f0000001d00)='./file0\x00', 0x80003, 0x169)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1546], 0x60a)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x431400, 0x102, 0xc}, 0x18)
r8 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xffdffffffffffffc, 0x5, &(0x7f0000001ac0)=[{&(0x7f0000000940)="7ab941f7b77a9054608f346917433d956f9aad90d66efce3ca457544a2338fc713893f745eecfaa50980336ff9be91a5a4f299c2a170cb0b8f585a8b34c6aa26f6fdea256fb54872a2b947a9117f450c8643487f6725d16968b15d06ef93c1752b9d2e566ee4c2df2c7ab4193f263e7fed1f08e85c2fafb9505e0898b151b8ea30b88f922861d54f93e41f1bf5783cc2202a9cc3c40cd6b6a33da9be7c6283b39af85dc0279dce476b23ca9ba99067b4235d900dfe918b4c871a69426443200360a00ae10a8748a18c10b84ad54568bc09db1f5d8a503963b2", 0xd9, 0x3}, {&(0x7f0000000180)="5f34ec2cd70a3af9b1ac56032d86d3a686b072a079185854a81aa2f7665e6487a28cffbf65cff34e4e01e0116c052186ac2771bf8d90a0470ef8d0df521d43ecf02516fbcda11b2ebff2eb7fc0258e93c0fa735cb5995fd1ba7d", 0x5a, 0x7fffffff}, {&(0x7f0000001d40)="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", 0x10a7, 0x1}, {&(0x7f0000000240)="99537d791e9e5aa2bd81281689215968f80c9b5355d711660266b54f40168c48a379c271aacdc524508d0929c264e7d6cd42998216547925d0e8d73af03b99002f548102b01eb86d0bee7f8a0479747261f5407af8411fb8ea86a1b62bdbc1dbc56392d188ff5eb05b", 0x69, 0x10000}, {&(0x7f0000001a40)="6255d9617a81826cd36b7a07089ce2399eaf5dd5b7a1ad86f2f51be556b37e5b333a58d9152bfabd36949611e826ba9abd2fda0f68f46e6c120ba5901b9eab16e58d8de90aaed5627d1fcbb6646b53b6cc105e18860ae320c4a381518d6813c2e02d9ec3a327f6b8f0c0c7b30782efd9138d3e8a80", 0x75}], 0x308040, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@nocompress}, {@hide}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@overriderock}, {@mode={'mode', 0x3d, 0x80}}, {@map_off}, {@hide}, {@unhide}, {@session={'session', 0x3d, 0x19}}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@euid_lt}, {@smackfsroot={'smackfsroot', 0x3d, 'iocharset'}}, {@obj_user={'obj_user', 0x3d, '@*@\x02![,^'}}]})
write$binfmt_script(r8, &(0x7f0000001c40)={'#! ', './bus', [{0x20, '\\'}], 0xa, "e5d3c96dff879d6c8f398390a391514aa272cadc00ef65cf431f4ca7370c15edbde72d141f78d2277a8316401109beb637556042189da114cc00f3efe563e120f54047c83c2485e5745a8ef007946bc79d988a88c58b87afb053e1c9ccc8fc3fbb44caa653576287ea6ca7b7b73a3b5ab4c4d6b15d2c0d"}, 0x82)

23:15:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x7ffff000}}, 0x0)

23:15:43 executing program 4 (fault-call:8 fault-nth:33):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

[  180.315555][T25129] loop0: detected capacity change from 0 to 16
[  180.326842][T25129] FAT-fs (loop0): invalid media value (0x00)
[  180.332918][T25129] FAT-fs (loop0): Can't find a valid FAT filesystem
23:15:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xfffffdef}}, 0x0)

[  180.370023][T25190] loop5: detected capacity change from 0 to 16
[  180.378593][T25190] FAT-fs (loop5): invalid media value (0x14)
[  180.384596][T25190] FAT-fs (loop5): Can't find a valid FAT filesystem
[  180.402939][T25202] loop0: detected capacity change from 0 to 16
[  180.403046][T25200] loop2: detected capacity change from 0 to 16
[  180.422976][T25194] loop3: detected capacity change from 0 to 16
[  180.428400][T25205] FAULT_INJECTION: forcing a failure.
[  180.428400][T25205] name failslab, interval 1, probability 0, space 0, times 0
[  180.441714][T25205] CPU: 1 PID: 25205 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  180.450457][T25205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  180.460487][T25205] Call Trace:
[  180.463748][T25205]  dump_stack+0x137/0x19d
[  180.468143][T25205]  should_fail+0x23c/0x250
[  180.472636][T25205]  ? kmalloc_array+0x2d/0x40
[  180.477204][T25205]  __should_failslab+0x81/0x90
[  180.481952][T25205]  should_failslab+0x5/0x20
[  180.486477][T25205]  __kmalloc+0x66/0x340
[  180.490615][T25205]  ? splice_from_pipe+0xc0/0xc0
[  180.495504][T25205]  kmalloc_array+0x2d/0x40
[  180.499896][T25205]  iter_file_splice_write+0xc1/0x750
[  180.505185][T25205]  ? atime_needs_update+0x2ba/0x390
[  180.510368][T25205]  ? ext4_file_read_iter+0x1db/0x290
[  180.515650][T25205]  ? generic_file_splice_read+0x284/0x310
[  180.521354][T25205]  ? splice_from_pipe+0xc0/0xc0
[  180.526244][T25205]  direct_splice_actor+0x80/0xa0
[  180.531165][T25205]  splice_direct_to_actor+0x345/0x650
[  180.536518][T25205]  ? do_splice_direct+0x170/0x170
[  180.541557][T25205]  do_splice_direct+0xf5/0x170
[  180.546298][T25205]  do_sendfile+0x773/0xda0
[  180.550738][T25205]  __x64_sys_sendfile64+0xf2/0x130
[  180.555824][T25205]  do_syscall_64+0x4a/0x90
[  180.560229][T25205]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  180.566100][T25205] RIP: 0033:0x4665d9
[  180.569965][T25205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  180.589636][T25205] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  180.598025][T25205] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  180.606043][T25205] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  180.613991][T25205] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
23:15:43 executing program 4 (fault-call:8 fault-nth:34):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x3}, 0x0)

[  180.621998][T25205] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  180.629947][T25205] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  180.710318][T25228] FAULT_INJECTION: forcing a failure.
[  180.710318][T25228] name failslab, interval 1, probability 0, space 0, times 0
[  180.722967][T25228] CPU: 0 PID: 25228 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  180.731709][T25228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  180.741752][T25228] Call Trace:
[  180.745053][T25228]  dump_stack+0x137/0x19d
[  180.749464][T25228]  should_fail+0x23c/0x250
[  180.753882][T25228]  __should_failslab+0x81/0x90
[  180.758641][T25228]  ? __iomap_dio_rw+0xf1/0xad0
[  180.763501][T25228]  should_failslab+0x5/0x20
[  180.767996][T25228]  kmem_cache_alloc_trace+0x49/0x310
[  180.773315][T25228]  ? __brelse+0x2c/0x50
[  180.777466][T25228]  __iomap_dio_rw+0xf1/0xad0
[  180.782121][T25228]  ? ext4_orphan_add+0x7a/0x5f0
[  180.786977][T25228]  ? file_update_time+0x1bd/0x3e0
[  180.791996][T25228]  iomap_dio_rw+0x30/0x70
[  180.796315][T25228]  ? ext4_file_write_iter+0x4a1/0x11d0
[  180.801772][T25228]  ext4_file_write_iter+0xa4f/0x11d0
[  180.804438][T25190] loop5: detected capacity change from 0 to 16
[  180.807119][T25228]  ? ext4_file_write_iter+0x4a1/0x11d0
[  180.818732][T25228]  do_iter_readv_writev+0x2cb/0x360
[  180.820901][T25190] FAT-fs (loop5): Unrecognized mount option "cgroup.subtree_control" or missing value
[  180.823924][T25228]  do_iter_write+0x112/0x4c0
[  180.823942][T25228]  ? kmalloc_array+0x2d/0x40
[  180.842704][T25228]  vfs_iter_write+0x4c/0x70
[  180.847220][T25228]  iter_file_splice_write+0x40a/0x750
[  180.852569][T25228]  ? splice_from_pipe+0xc0/0xc0
[  180.857396][T25228]  direct_splice_actor+0x80/0xa0
[  180.862345][T25228]  splice_direct_to_actor+0x345/0x650
[  180.867702][T25228]  ? do_splice_direct+0x170/0x170
[  180.872718][T25228]  do_splice_direct+0xf5/0x170
[  180.877471][T25228]  do_sendfile+0x773/0xda0
[  180.881896][T25228]  __x64_sys_sendfile64+0xf2/0x130
[  180.886998][T25228]  do_syscall_64+0x4a/0x90
[  180.891400][T25228]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  180.897360][T25228] RIP: 0033:0x4665d9
[  180.901268][T25228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  180.920859][T25228] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  180.929275][T25228] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  180.937276][T25228] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  180.937289][T25228] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  180.953215][T25228] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
23:15:44 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x640100, 0x80)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:44 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000280)='./file0\x00', 0x14d842, 0x14c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0xb)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000001c0)=<r2=>0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x3}, [{0x2, 0x2, r2}], {0x4, 0x5}, [], {0x10, 0x5}}, 0x2c, 0x1)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/226, 0xe2}], 0x1, 0x4, 0x80)

23:15:44 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:44 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x8}, 0x0)

23:15:44 executing program 4 (fault-call:8 fault-nth:35):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

[  180.961180][T25228] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x9}, 0x0)

[  181.034989][T25258] loop0: detected capacity change from 0 to 16
[  181.048184][T25262] loop3: detected capacity change from 0 to 16
[  181.067594][T25256] FAULT_INJECTION: forcing a failure.
[  181.067594][T25256] name failslab, interval 1, probability 0, space 0, times 0
[  181.080219][T25256] CPU: 1 PID: 25256 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  181.080957][T25264] loop5: detected capacity change from 0 to 16
[  181.088984][T25256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  181.088996][T25256] Call Trace:
[  181.089003][T25256]  dump_stack+0x137/0x19d
[  181.112858][T25256]  should_fail+0x23c/0x250
[  181.117332][T25256]  __should_failslab+0x81/0x90
[  181.122100][T25256]  ? __iomap_dio_rw+0xf1/0xad0
[  181.126851][T25256]  should_failslab+0x5/0x20
[  181.131347][T25256]  kmem_cache_alloc_trace+0x49/0x310
[  181.136651][T25256]  __iomap_dio_rw+0xf1/0xad0
[  181.141244][T25256]  ? __mark_inode_dirty+0x49c/0x6c0
[  181.146428][T25256]  ? __mnt_drop_write_file+0x5a/0x60
[  181.151696][T25256]  ? ext4_orphan_add+0x7a/0x5f0
[  181.156537][T25256]  ? file_update_time+0x3ae/0x3e0
[  181.161599][T25256]  iomap_dio_rw+0x30/0x70
[  181.165923][T25256]  ? ext4_file_write_iter+0x4a1/0x11d0
[  181.171459][T25256]  ext4_file_write_iter+0xa4f/0x11d0
[  181.176732][T25256]  ? ext4_file_write_iter+0x4a1/0x11d0
[  181.182170][T25256]  do_iter_readv_writev+0x2cb/0x360
[  181.187346][T25256]  do_iter_write+0x112/0x4c0
[  181.191977][T25256]  ? kmalloc_array+0x2d/0x40
[  181.196565][T25256]  vfs_iter_write+0x4c/0x70
[  181.201066][T25256]  iter_file_splice_write+0x40a/0x750
[  181.206420][T25256]  ? splice_from_pipe+0xc0/0xc0
[  181.211247][T25256]  direct_splice_actor+0x80/0xa0
[  181.216161][T25256]  splice_direct_to_actor+0x345/0x650
[  181.221514][T25256]  ? do_splice_direct+0x170/0x170
[  181.226516][T25256]  do_splice_direct+0xf5/0x170
[  181.231276][T25256]  do_sendfile+0x773/0xda0
[  181.235679][T25256]  __x64_sys_sendfile64+0xf2/0x130
[  181.240765][T25256]  do_syscall_64+0x4a/0x90
[  181.245210][T25256]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  181.251090][T25256] RIP: 0033:0x4665d9
[  181.254973][T25256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  181.274559][T25256] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
23:15:44 executing program 2:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:44 executing program 4 (fault-call:8 fault-nth:36):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1c}, 0x0)

[  181.282965][T25256] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  181.290911][T25256] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  181.298855][T25256] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  181.306812][T25256] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  181.314788][T25256] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x300}, 0x0)

[  181.383160][T25287] loop2: detected capacity change from 0 to 16
[  181.414603][T25288] FAULT_INJECTION: forcing a failure.
[  181.414603][T25288] name failslab, interval 1, probability 0, space 0, times 0
[  181.427346][T25288] CPU: 1 PID: 25288 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  181.436142][T25288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  181.446270][T25288] Call Trace:
[  181.449606][T25288]  dump_stack+0x137/0x19d
[  181.453951][T25288]  should_fail+0x23c/0x250
[  181.458341][T25288]  ? kcalloc+0x32/0x50
[  181.462396][T25288]  __should_failslab+0x81/0x90
[  181.467182][T25288]  should_failslab+0x5/0x20
[  181.471795][T25288]  __kmalloc+0x66/0x340
[  181.475982][T25288]  ? sbitmap_get+0x387/0x410
[  181.480564][T25288]  kcalloc+0x32/0x50
[  181.484445][T25288]  ext4_find_extent+0x21c/0x7f0
[  181.489398][T25288]  ? __sbitmap_queue_get+0x11/0x20
[  181.494488][T25288]  ext4_ext_map_blocks+0xd9/0x1f00
[  181.499657][T25288]  ? blk_mq_get_tag+0x51c/0x610
[  181.504511][T25288]  ? ktime_get+0x1b0/0x1e0
[  181.508964][T25288]  ? __down_write_common+0x45/0x890
[  181.514137][T25288]  ? blk_flush_complete_seq+0x4c6/0x660
[  181.519658][T25288]  ? percpu_counter_add_batch+0x69/0xd0
[  181.525180][T25288]  ? ext4_es_lookup_extent+0x36b/0x490
[  181.530712][T25288]  ext4_map_blocks+0x70d/0xef0
[  181.535455][T25288]  ? ext4_iomap_begin+0x3e2/0x620
[  181.540466][T25288]  ? __cond_resched+0x11/0x40
[  181.545121][T25288]  ext4_iomap_begin+0x4a3/0x620
[  181.549948][T25288]  iomap_apply+0x8d/0x400
[  181.554310][T25288]  __iomap_dio_rw+0x5af/0xad0
[  181.559000][T25288]  ? __iomap_dio_rw+0xad0/0xad0
[  181.563844][T25288]  iomap_dio_rw+0x30/0x70
[  181.568168][T25288]  ? ext4_file_write_iter+0x4a1/0x11d0
[  181.573607][T25288]  ext4_file_write_iter+0xa4f/0x11d0
[  181.578900][T25288]  ? ext4_file_write_iter+0x4a1/0x11d0
[  181.584352][T25288]  do_iter_readv_writev+0x2cb/0x360
[  181.589528][T25288]  do_iter_write+0x112/0x4c0
[  181.594093][T25288]  ? kmalloc_array+0x2d/0x40
[  181.598691][T25288]  vfs_iter_write+0x4c/0x70
[  181.603168][T25288]  iter_file_splice_write+0x40a/0x750
[  181.608515][T25288]  ? splice_from_pipe+0xc0/0xc0
[  181.613365][T25288]  direct_splice_actor+0x80/0xa0
[  181.618350][T25288]  splice_direct_to_actor+0x345/0x650
[  181.623692][T25288]  ? do_splice_direct+0x170/0x170
[  181.628687][T25288]  do_splice_direct+0xf5/0x170
[  181.633520][T25288]  do_sendfile+0x773/0xda0
[  181.637911][T25288]  __x64_sys_sendfile64+0xf2/0x130
[  181.643029][T25288]  do_syscall_64+0x4a/0x90
[  181.647420][T25288]  ? irqentry_exit_to_user_mode+0x5/0x20
[  181.653059][T25288]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  181.659000][T25288] RIP: 0033:0x4665d9
[  181.662869][T25288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  181.682542][T25288] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  181.690952][T25288] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  181.698963][T25288] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  181.706919][T25288] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  181.714864][T25288] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  181.722811][T25288] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x2}, 0x0)

23:15:45 executing program 0:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2000)
fchownat(r0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, r1, 0x400)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
chdir(&(0x7f0000000140)='./bus\x00')
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
r5 = fcntl$dupfd(r3, 0x0, r0)
openat(r5, &(0x7f00000003c0)='./bus\x00', 0x200681, 0x3)
getpeername(r4, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000240)=0x80)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x4c0000, 0x14)

23:15:45 executing program 4 (fault-call:8 fault-nth:37):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:45 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000, 0x0, &(0x7f0000000200), 0x10000, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x68a42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  181.826847][T25323] loop3: detected capacity change from 0 to 16
[  181.866061][T25334] loop0: detected capacity change from 0 to 16
[  181.874515][T25337] loop5: detected capacity change from 0 to 64
[  181.876085][T25322] FAULT_INJECTION: forcing a failure.
[  181.876085][T25322] name failslab, interval 1, probability 0, space 0, times 0
[  181.885636][T25337] FAT-fs (loop5): bogus number of reserved sectors
[  181.893306][T25322] CPU: 1 PID: 25322 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  181.899777][T25337] FAT-fs (loop5): Can't find a valid FAT filesystem
[  181.908492][T25322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  181.908504][T25322] Call Trace:
[  181.908510][T25322]  dump_stack+0x137/0x19d
[  181.932669][T25322]  should_fail+0x23c/0x250
[  181.937163][T25322]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  181.942508][T25322]  __should_failslab+0x81/0x90
[  181.947282][T25322]  should_failslab+0x5/0x20
[  181.951788][T25322]  kmem_cache_alloc+0x46/0x2f0
[  181.956541][T25322]  ext4_mb_new_blocks+0x2e7/0x1f90
[  181.961726][T25322]  ? ext4_find_extent+0x7b2/0x7f0
[  181.966745][T25322]  ? ext4_ext_search_right+0x246/0x540
[  181.972201][T25322]  ext4_ext_map_blocks+0x1569/0x1f00
23:15:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x3}, 0x0)

23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x4}, 0x0)

23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x5}, 0x0)

23:15:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  181.977554][T25322]  ? ext4_es_lookup_extent+0x36b/0x490
[  181.983007][T25322]  ext4_map_blocks+0x70d/0xef0
[  181.987757][T25322]  ? ext4_iomap_begin+0x3e2/0x620
[  181.992785][T25322]  ? __cond_resched+0x11/0x40
[  181.997450][T25322]  ext4_iomap_begin+0x4a3/0x620
[  182.002330][T25322]  iomap_apply+0x8d/0x400
[  182.006646][T25322]  ? unlock_page_memcg+0xc3/0xe0
[  182.011580][T25322]  __iomap_dio_rw+0x5af/0xad0
[  182.016254][T25322]  ? __iomap_dio_rw+0xad0/0xad0
[  182.021135][T25322]  iomap_dio_rw+0x30/0x70
23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x6}, 0x0)

[  182.025465][T25322]  ? ext4_file_write_iter+0x4a1/0x11d0
[  182.030927][T25322]  ext4_file_write_iter+0xa4f/0x11d0
[  182.036250][T25322]  ? ext4_file_write_iter+0x4a1/0x11d0
[  182.041700][T25322]  do_iter_readv_writev+0x2cb/0x360
[  182.046930][T25322]  do_iter_write+0x112/0x4c0
[  182.051526][T25322]  ? kmalloc_array+0x2d/0x40
[  182.056163][T25322]  vfs_iter_write+0x4c/0x70
[  182.056182][T25322]  iter_file_splice_write+0x40a/0x750
[  182.056201][T25322]  ? splice_from_pipe+0xc0/0xc0
[  182.056229][T25322]  direct_splice_actor+0x80/0xa0
[  182.056242][T25322]  splice_direct_to_actor+0x345/0x650
[  182.056256][T25322]  ? do_splice_direct+0x170/0x170
[  182.056324][T25322]  do_splice_direct+0xf5/0x170
[  182.056340][T25322]  do_sendfile+0x773/0xda0
[  182.056357][T25322]  __x64_sys_sendfile64+0xf2/0x130
[  182.056373][T25322]  do_syscall_64+0x4a/0x90
[  182.056394][T25322]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  182.056487][T25322] RIP: 0033:0x4665d9
[  182.056497][T25322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  182.056509][T25322] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  182.056522][T25322] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  182.056531][T25322] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
23:15:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:45 executing program 4 (fault-call:8 fault-nth:38):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(0x0, 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  182.056539][T25322] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  182.056549][T25322] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  182.056560][T25322] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  182.079353][T25337] loop5: detected capacity change from 0 to 64
23:15:45 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
open(&(0x7f0000000140)='./file0\x00', 0x410200, 0x80)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = creat(&(0x7f0000000240)='./bus\x00', 0x80)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x86000, 0x0)
sendfile(r1, r0, &(0x7f0000000280)=0x60, 0x2)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
openat(r3, &(0x7f00000003c0)='./bus\x00', 0x43, 0x40)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001080)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000000440)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25150000004000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030003000000140002007465616d30000000000000000000000008000300000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="20000180080003000100000014000200776c616e300000000000000000000000400001801400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000004400018008000300030000001400020069703665727370616e30000000000000140002006970766c616e30000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="fac6444b9120a11ed4461aa3290989e6cb643e35a07c9fa947991386a94368dcd6d68d474e708c787cf9ba1fbfcc81156835b0a7150946e53b967d9de62ee8c4787c5069db6042b92999b46bffaa13cc9f"], 0x104}, 0x1, 0x0, 0x0, 0x20048000}, 0x4008010)
read(r4, &(0x7f0000000000)=""/25, 0x19)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r5, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r5, &(0x7f0000000000)=""/25, 0x19)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000006, 0x4000010, r5, 0x6b025000)
recvfrom$unix(r4, &(0x7f0000000300)=""/164, 0xa4, 0x30000, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
open$dir(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x23)

23:15:45 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x4108c0, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x480801, 0xa0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000180)={{0x80, 0x3}, {0x40, 0x74}, 0x5b22, 0x1, 0x15})
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x7}, 0x0)

23:15:45 executing program 2:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  182.237470][T25380] FAULT_INJECTION: forcing a failure.
[  182.237470][T25380] name failslab, interval 1, probability 0, space 0, times 0
[  182.250083][T25380] CPU: 1 PID: 25380 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  182.258831][T25380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  182.268874][T25380] Call Trace:
[  182.272163][T25380]  dump_stack+0x137/0x19d
[  182.276488][T25380]  should_fail+0x23c/0x250
[  182.280958][T25380]  ? mempool_alloc_slab+0x16/0x20
23:15:45 executing program 2:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9}, 0x0)

[  182.285984][T25380]  __should_failslab+0x81/0x90
[  182.290758][T25380]  should_failslab+0x5/0x20
[  182.295341][T25380]  kmem_cache_alloc+0x46/0x2f0
[  182.300092][T25380]  mempool_alloc_slab+0x16/0x20
[  182.304978][T25380]  ? mempool_free+0x130/0x130
[  182.309758][T25380]  mempool_alloc+0x8c/0x300
[  182.314252][T25380]  ? ext4_es_insert_extent+0x1825/0x19d0
[  182.315001][T25384] loop3: detected capacity change from 0 to 16
[  182.319948][T25380]  ? ext4_fc_track_range+0x130/0x130
[  182.319968][T25380]  ? iov_iter_alignment+0x77a/0x800
[  182.336530][T25380]  bio_alloc_bioset+0xcc/0x480
[  182.341376][T25380]  iomap_dio_bio_actor+0x511/0xb50
[  182.346543][T25380]  iomap_dio_actor+0x26e/0x3b0
[  182.351302][T25380]  iomap_apply+0x1e2/0x400
[  182.355720][T25380]  __iomap_dio_rw+0x5af/0xad0
[  182.360372][T25380]  ? __iomap_dio_rw+0xad0/0xad0
[  182.365249][T25380]  iomap_dio_rw+0x30/0x70
[  182.369555][T25380]  ? ext4_file_write_iter+0x4a1/0x11d0
[  182.375020][T25380]  ext4_file_write_iter+0xa4f/0x11d0
[  182.380287][T25380]  ? ext4_file_write_iter+0x4a1/0x11d0
23:15:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(0x0, 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  182.385775][T25380]  do_iter_readv_writev+0x2cb/0x360
[  182.390964][T25380]  do_iter_write+0x112/0x4c0
[  182.395640][T25380]  ? kmalloc_array+0x2d/0x40
[  182.400207][T25380]  vfs_iter_write+0x4c/0x70
[  182.404693][T25380]  iter_file_splice_write+0x40a/0x750
[  182.410144][T25380]  ? splice_from_pipe+0xc0/0xc0
[  182.410169][T25380]  direct_splice_actor+0x80/0xa0
[  182.410216][T25380]  splice_direct_to_actor+0x345/0x650
[  182.410226][T25380]  ? do_splice_direct+0x170/0x170
[  182.410237][T25380]  do_splice_direct+0xf5/0x170
23:15:45 executing program 2:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:45 executing program 4 (fault-call:8 fault-nth:39):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

[  182.410247][T25380]  do_sendfile+0x773/0xda0
23:15:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:45 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x300}, 0x0)

23:15:45 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(0x0, 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  182.410257][T25380]  __x64_sys_sendfile64+0xf2/0x130
[  182.410267][T25380]  do_syscall_64+0x4a/0x90
[  182.410281][T25380]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  182.410294][T25380] RIP: 0033:0x4665d9
[  182.410301][T25380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  182.410310][T25380] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  182.410320][T25380] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  182.410326][T25380] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  182.410348][T25380] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  182.410354][T25380] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  182.410360][T25380] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  182.448348][T25389] loop0: detected capacity change from 0 to 16
[  182.489834][T25410] loop5: detected capacity change from 0 to 16
[  182.515980][T25415] loop3: detected capacity change from 0 to 16
[  182.588990][T25429] FAULT_INJECTION: forcing a failure.
[  182.588990][T25429] name failslab, interval 1, probability 0, space 0, times 0
[  182.654252][T25429] CPU: 1 PID: 25429 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  182.654294][T25429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  182.654300][T25429] Call Trace:
[  182.654305][T25429]  dump_stack+0x137/0x19d
[  182.654319][T25429]  should_fail+0x23c/0x250
[  182.654330][T25429]  ? mempool_alloc_slab+0x16/0x20
[  182.654416][T25429]  __should_failslab+0x81/0x90
[  182.654430][T25429]  should_failslab+0x5/0x20
[  182.654440][T25429]  kmem_cache_alloc+0x46/0x2f0
[  182.654456][T25429]  ? chksum_update+0x39/0x50
[  182.654475][T25429]  mempool_alloc_slab+0x16/0x20
[  182.654533][T25429]  ? mempool_free+0x130/0x130
[  182.654544][T25429]  mempool_alloc+0x8c/0x300
[  182.654555][T25429]  ? __getblk_gfp+0x3f/0x590
[  182.654566][T25429]  ? __perf_event_task_sched_out+0xce0/0xd30
[  182.654580][T25429]  sg_pool_alloc+0x74/0x90
[  182.654589][T25429]  __sg_alloc_table+0xce/0x290
[  182.654672][T25429]  sg_alloc_table_chained+0xaf/0x140
[  182.654688][T25429]  ? sg_alloc_table_chained+0x140/0x140
[  182.654704][T25429]  scsi_alloc_sgtables+0x180/0x500
[  182.654722][T25429]  sd_init_command+0x935/0x15f0
[  182.654784][T25429]  scsi_queue_rq+0x10e0/0x15a0
[  182.654797][T25429]  blk_mq_dispatch_rq_list+0x628/0x10b0
[  182.654881][T25429]  ? deadline_remove_request+0x167/0x180
[  182.654910][T25429]  ? dd_dispatch_request+0x321/0x3d0
[  182.654919][T25429]  blk_mq_do_dispatch_sched+0x3cb/0x660
[  182.654932][T25429]  __blk_mq_sched_dispatch_requests+0x21e/0x2c0
[  182.654945][T25429]  blk_mq_sched_dispatch_requests+0x9f/0x110
[  182.655006][T25429]  __blk_mq_run_hw_queue+0xbc/0x140
[  182.655016][T25429]  __blk_mq_delay_run_hw_queue+0x163/0x2f0
[  182.655030][T25429]  ? dd_insert_request+0x255/0x330
[  182.655040][T25429]  blk_mq_run_hw_queue+0x22c/0x250
[  182.655192][T25429]  ? dd_finish_request+0x10/0x10
[  182.655202][T25429]  blk_mq_sched_insert_requests+0x13f/0x200
[  182.655214][T25429]  blk_mq_flush_plug_list+0x2f5/0x3c0
[  182.655236][T25429]  blk_flush_plug_list+0x235/0x260
[  182.655256][T25429]  blk_finish_plug+0x44/0x60
[  182.655272][T25429]  __iomap_dio_rw+0x780/0xad0
[  182.655365][T25429]  iomap_dio_rw+0x30/0x70
[  182.655448][T25429]  ? ext4_file_write_iter+0x4a1/0x11d0
[  182.655460][T25429]  ext4_file_write_iter+0xa4f/0x11d0
[  182.655511][T25429]  ? ext4_file_write_iter+0x4a1/0x11d0
[  182.655672][T25429]  do_iter_readv_writev+0x2cb/0x360
[  182.655689][T25429]  do_iter_write+0x112/0x4c0
[  182.655701][T25429]  ? kmalloc_array+0x2d/0x40
[  182.655716][T25429]  vfs_iter_write+0x4c/0x70
[  182.655730][T25429]  iter_file_splice_write+0x40a/0x750
[  182.655747][T25429]  ? splice_from_pipe+0xc0/0xc0
[  182.655762][T25429]  direct_splice_actor+0x80/0xa0
[  182.655856][T25429]  splice_direct_to_actor+0x345/0x650
[  182.655867][T25429]  ? do_splice_direct+0x170/0x170
[  182.655877][T25429]  do_splice_direct+0xf5/0x170
[  182.655887][T25429]  do_sendfile+0x773/0xda0
[  182.655896][T25429]  __x64_sys_sendfile64+0xf2/0x130
[  182.655905][T25429]  do_syscall_64+0x4a/0x90
[  182.655931][T25429]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  182.655943][T25429] RIP: 0033:0x4665d9
[  182.655951][T25429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  182.655960][T25429] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  182.656046][T25429] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:15:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  182.656053][T25429] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  182.656059][T25429] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  182.656065][T25429] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  182.656071][T25429] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  182.711860][T25445] loop3: detected capacity change from 0 to 16
[  183.073434][T25389] loop0: detected capacity change from 0 to 16
[  183.081533][T25389] FAT-fs (loop0): Unrecognized mount option "€@t"[" or missing value
23:15:46 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r0, &(0x7f0000000000)=""/25, 0x19)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES64=r0])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x3da}, 0x0)

23:15:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:46 executing program 4 (fault-call:8 fault-nth:40):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  183.133217][T25465] loop5: detected capacity change from 0 to 16
23:15:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:46 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  183.225201][T25482] loop5: detected capacity change from 0 to 16
[  183.241077][T25485] loop3: detected capacity change from 0 to 16
[  183.259459][T25488] loop0: detected capacity change from 0 to 16
23:15:46 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x500}, 0x0)

23:15:46 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r1 = epoll_create1(0x0)
read(r1, &(0x7f0000000180)=""/128, 0x80)
open(&(0x7f0000000140)='./file0\x00', 0x101080, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0xfb)

23:15:46 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  183.273360][T25488] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿ" or missing value
[  183.274933][T25483] FAULT_INJECTION: forcing a failure.
[  183.274933][T25483] name failslab, interval 1, probability 0, space 0, times 0
[  183.294252][T25483] CPU: 1 PID: 25483 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  183.303104][T25483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  183.313144][T25483] Call Trace:
[  183.316440][T25483]  dump_stack+0x137/0x19d
[  183.320774][T25483]  should_fail+0x23c/0x250
[  183.325188][T25483]  ? mempool_alloc_slab+0x16/0x20
[  183.330211][T25483]  __should_failslab+0x81/0x90
[  183.334967][T25483]  should_failslab+0x5/0x20
[  183.339473][T25483]  kmem_cache_alloc+0x46/0x2f0
[  183.344317][T25483]  mempool_alloc_slab+0x16/0x20
[  183.349270][T25483]  ? mempool_free+0x130/0x130
[  183.353964][T25483]  mempool_alloc+0x8c/0x300
[  183.358476][T25483]  ? __getblk_gfp+0x3f/0x590
[  183.363118][T25483]  ? find_get_pages_range_tag+0x33e/0x390
[  183.368834][T25483]  bio_alloc_bioset+0xcc/0x480
[  183.373600][T25483]  ? __ext4_get_inode_loc+0x3ce/0x920
[  183.378979][T25483]  submit_bh_wbc+0x130/0x330
[  183.383602][T25483]  __sync_dirty_buffer+0x136/0x1e0
[  183.388703][T25483]  sync_dirty_buffer+0x16/0x20
[  183.393447][T25483]  ext4_write_inode+0x285/0x390
[  183.398281][T25483]  ? do_writepages+0x110/0x150
[  183.403133][T25483]  write_inode+0x8c/0x180
[  183.407477][T25483]  __writeback_single_inode+0x2a2/0x450
[  183.413001][T25483]  writeback_single_inode+0x177/0x590
[  183.418350][T25483]  ? sync_mapping_buffers+0x33b/0x8b0
[  183.423698][T25483]  sync_inode_metadata+0x57/0x80
[  183.428752][T25483]  ext4_sync_file+0x359/0x670
[  183.433463][T25483]  ? tsan.module_ctor+0x10/0x10
[  183.438530][T25483]  vfs_fsync_range+0x107/0x120
[  183.443286][T25483]  iomap_dio_complete+0x2d5/0x3c0
[  183.448337][T25483]  iomap_dio_rw+0x4e/0x70
[  183.452731][T25483]  ? ext4_file_write_iter+0x4a1/0x11d0
[  183.458184][T25483]  ext4_file_write_iter+0xa4f/0x11d0
[  183.463465][T25483]  ? ext4_file_write_iter+0x4a1/0x11d0
[  183.468901][T25483]  do_iter_readv_writev+0x2cb/0x360
[  183.474127][T25483]  do_iter_write+0x112/0x4c0
[  183.478731][T25483]  ? kmalloc_array+0x2d/0x40
[  183.483410][T25483]  vfs_iter_write+0x4c/0x70
[  183.487901][T25483]  iter_file_splice_write+0x40a/0x750
[  183.493285][T25483]  ? splice_from_pipe+0xc0/0xc0
[  183.498115][T25483]  direct_splice_actor+0x80/0xa0
[  183.503154][T25483]  splice_direct_to_actor+0x345/0x650
[  183.508518][T25483]  ? do_splice_direct+0x170/0x170
[  183.513518][T25483]  do_splice_direct+0xf5/0x170
[  183.518314][T25483]  do_sendfile+0x773/0xda0
[  183.522740][T25483]  __x64_sys_sendfile64+0xf2/0x130
[  183.527829][T25483]  do_syscall_64+0x4a/0x90
[  183.532240][T25483]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  183.538177][T25483] RIP: 0033:0x4665d9
[  183.542042][T25483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  183.561631][T25483] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  183.570033][T25483] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  183.577991][T25483] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  183.585937][T25483] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  183.593970][T25483] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  183.602021][T25483] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  183.627756][T25514] loop3: detected capacity change from 0 to 16
23:15:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x5dc, 0x3, 0x7fffffff}, 0x1, 0x10000, 'id0\x00', 'timer1\x00', 0x0, 0x62, 0x6, 0x6, 0xca})
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x600}, 0x0)

23:15:47 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:47 executing program 4 (fault-call:8 fault-nth:41):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

[  183.679027][T25522] loop5: detected capacity change from 0 to 16
[  183.696115][T25522] FAT-fs (loop5): Unrecognized mount option "ÿÿ" or missing value
[  183.716755][T25488] loop0: detected capacity change from 0 to 16
23:15:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x700}, 0x0)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0)

[  183.785795][T25546] loop3: detected capacity change from 0 to 16
[  183.820999][T25552] loop0: detected capacity change from 0 to 16
[  183.836285][T25548] FAULT_INJECTION: forcing a failure.
[  183.836285][T25548] name failslab, interval 1, probability 0, space 0, times 0
[  183.848909][T25548] CPU: 1 PID: 25548 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  183.857682][T25548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  183.867740][T25548] Call Trace:
[  183.871014][T25548]  dump_stack+0x137/0x19d
[  183.875420][T25548]  should_fail+0x23c/0x250
[  183.879836][T25548]  ? kmalloc_array+0x2d/0x40
23:15:47 executing program 0:
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./bus\x00')
open(&(0x7f00000000c0)='./file0\x00', 0x2800, 0x20)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0)

[  183.884435][T25548]  __should_failslab+0x81/0x90
[  183.889201][T25548]  should_failslab+0x5/0x20
[  183.893705][T25548]  __kmalloc+0x66/0x340
[  183.897855][T25548]  ? splice_from_pipe+0xc0/0xc0
[  183.902700][T25548]  kmalloc_array+0x2d/0x40
[  183.907133][T25548]  iter_file_splice_write+0xc1/0x750
[  183.912447][T25548]  ? atime_needs_update+0x2ba/0x390
[  183.917640][T25548]  ? ext4_file_read_iter+0x1db/0x290
[  183.922925][T25548]  ? generic_file_splice_read+0x284/0x310
[  183.928645][T25548]  ? splice_from_pipe+0xc0/0xc0
[  183.933484][T25548]  direct_splice_actor+0x80/0xa0
[  183.938498][T25548]  splice_direct_to_actor+0x345/0x650
[  183.943922][T25548]  ? do_splice_direct+0x170/0x170
[  183.948958][T25548]  do_splice_direct+0xf5/0x170
[  183.953755][T25548]  do_sendfile+0x773/0xda0
[  183.958168][T25548]  __x64_sys_sendfile64+0xf2/0x130
[  183.963276][T25548]  do_syscall_64+0x4a/0x90
[  183.967713][T25548]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  183.973620][T25548] RIP: 0033:0x4665d9
[  183.975783][T25578] loop3: detected capacity change from 0 to 16
[  183.977519][T25548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  183.977535][T25548] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  184.011679][T25548] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  184.019709][T25548] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  184.027682][T25548] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  184.035682][T25548] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  184.043640][T25548] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  184.079604][T25522] loop5: detected capacity change from 0 to 16
[  184.086355][T25522] FAT-fs (loop5): Unrecognized mount option "ÿÿ" or missing value
23:15:47 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000180)='vfat\x00', &(0x7f00000001c0)='./file1\x00', r0)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x900}, 0x0)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0)

23:15:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:47 executing program 4 (fault-call:8 fault-nth:42):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = syz_io_uring_setup(0x533, &(0x7f0000000980), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = dup(r0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0)
r4 = syz_io_uring_setup(0x533, &(0x7f0000000980), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000240)=<r6=>0x0)
r7 = dup(r4)
syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0)
syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="1e1b3ade63661689b11ff8f785ac103a08ed52f3d6224e74cde9283a59053647228b6df743df53eaa867480e83a16c5d39e1c1057d860730c246c38d804c425a3697", 0x42, 0x20000800, 0x1}, 0x9)
chdir(&(0x7f0000000040)='./file0\x00')
r8 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x84002, 0x1e8)
sendfile(r8, r9, 0x0, 0x80000001)
r10 = syz_open_pts(r8, 0x64040)
ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140)=0x10)
open(&(0x7f00000000c0)='./bus\x00', 0x2c600, 0x1)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)

[  184.203157][T25613] loop5: detected capacity change from 0 to 16
[  184.212969][T25611] loop3: detected capacity change from 0 to 16
23:15:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xda03}, 0x0)

[  184.243291][T25614] FAULT_INJECTION: forcing a failure.
[  184.243291][T25614] name failslab, interval 1, probability 0, space 0, times 0
[  184.252615][T25623] loop0: detected capacity change from 0 to 16
[  184.256007][T25614] CPU: 1 PID: 25614 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  184.270883][T25614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  184.280974][T25614] Call Trace:
[  184.284336][T25614]  dump_stack+0x137/0x19d
[  184.289301][T25614]  should_fail+0x23c/0x250
23:15:47 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  184.293809][T25614]  __should_failslab+0x81/0x90
[  184.298696][T25614]  ? __iomap_dio_rw+0xf1/0xad0
[  184.304070][T25614]  should_failslab+0x5/0x20
[  184.308697][T25614]  kmem_cache_alloc_trace+0x49/0x310
[  184.313993][T25614]  ? __brelse+0x2c/0x50
[  184.318240][T25614]  __iomap_dio_rw+0xf1/0xad0
[  184.322969][T25614]  ? ext4_orphan_add+0x7a/0x5f0
[  184.327813][T25614]  ? file_update_time+0x1bd/0x3e0
[  184.332997][T25614]  iomap_dio_rw+0x30/0x70
[  184.338026][T25614]  ? ext4_file_write_iter+0x4a1/0x11d0
23:15:47 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x800, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = openat$incfs(r0, &(0x7f00000000c0)='.log\x00', 0x2c0301, 0x14a)
dup(r3)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x4, 0x3, &(0x7f0000000440)=[{&(0x7f0000000300)="b26150ce946d04d22b73d2b03575e01d5f1e7d476f3563bd4263fd8f76081c9b6723e53cad48133c7cdca999adb4f4710a574b8f363d56004e1e9a02137b91ba8056d8b9603b7b28f79669b26131e59b731d0df2c10a8739735c6a3e7b066506309180b793c416736cf1949a3fca61dfeab1ccde71dee0e7d3a7ebe2cce61f408ee1db7dc1b651d7362ade5c4d5487d78ad7545eb025b5c38c7761fdd8434e1cf9d751fb5e458cddc71844f0a828589ae688fd4ee63116df4a6f", 0xba}, {&(0x7f00000003c0)="ea68c6077d4912b1c54f0482516f26800f45cb4a9562009269d774586438e4542084e37dbc9d021c9d06eb108e21aadfd6cb08c589e63114ae17e53e8ffe9b9589ad6456ba3c3e072707ae70c70c5c01", 0x50, 0x10001}, {&(0x7f0000000280)="be4acddbe15b0472afc88b4a7d", 0xd, 0x9ef}], 0x1080000, &(0x7f00000004c0)={[{@session={'session', 0x3d, 0x47}}, {@map_off}, {@check_strict}, {}, {@cruft}], [{@subj_type={'subj_type', 0x3d, '.log\x00'}}, {@obj_role={'obj_role', 0x3d, ','}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]})
openat(r3, &(0x7f0000000140)='./file0\x00', 0x8371092862368a99, 0x30)
sendfile(r1, r2, 0x0, 0x80000001)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
sendfile(r3, r4, &(0x7f0000000540)=0x81, 0x1f)
truncate(&(0x7f0000000180)='./file0\x00', 0x28)

23:15:47 executing program 0:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)

[  184.343597][T25614]  ext4_file_write_iter+0xa4f/0x11d0
[  184.348972][T25614]  ? ext4_file_write_iter+0x4a1/0x11d0
[  184.354439][T25614]  do_iter_readv_writev+0x2cb/0x360
[  184.359813][T25614]  do_iter_write+0x112/0x4c0
[  184.364626][T25614]  ? kmalloc_array+0x2d/0x40
[  184.369673][T25614]  vfs_iter_write+0x4c/0x70
[  184.374200][T25614]  iter_file_splice_write+0x40a/0x750
[  184.379689][T25614]  ? splice_from_pipe+0xc0/0xc0
[  184.384661][T25614]  direct_splice_actor+0x80/0xa0
23:15:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x30000}, 0x0)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

23:15:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x34000}, 0x0)

[  184.389620][T25614]  splice_direct_to_actor+0x345/0x650
[  184.394985][T25614]  ? do_splice_direct+0x170/0x170
[  184.400002][T25614]  do_splice_direct+0xf5/0x170
[  184.404807][T25614]  do_sendfile+0x773/0xda0
[  184.409216][T25614]  __x64_sys_sendfile64+0xf2/0x130
[  184.414366][T25614]  do_syscall_64+0x4a/0x90
[  184.418782][T25614]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  184.425107][T25614] RIP: 0033:0x4665d9
23:15:47 executing program 4 (fault-call:8 fault-nth:43):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

23:15:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x400300}, 0x0)

[  184.428997][T25614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  184.448597][T25614] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  184.457008][T25614] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  184.464972][T25614] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  184.472935][T25614] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  184.480889][T25614] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  184.488848][T25614] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

23:15:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  184.553400][T25669] FAULT_INJECTION: forcing a failure.
[  184.553400][T25669] name failslab, interval 1, probability 0, space 0, times 0
[  184.566042][T25669] CPU: 1 PID: 25669 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  184.574802][T25669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  184.584856][T25669] Call Trace:
[  184.588129][T25669]  dump_stack+0x137/0x19d
[  184.592574][T25669]  should_fail+0x23c/0x250
[  184.596977][T25669]  ? kcalloc+0x32/0x50
[  184.601048][T25669]  __should_failslab+0x81/0x90
[  184.605809][T25669]  should_failslab+0x5/0x20
[  184.609556][T25682] loop5: detected capacity change from 0 to 16
[  184.610319][T25669]  __kmalloc+0x66/0x340
[  184.620701][T25669]  ? __queue_work+0x830/0xaa0
[  184.625440][T25669]  kcalloc+0x32/0x50
[  184.629338][T25669]  ext4_find_extent+0x21c/0x7f0
[  184.634186][T25669]  ext4_ext_map_blocks+0xd9/0x1f00
[  184.639289][T25669]  ? kblockd_mod_delayed_work_on+0x31/0x40
[  184.645109][T25669]  ? blk_mq_add_to_requeue_list+0x19d/0x1c0
[  184.651097][T25669]  ? __down_write_common+0x45/0x890
[  184.656433][T25669]  ? blk_flush_complete_seq+0x622/0x660
[  184.661958][T25669]  ? percpu_counter_add_batch+0x69/0xd0
[  184.667528][T25669]  ? ext4_es_lookup_extent+0x36b/0x490
[  184.672995][T25669]  ext4_map_blocks+0x70d/0xef0
[  184.677734][T25669]  ? ext4_iomap_begin+0x3e2/0x620
[  184.682733][T25669]  ? __cond_resched+0x11/0x40
[  184.687392][T25669]  ext4_iomap_begin+0x4a3/0x620
[  184.692330][T25669]  iomap_apply+0x8d/0x400
[  184.696639][T25669]  ? unlock_page_memcg+0xc3/0xe0
[  184.701604][T25669]  __iomap_dio_rw+0x5af/0xad0
[  184.706299][T25669]  ? __iomap_dio_rw+0xad0/0xad0
[  184.711228][T25669]  iomap_dio_rw+0x30/0x70
[  184.715630][T25669]  ? ext4_file_write_iter+0x4a1/0x11d0
[  184.721114][T25669]  ext4_file_write_iter+0xa4f/0x11d0
[  184.726440][T25669]  ? ext4_file_write_iter+0x4a1/0x11d0
[  184.731890][T25669]  do_iter_readv_writev+0x2cb/0x360
[  184.737073][T25669]  do_iter_write+0x112/0x4c0
[  184.741671][T25669]  ? kmalloc_array+0x2d/0x40
[  184.746240][T25669]  vfs_iter_write+0x4c/0x70
[  184.750722][T25669]  iter_file_splice_write+0x40a/0x750
[  184.756075][T25669]  ? splice_from_pipe+0xc0/0xc0
[  184.760904][T25669]  direct_splice_actor+0x80/0xa0
[  184.765885][T25669]  splice_direct_to_actor+0x345/0x650
[  184.771236][T25669]  ? do_splice_direct+0x170/0x170
[  184.776237][T25669]  do_splice_direct+0xf5/0x170
[  184.780979][T25669]  do_sendfile+0x773/0xda0
[  184.785388][T25669]  __x64_sys_sendfile64+0xf2/0x130
[  184.790552][T25669]  do_syscall_64+0x4a/0x90
[  184.794963][T25669]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  184.800840][T25669] RIP: 0033:0x4665d9
[  184.804711][T25669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  184.824373][T25669] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  184.832929][T25669] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  184.840922][T25669] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  184.848921][T25669] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  184.856877][T25669] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  184.864839][T25669] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  184.878989][T25683] loop3: detected capacity change from 0 to 16
[  184.886376][T25681] loop0: detected capacity change from 0 to 16
23:15:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x1000000}, 0x0)

23:15:48 executing program 4 (fault-call:8 fault-nth:44):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:48 executing program 0 (fault-call:2 fault-nth:0):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:48 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x201, 0x108)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  184.969990][T25681] loop0: detected capacity change from 0 to 16
23:15:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x2000000}, 0x0)

23:15:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x3000000}, 0x0)

23:15:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  185.051771][T25722] FAULT_INJECTION: forcing a failure.
[  185.051771][T25722] name failslab, interval 1, probability 0, space 0, times 0
[  185.064435][T25722] CPU: 1 PID: 25722 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  185.073200][T25722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  185.083250][T25722] Call Trace:
[  185.086524][T25722]  dump_stack+0x137/0x19d
[  185.090857][T25722]  should_fail+0x23c/0x250
[  185.095271][T25722]  ? ext4_mb_new_blocks+0x2e7/0x1f90
23:15:48 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x0, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  185.100598][T25722]  __should_failslab+0x81/0x90
[  185.105371][T25722]  should_failslab+0x5/0x20
[  185.108909][T25730] loop3: detected capacity change from 0 to 16
[  185.109865][T25722]  kmem_cache_alloc+0x46/0x2f0
[  185.120835][T25722]  ext4_mb_new_blocks+0x2e7/0x1f90
[  185.126004][T25722]  ? ext4_find_extent+0x7b2/0x7f0
[  185.131022][T25722]  ? ext4_ext_search_right+0x246/0x540
[  185.136579][T25722]  ext4_ext_map_blocks+0x1569/0x1f00
[  185.141905][T25722]  ? ext4_es_lookup_extent+0x36b/0x490
[  185.147376][T25722]  ext4_map_blocks+0x70d/0xef0
[  185.152134][T25722]  ? ext4_iomap_begin+0x3e2/0x620
[  185.157242][T25722]  ? __cond_resched+0x11/0x40
[  185.161917][T25722]  ext4_iomap_begin+0x4a3/0x620
[  185.166765][T25722]  iomap_apply+0x8d/0x400
[  185.171106][T25722]  ? unlock_page_memcg+0xc3/0xe0
[  185.176065][T25722]  __iomap_dio_rw+0x5af/0xad0
[  185.180775][T25722]  ? __iomap_dio_rw+0xad0/0xad0
[  185.181613][T25734] FAULT_INJECTION: forcing a failure.
[  185.181613][T25734] name failslab, interval 1, probability 0, space 0, times 0
[  185.185620][T25722]  iomap_dio_rw+0x30/0x70
[  185.185639][T25722]  ? ext4_file_write_iter+0x4a1/0x11d0
[  185.207953][T25722]  ext4_file_write_iter+0xa4f/0x11d0
[  185.213301][T25722]  ? ext4_file_write_iter+0x4a1/0x11d0
[  185.218742][T25722]  do_iter_readv_writev+0x2cb/0x360
[  185.223921][T25722]  do_iter_write+0x112/0x4c0
[  185.228484][T25722]  ? kmalloc_array+0x2d/0x40
[  185.233088][T25722]  vfs_iter_write+0x4c/0x70
[  185.237594][T25722]  iter_file_splice_write+0x40a/0x750
[  185.243012][T25722]  ? splice_from_pipe+0xc0/0xc0
[  185.247859][T25722]  direct_splice_actor+0x80/0xa0
[  185.252774][T25722]  splice_direct_to_actor+0x345/0x650
[  185.258127][T25722]  ? do_splice_direct+0x170/0x170
[  185.263209][T25722]  do_splice_direct+0xf5/0x170
[  185.267959][T25722]  do_sendfile+0x773/0xda0
[  185.272385][T25722]  __x64_sys_sendfile64+0xf2/0x130
[  185.277471][T25722]  do_syscall_64+0x4a/0x90
[  185.281870][T25722]  ? irqentry_exit_to_user_mode+0x5/0x20
[  185.287536][T25722]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  185.293417][T25722] RIP: 0033:0x4665d9
[  185.297306][T25722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  185.316942][T25722] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  185.325389][T25722] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  185.333337][T25722] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  185.341293][T25722] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
23:15:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x4000000}, 0x0)

[  185.349243][T25722] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  185.357192][T25722] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  185.365145][T25734] CPU: 0 PID: 25734 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  185.373907][T25734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  185.383958][T25734] Call Trace:
[  185.387233][T25734]  dump_stack+0x137/0x19d
[  185.391558][T25734]  should_fail+0x23c/0x250
[  185.396043][T25734]  __should_failslab+0x81/0x90
23:15:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x0, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:48 executing program 4 (fault-call:8 fault-nth:45):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

[  185.400818][T25734]  ? alloc_pipe_info+0xac/0x350
[  185.405714][T25734]  should_failslab+0x5/0x20
[  185.410217][T25734]  kmem_cache_alloc_trace+0x49/0x310
[  185.415508][T25734]  alloc_pipe_info+0xac/0x350
[  185.420182][T25734]  splice_direct_to_actor+0x5f7/0x650
[  185.425593][T25734]  ? do_splice_direct+0x170/0x170
[  185.430666][T25734]  ? security_file_permission+0x87/0xa0
[  185.436211][T25734]  ? rw_verify_area+0x136/0x250
[  185.441072][T25734]  do_splice_direct+0xf5/0x170
[  185.445835][T25734]  do_sendfile+0x773/0xda0
23:15:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x5000000}, 0x0)

23:15:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x0, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  185.450262][T25734]  __x64_sys_sendfile64+0xf2/0x130
[  185.455407][T25734]  do_syscall_64+0x4a/0x90
[  185.459834][T25734]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  185.465764][T25734] RIP: 0033:0x4665d9
[  185.469650][T25734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  185.489355][T25734] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  185.497844][T25734] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  185.505815][T25734] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  185.513869][T25734] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  185.521989][T25734] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  185.522951][T25761] FAULT_INJECTION: forcing a failure.
[  185.522951][T25761] name failslab, interval 1, probability 0, space 0, times 0
[  185.529952][T25734] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  185.550555][T25761] CPU: 1 PID: 25761 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  185.559332][T25761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  185.569388][T25761] Call Trace:
[  185.572850][T25761]  dump_stack+0x137/0x19d
[  185.577231][T25761]  should_fail+0x23c/0x250
[  185.581623][T25761]  ? ext4_mb_new_blocks+0x70f/0x1f90
[  185.586954][T25761]  __should_failslab+0x81/0x90
[  185.591699][T25761]  should_failslab+0x5/0x20
[  185.596236][T25761]  kmem_cache_alloc+0x46/0x2f0
[  185.601036][T25761]  ext4_mb_new_blocks+0x70f/0x1f90
[  185.606126][T25761]  ? ext4_find_extent+0x7b2/0x7f0
[  185.611138][T25761]  ? ext4_ext_search_right+0x246/0x540
[  185.616663][T25761]  ext4_ext_map_blocks+0x1569/0x1f00
[  185.621940][T25761]  ? ext4_es_lookup_extent+0x36b/0x490
[  185.627403][T25761]  ext4_map_blocks+0x70d/0xef0
[  185.632140][T25761]  ? ext4_iomap_begin+0x3e2/0x620
[  185.637202][T25761]  ? __cond_resched+0x11/0x40
[  185.641899][T25761]  ext4_iomap_begin+0x4a3/0x620
[  185.646748][T25761]  iomap_apply+0x8d/0x400
[  185.651072][T25761]  ? unlock_page_memcg+0xc3/0xe0
[  185.655994][T25761]  __iomap_dio_rw+0x5af/0xad0
[  185.660667][T25761]  ? __iomap_dio_rw+0xad0/0xad0
[  185.665508][T25761]  iomap_dio_rw+0x30/0x70
[  185.669831][T25761]  ? ext4_file_write_iter+0x4a1/0x11d0
[  185.675319][T25761]  ext4_file_write_iter+0xa4f/0x11d0
[  185.680613][T25761]  ? ext4_file_write_iter+0x4a1/0x11d0
[  185.686076][T25761]  do_iter_readv_writev+0x2cb/0x360
[  185.691282][T25761]  do_iter_write+0x112/0x4c0
[  185.695950][T25761]  ? kmalloc_array+0x2d/0x40
[  185.700609][T25761]  vfs_iter_write+0x4c/0x70
[  185.705090][T25761]  iter_file_splice_write+0x40a/0x750
[  185.710452][T25761]  ? splice_from_pipe+0xc0/0xc0
[  185.715292][T25761]  direct_splice_actor+0x80/0xa0
[  185.720220][T25761]  splice_direct_to_actor+0x345/0x650
[  185.725614][T25761]  ? do_splice_direct+0x170/0x170
[  185.730770][T25761]  do_splice_direct+0xf5/0x170
[  185.735510][T25761]  do_sendfile+0x773/0xda0
[  185.739956][T25761]  __x64_sys_sendfile64+0xf2/0x130
[  185.745062][T25761]  do_syscall_64+0x4a/0x90
[  185.749501][T25761]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  185.755463][T25761] RIP: 0033:0x4665d9
[  185.759448][T25761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  185.779170][T25761] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  185.787564][T25761] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  185.795521][T25761] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
23:15:49 executing program 0 (fault-call:2 fault-nth:1):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  185.803491][T25761] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  185.811437][T25761] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  185.819385][T25761] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:49 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r0, &(0x7f0000000000)=""/25, 0x19)
write(r0, &(0x7f0000000140)="b2c86f70f02cd386625cff121e2923ed7afaa918dbe3d6ed6d1f118d63eb0ed62587a6acda14506822734d6c2ac5b2ba4436e18e1b19efc340ce25d1b03f66d26c157b86c633", 0x46)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617401000240008000f801", 0x14}, {0x0, 0x0, 0x1000}, {&(0x7f00000001c0)="bc23f2c939cf53017da4b000"/21, 0x15, 0x847}], 0x28c0898, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)

23:15:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x6000000}, 0x0)

23:15:49 executing program 4 (fault-call:8 fault-nth:46):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

[  185.863805][T25778] loop5: detected capacity change from 0 to 16
[  185.874411][T25782] FAULT_INJECTION: forcing a failure.
[  185.874411][T25782] name failslab, interval 1, probability 0, space 0, times 0
[  185.887030][T25782] CPU: 0 PID: 25782 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  185.895779][T25782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  185.905935][T25782] Call Trace:
[  185.909220][T25782]  dump_stack+0x137/0x19d
[  185.913555][T25782]  should_fail+0x23c/0x250
[  185.917969][T25782]  ? kcalloc+0x32/0x40
[  185.922030][T25782]  __should_failslab+0x81/0x90
[  185.926810][T25782]  should_failslab+0x5/0x20
[  185.931325][T25782]  __kmalloc+0x66/0x340
[  185.935493][T25782]  ? kmem_cache_alloc_trace+0x215/0x310
[  185.941040][T25782]  ? alloc_pipe_info+0xac/0x350
[  185.945880][T25782]  kcalloc+0x32/0x40
[  185.949765][T25782]  alloc_pipe_info+0x1be/0x350
[  185.954524][T25782]  splice_direct_to_actor+0x5f7/0x650
[  185.959899][T25782]  ? do_splice_direct+0x170/0x170
[  185.964985][T25782]  ? security_file_permission+0x87/0xa0
[  185.970521][T25782]  ? rw_verify_area+0x136/0x250
[  185.971782][T25792] FAULT_INJECTION: forcing a failure.
[  185.971782][T25792] name failslab, interval 1, probability 0, space 0, times 0
[  185.975474][T25782]  do_splice_direct+0xf5/0x170
[  185.975496][T25782]  do_sendfile+0x773/0xda0
[  185.975513][T25782]  __x64_sys_sendfile64+0xf2/0x130
[  186.002393][T25782]  do_syscall_64+0x4a/0x90
[  186.006834][T25782]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  186.012773][T25782] RIP: 0033:0x4665d9
[  186.016647][T25782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  186.036235][T25782] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  186.044813][T25782] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  186.052769][T25782] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  186.060735][T25782] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  186.068689][T25782] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  186.076645][T25782] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  186.084689][T25792] CPU: 1 PID: 25792 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  186.093483][T25792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  186.103528][T25792] Call Trace:
[  186.106799][T25792]  dump_stack+0x137/0x19d
[  186.111128][T25792]  should_fail+0x23c/0x250
[  186.115583][T25792]  ? mempool_alloc_slab+0x16/0x20
[  186.120651][T25792]  __should_failslab+0x81/0x90
[  186.125415][T25792]  should_failslab+0x5/0x20
[  186.129924][T25792]  kmem_cache_alloc+0x46/0x2f0
[  186.134686][T25792]  mempool_alloc_slab+0x16/0x20
[  186.139569][T25792]  ? mempool_free+0x130/0x130
[  186.144239][T25792]  mempool_alloc+0x8c/0x300
[  186.148738][T25792]  ? ext4_es_insert_extent+0x1825/0x19d0
[  186.154373][T25792]  ? ext4_fc_track_range+0x130/0x130
[  186.159659][T25792]  ? iov_iter_alignment+0x77a/0x800
[  186.164862][T25792]  bio_alloc_bioset+0xcc/0x480
[  186.169611][T25792]  iomap_dio_bio_actor+0x511/0xb50
[  186.174788][T25792]  iomap_dio_actor+0x26e/0x3b0
[  186.179604][T25792]  iomap_apply+0x1e2/0x400
[  186.184073][T25792]  __iomap_dio_rw+0x5af/0xad0
[  186.188747][T25792]  ? __iomap_dio_rw+0xad0/0xad0
[  186.193586][T25792]  iomap_dio_rw+0x30/0x70
[  186.197899][T25792]  ? ext4_file_write_iter+0x4a1/0x11d0
[  186.203435][T25792]  ext4_file_write_iter+0xa4f/0x11d0
[  186.208700][T25792]  ? ext4_file_write_iter+0x4a1/0x11d0
[  186.214189][T25792]  do_iter_readv_writev+0x2cb/0x360
[  186.219365][T25792]  do_iter_write+0x112/0x4c0
[  186.223929][T25792]  ? kmalloc_array+0x2d/0x40
[  186.228598][T25792]  vfs_iter_write+0x4c/0x70
[  186.233209][T25792]  iter_file_splice_write+0x40a/0x750
[  186.238601][T25792]  ? splice_from_pipe+0xc0/0xc0
[  186.243445][T25792]  direct_splice_actor+0x80/0xa0
[  186.248492][T25792]  splice_direct_to_actor+0x345/0x650
[  186.253887][T25792]  ? do_splice_direct+0x170/0x170
[  186.258888][T25792]  do_splice_direct+0xf5/0x170
[  186.263627][T25792]  do_sendfile+0x773/0xda0
[  186.268022][T25792]  __x64_sys_sendfile64+0xf2/0x130
[  186.273211][T25792]  do_syscall_64+0x4a/0x90
[  186.277605][T25792]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  186.283477][T25792] RIP: 0033:0x4665d9
[  186.287364][T25792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  186.306980][T25792] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
23:15:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)

23:15:49 executing program 0 (fault-call:2 fault-nth:2):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x7000000}, 0x0)

[  186.315387][T25792] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  186.323336][T25792] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  186.331296][T25792] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  186.339262][T25792] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  186.347210][T25792] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  186.366681][T25808] loop3: detected capacity change from 0 to 16
[  186.403130][T25817] FAULT_INJECTION: forcing a failure.
[  186.403130][T25817] name failslab, interval 1, probability 0, space 0, times 0
23:15:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)

23:15:49 executing program 0 (fault-call:2 fault-nth:3):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9000000}, 0x0)

[  186.416561][T25817] CPU: 0 PID: 25817 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  186.425344][T25817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  186.435475][T25817] Call Trace:
[  186.438753][T25817]  dump_stack+0x137/0x19d
[  186.443097][T25817]  should_fail+0x23c/0x250
[  186.447585][T25817]  __should_failslab+0x81/0x90
23:15:49 executing program 4 (fault-call:8 fault-nth:47):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

[  186.447680][T25817]  should_failslab+0x5/0x20
[  186.447695][T25817]  kmem_cache_alloc_node_trace+0x58/0x2e0
[  186.447719][T25817]  ? __kmalloc_node+0x30/0x40
[  186.447733][T25817]  __kmalloc_node+0x30/0x40
[  186.447749][T25817]  kvmalloc_node+0x81/0xf0
[  186.447766][T25817]  seq_read_iter+0x145/0x910
[  186.447783][T25817]  ? mntput+0x45/0x70
[  186.447804][T25817]  ? __fsnotify_parent+0x32f/0x430
[  186.447820][T25817]  proc_reg_read_iter+0xfc/0x170
[  186.447856][T25817]  generic_file_splice_read+0x22a/0x310
[  186.447882][T25817]  ? splice_shrink_spd+0x60/0x60
[  186.447900][T25817]  splice_direct_to_actor+0x2aa/0x650
[  186.447920][T25817]  ? do_splice_direct+0x170/0x170
[  186.447935][T25817]  do_splice_direct+0xf5/0x170
[  186.447949][T25817]  do_sendfile+0x773/0xda0
[  186.448013][T25817]  __x64_sys_sendfile64+0xf2/0x130
[  186.448028][T25817]  do_syscall_64+0x4a/0x90
[  186.448045][T25817]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  186.448063][T25817] RIP: 0033:0x4665d9
[  186.448077][T25817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  186.448093][T25817] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  186.448111][T25817] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  186.448123][T25817] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  186.448131][T25817] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  186.448168][T25817] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  186.448176][T25817] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  186.529883][T25837] FAULT_INJECTION: forcing a failure.
[  186.529883][T25837] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  186.552813][T25840] loop3: detected capacity change from 0 to 16
[  186.554997][T25837] CPU: 1 PID: 25837 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  186.555015][T25837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  186.555025][T25837] Call Trace:
[  186.555032][T25837]  dump_stack+0x137/0x19d
[  186.682617][T25837]  should_fail+0x23c/0x250
[  186.682638][T25837]  __alloc_pages+0x102/0x320
[  186.682653][T25837]  alloc_pages+0x21d/0x310
[  186.682667][T25837]  push_pipe+0x267/0x370
[  186.682680][T25837]  _copy_to_iter+0x35d/0xdd0
[  186.682696][T25837]  ? print_cpu+0x67c/0x690
[  186.682711][T25837]  ? __virt_addr_valid+0x15a/0x1a0
[  186.682725][T25837]  seq_read_iter+0x7f0/0x910
[  186.682738][T25837]  proc_reg_read_iter+0xfc/0x170
[  186.682751][T25837]  generic_file_splice_read+0x22a/0x310
[  186.682765][T25837]  ? splice_shrink_spd+0x60/0x60
[  186.682778][T25837]  splice_direct_to_actor+0x2aa/0x650
[  186.682833][T25837]  ? do_splice_direct+0x170/0x170
[  186.682847][T25837]  do_splice_direct+0xf5/0x170
[  186.682861][T25837]  do_sendfile+0x773/0xda0
[  186.682873][T25837]  __x64_sys_sendfile64+0xf2/0x130
[  186.682886][T25837]  do_syscall_64+0x4a/0x90
[  186.682917][T25837]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  186.683004][T25837] RIP: 0033:0x4665d9
[  186.683015][T25837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  186.683027][T25837] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  186.683041][T25837] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  186.683049][T25837] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  186.683069][T25837] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  186.683076][T25837] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  186.683111][T25837] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  186.707720][T25845] loop5: detected capacity change from 0 to 16
[  186.861496][T25839] FAULT_INJECTION: forcing a failure.
[  186.861496][T25839] name failslab, interval 1, probability 0, space 0, times 0
[  186.874139][T25839] CPU: 0 PID: 25839 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  186.882893][T25839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  186.892983][T25839] Call Trace:
[  186.896244][T25839]  dump_stack+0x137/0x19d
[  186.900562][T25839]  should_fail+0x23c/0x250
[  186.904982][T25839]  ? mempool_alloc_slab+0x16/0x20
[  186.909992][T25839]  __should_failslab+0x81/0x90
[  186.914755][T25839]  should_failslab+0x5/0x20
[  186.919259][T25839]  kmem_cache_alloc+0x46/0x2f0
[  186.924023][T25839]  ? chksum_update+0x39/0x50
[  186.928659][T25839]  mempool_alloc_slab+0x16/0x20
[  186.933490][T25839]  ? mempool_free+0x130/0x130
[  186.938172][T25839]  mempool_alloc+0x8c/0x300
[  186.942760][T25839]  ? __getblk_gfp+0x3f/0x590
[  186.947325][T25839]  sg_pool_alloc+0x74/0x90
[  186.951715][T25839]  __sg_alloc_table+0xce/0x290
[  186.956453][T25839]  sg_alloc_table_chained+0xaf/0x140
[  186.961734][T25839]  ? sg_alloc_table_chained+0x140/0x140
[  186.967285][T25839]  scsi_alloc_sgtables+0x180/0x500
[  186.972374][T25839]  sd_init_command+0x935/0x15f0
[  186.977207][T25839]  scsi_queue_rq+0x10e0/0x15a0
[  186.981948][T25839]  blk_mq_dispatch_rq_list+0x628/0x10b0
[  186.987515][T25839]  ? deadline_remove_request+0x167/0x180
[  186.993124][T25839]  ? dd_dispatch_request+0x321/0x3d0
[  186.998384][T25839]  blk_mq_do_dispatch_sched+0x3cb/0x660
[  187.004016][T25839]  __blk_mq_sched_dispatch_requests+0x21e/0x2c0
[  187.010234][T25839]  blk_mq_sched_dispatch_requests+0x9f/0x110
[  187.016195][T25839]  __blk_mq_run_hw_queue+0xbc/0x140
[  187.021376][T25839]  __blk_mq_delay_run_hw_queue+0x163/0x2f0
[  187.027179][T25839]  ? dd_insert_request+0x255/0x330
[  187.032265][T25839]  blk_mq_run_hw_queue+0x22c/0x250
[  187.037353][T25839]  ? dd_finish_request+0x10/0x10
[  187.042269][T25839]  blk_mq_sched_insert_requests+0x13f/0x200
[  187.048192][T25839]  blk_mq_flush_plug_list+0x2f5/0x3c0
[  187.053560][T25839]  blk_flush_plug_list+0x235/0x260
[  187.058658][T25839]  blk_finish_plug+0x44/0x60
[  187.063253][T25839]  __iomap_dio_rw+0x780/0xad0
[  187.067986][T25839]  iomap_dio_rw+0x30/0x70
[  187.072348][T25839]  ? ext4_file_write_iter+0x4a1/0x11d0
[  187.077851][T25839]  ext4_file_write_iter+0xa4f/0x11d0
[  187.083209][T25839]  ? ext4_file_write_iter+0x4a1/0x11d0
[  187.088711][T25839]  do_iter_readv_writev+0x2cb/0x360
[  187.094093][T25839]  do_iter_write+0x112/0x4c0
[  187.098672][T25839]  ? kmalloc_array+0x2d/0x40
[  187.103313][T25839]  vfs_iter_write+0x4c/0x70
[  187.107794][T25839]  iter_file_splice_write+0x40a/0x750
[  187.113247][T25839]  ? splice_from_pipe+0xc0/0xc0
[  187.118160][T25839]  direct_splice_actor+0x80/0xa0
[  187.123099][T25839]  splice_direct_to_actor+0x345/0x650
[  187.128446][T25839]  ? do_splice_direct+0x170/0x170
[  187.133466][T25839]  do_splice_direct+0xf5/0x170
[  187.138274][T25839]  do_sendfile+0x773/0xda0
[  187.142665][T25839]  __x64_sys_sendfile64+0xf2/0x130
[  187.147755][T25839]  do_syscall_64+0x4a/0x90
[  187.152150][T25839]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  187.158176][T25839] RIP: 0033:0x4665d9
[  187.162061][T25839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  187.181640][T25839] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  187.190217][T25839] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  187.198202][T25839] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  187.206144][T25839] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  187.214104][T25839] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
23:15:50 executing program 5:
syz_io_uring_complete(0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r0, &(0x7f0000000000)=""/25, 0x19)
signalfd(r0, &(0x7f0000000180)={[0x4e]}, 0x8)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x1)
ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0))
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9effffff}, 0x0)

23:15:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}}, 0x0)

23:15:50 executing program 0 (fault-call:2 fault-nth:4):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)

[  187.222066][T25839] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  187.240546][T25823] loop5: detected capacity change from 0 to 16
23:15:50 executing program 4 (fault-call:8 fault-nth:48):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}}, 0x0)

[  187.271606][T25865] FAULT_INJECTION: forcing a failure.
[  187.271606][T25865] name failslab, interval 1, probability 0, space 0, times 0
[  187.284206][T25865] CPU: 0 PID: 25865 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  187.292947][T25865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  187.303016][T25865] Call Trace:
[  187.306293][T25865]  dump_stack+0x137/0x19d
[  187.310620][T25865]  should_fail+0x23c/0x250
[  187.315023][T25865]  ? kmalloc_array+0x2d/0x40
[  187.319602][T25865]  __should_failslab+0x81/0x90
[  187.324376][T25865]  should_failslab+0x5/0x20
[  187.328872][T25865]  __kmalloc+0x66/0x340
[  187.333015][T25865]  ? splice_from_pipe+0xc0/0xc0
[  187.337852][T25865]  kmalloc_array+0x2d/0x40
[  187.342258][T25865]  iter_file_splice_write+0xc1/0x750
[  187.347612][T25865]  ? atime_needs_update+0x2ba/0x390
[  187.352810][T25865]  ? generic_file_splice_read+0x284/0x310
[  187.358515][T25865]  ? splice_from_pipe+0xc0/0xc0
[  187.363361][T25865]  direct_splice_actor+0x80/0xa0
[  187.368444][T25865]  splice_direct_to_actor+0x345/0x650
[  187.373832][T25865]  ? do_splice_direct+0x170/0x170
[  187.378855][T25865]  do_splice_direct+0xf5/0x170
[  187.382341][T25877] FAULT_INJECTION: forcing a failure.
[  187.382341][T25877] name failslab, interval 1, probability 0, space 0, times 0
[  187.383631][T25865]  do_sendfile+0x773/0xda0
[  187.383651][T25865]  __x64_sys_sendfile64+0xf2/0x130
[  187.383670][T25865]  do_syscall_64+0x4a/0x90
[  187.410078][T25865]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  187.416009][T25865] RIP: 0033:0x4665d9
[  187.419879][T25865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  187.439460][T25865] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  187.447851][T25865] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  187.455818][T25865] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  187.463763][T25865] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  187.471716][T25865] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  187.479666][T25865] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  187.487660][T25877] CPU: 1 PID: 25877 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  187.496435][T25877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  187.506554][T25877] Call Trace:
[  187.509820][T25877]  dump_stack+0x137/0x19d
[  187.514146][T25877]  should_fail+0x23c/0x250
[  187.518552][T25877]  ? mempool_alloc_slab+0x16/0x20
[  187.523587][T25877]  __should_failslab+0x81/0x90
[  187.528348][T25877]  should_failslab+0x5/0x20
[  187.532840][T25877]  kmem_cache_alloc+0x46/0x2f0
[  187.537599][T25877]  ? chksum_update+0x39/0x50
[  187.542175][T25877]  mempool_alloc_slab+0x16/0x20
[  187.547089][T25877]  ? mempool_free+0x130/0x130
[  187.551764][T25877]  mempool_alloc+0x8c/0x300
[  187.556255][T25877]  ? __getblk_gfp+0x3f/0x590
[  187.560830][T25877]  sg_pool_alloc+0x74/0x90
[  187.564964][T25882] loop3: detected capacity change from 0 to 16
23:15:50 executing program 0 (fault-call:2 fault-nth:5):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xda030000}, 0x0)

23:15:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}}, 0x0)

23:15:50 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)

[  187.565320][T25877]  __sg_alloc_table+0xce/0x290
[  187.571643][T25883] loop5: detected capacity change from 0 to 16
[  187.576211][T25877]  sg_alloc_table_chained+0xaf/0x140
[  187.576228][T25877]  ? sg_alloc_table_chained+0x140/0x140
[  187.576244][T25877]  scsi_alloc_sgtables+0x180/0x500
[  187.598247][T25877]  sd_init_command+0x935/0x15f0
[  187.603089][T25877]  scsi_queue_rq+0x10e0/0x15a0
[  187.603111][T25877]  blk_mq_dispatch_rq_list+0x628/0x10b0
[  187.603170][T25877]  ? deadline_remove_request+0x167/0x180
[  187.603184][T25877]  ? dd_dispatch_request+0x321/0x3d0
[  187.603195][T25877]  blk_mq_do_dispatch_sched+0x3cb/0x660
[  187.603209][T25877]  __blk_mq_sched_dispatch_requests+0x21e/0x2c0
[  187.603225][T25877]  blk_mq_sched_dispatch_requests+0x9f/0x110
[  187.603243][T25877]  __blk_mq_run_hw_queue+0xbc/0x140
[  187.603255][T25877]  __blk_mq_delay_run_hw_queue+0x163/0x2f0
[  187.603316][T25877]  ? dd_insert_request+0x255/0x330
[  187.603329][T25877]  blk_mq_run_hw_queue+0x22c/0x250
[  187.603348][T25877]  ? dd_finish_request+0x10/0x10
[  187.603363][T25877]  blk_mq_sched_insert_requests+0x13f/0x200
[  187.603382][T25877]  blk_mq_flush_plug_list+0x2f5/0x3c0
[  187.603399][T25877]  blk_flush_plug_list+0x235/0x260
[  187.603410][T25877]  blk_finish_plug+0x44/0x60
[  187.603421][T25877]  __iomap_dio_rw+0x780/0xad0
[  187.603438][T25877]  iomap_dio_rw+0x30/0x70
[  187.603453][T25877]  ? ext4_file_write_iter+0x4a1/0x11d0
[  187.603482][T25877]  ext4_file_write_iter+0xa4f/0x11d0
[  187.603501][T25877]  ? ext4_file_write_iter+0x4a1/0x11d0
[  187.603550][T25877]  do_iter_readv_writev+0x2cb/0x360
[  187.603615][T25877]  do_iter_write+0x112/0x4c0
[  187.603627][T25877]  ? kmalloc_array+0x2d/0x40
[  187.603643][T25877]  vfs_iter_write+0x4c/0x70
[  187.603656][T25877]  iter_file_splice_write+0x40a/0x750
[  187.603670][T25877]  ? splice_from_pipe+0xc0/0xc0
[  187.603682][T25877]  direct_splice_actor+0x80/0xa0
[  187.603768][T25877]  splice_direct_to_actor+0x345/0x650
[  187.603781][T25877]  ? do_splice_direct+0x170/0x170
[  187.603793][T25877]  do_splice_direct+0xf5/0x170
[  187.603824][T25877]  do_sendfile+0x773/0xda0
[  187.603840][T25877]  __x64_sys_sendfile64+0xf2/0x130
[  187.603857][T25877]  do_syscall_64+0x4a/0x90
[  187.603924][T25877]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  187.603940][T25877] RIP: 0033:0x4665d9
[  187.603950][T25877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  187.603968][T25877] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  187.603982][T25877] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  187.603990][T25877] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  187.604019][T25877] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  187.604028][T25877] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  187.604036][T25877] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
23:15:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xefffffff}, 0x0)

[  187.644544][T25903] FAULT_INJECTION: forcing a failure.
[  187.644544][T25903] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  187.668524][T25905] loop3: detected capacity change from 0 to 16
[  187.671312][T25903] CPU: 1 PID: 25903 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  187.906359][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  187.906370][T25903] Call Trace:
[  187.906377][T25903]  dump_stack+0x137/0x19d
[  187.906397][T25903]  should_fail+0x23c/0x250
[  187.906411][T25903]  __alloc_pages+0x102/0x320
[  187.906425][T25903]  alloc_pages+0x21d/0x310
[  187.906493][T25903]  __page_cache_alloc+0x4d/0xf0
[  187.906508][T25903]  pagecache_get_page+0x5f4/0x900
[  187.906598][T25903]  grab_cache_page_write_begin+0x3f/0x70
[  187.906615][T25903]  ext4_da_write_begin+0x305/0x820
[  187.906631][T25903]  ? __list_del_entry_valid+0x54/0xc0
[  187.906646][T25903]  ? iov_iter_fault_in_readable+0x58/0x3a0
[  187.906661][T25903]  ? inode_io_list_move_locked+0x17b/0x260
[  187.906676][T25903]  generic_perform_write+0x196/0x3a0
[  187.906725][T25903]  ? __mnt_drop_write_file+0x5a/0x60
[  187.906815][T25903]  ext4_buffered_write_iter+0x2f2/0x3f0
[  187.906834][T25903]  ext4_file_write_iter+0x2e7/0x11d0
[  187.906852][T25903]  ? avc_policy_seqno+0x22/0x30
[  187.906869][T25903]  ? selinux_file_permission+0x22e/0x530
[  187.906882][T25903]  do_iter_readv_writev+0x2cb/0x360
[  187.906897][T25903]  do_iter_write+0x112/0x4c0
[  187.906971][T25903]  ? kmalloc_array+0x2d/0x40
[  187.906985][T25903]  vfs_iter_write+0x4c/0x70
[  187.906997][T25903]  iter_file_splice_write+0x40a/0x750
[  187.907013][T25903]  ? splice_from_pipe+0xc0/0xc0
[  187.907027][T25903]  direct_splice_actor+0x80/0xa0
[  187.907042][T25903]  splice_direct_to_actor+0x345/0x650
[  187.907165][T25903]  ? do_splice_direct+0x170/0x170
[  187.907179][T25903]  do_splice_direct+0xf5/0x170
[  187.907193][T25903]  do_sendfile+0x773/0xda0
[  187.907217][T25903]  __x64_sys_sendfile64+0xf2/0x130
[  187.907230][T25903]  do_syscall_64+0x4a/0x90
[  187.907245][T25903]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  187.907309][T25903] RIP: 0033:0x4665d9
23:15:51 executing program 0 (fault-call:2 fault-nth:6):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:51 executing program 2 (fault-call:2 fault-nth:0):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xf0ffffff}, 0x0)

23:15:51 executing program 4 (fault-call:8 fault-nth:49):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)

23:15:51 executing program 5:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17, 0x80000000040000}, {0x0, 0x0, 0x1}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  187.907320][T25903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  187.907369][T25903] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  187.907382][T25903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  187.907390][T25903] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  187.907398][T25903] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  187.907406][T25903] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  187.907414][T25903] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  188.216837][T25935] FAULT_INJECTION: forcing a failure.
[  188.216837][T25935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.228086][T25939] loop3: detected capacity change from 0 to 16
[  188.229950][T25935] CPU: 1 PID: 25935 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  188.244814][T25935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  188.254860][T25935] Call Trace:
[  188.258136][T25935]  dump_stack+0x137/0x19d
[  188.262482][T25935]  should_fail+0x23c/0x250
[  188.266971][T25935]  should_fail_usercopy+0x16/0x20
[  188.271996][T25935]  _copy_from_user+0x1c/0xd0
[  188.276574][T25935]  __copy_msghdr_from_user+0x44/0x350
[  188.282043][T25935]  ? __fget_light+0x21b/0x260
[  188.286717][T25935]  __sys_sendmsg+0x135/0x270
[  188.291382][T25935]  ? kstrtouint_from_user+0x104/0x130
[  188.296851][T25935]  ? do_filp_open+0x17a/0x1f0
[  188.300147][T25934] FAULT_INJECTION: forcing a failure.
[  188.300147][T25934] name failslab, interval 1, probability 0, space 0, times 0
[  188.301581][T25935]  ? fsnotify_perm+0x59/0x2e0
[  188.318826][T25935]  ? __fsnotify_parent+0x32f/0x430
[  188.324021][T25935]  ? get_pid_task+0x8b/0xc0
[  188.328511][T25935]  ? vfs_write+0x50c/0x770
[  188.332905][T25935]  ? __fget_light+0x21b/0x260
[  188.337735][T25935]  ? __cond_resched+0x11/0x40
[  188.342559][T25935]  ? fput+0x2d/0x130
[  188.346444][T25935]  ? ksys_write+0x157/0x180
[  188.350939][T25935]  __x64_sys_sendmsg+0x42/0x50
[  188.355691][T25935]  do_syscall_64+0x4a/0x90
[  188.360189][T25935]  entry_SYSCALL_64_after_hwframe+0x44/0xae
23:15:51 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001)

23:15:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0)

[  188.366080][T25935] RIP: 0033:0x4665d9
[  188.369957][T25935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  188.389740][T25935] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.398183][T25935] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  188.406261][T25935] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  188.414220][T25935] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  188.422171][T25935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.430129][T25935] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
[  188.438085][T25934] CPU: 0 PID: 25934 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  188.446850][T25934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  188.456952][T25934] Call Trace:
[  188.460308][T25934]  dump_stack+0x137/0x19d
[  188.460503][T25937] FAULT_INJECTION: forcing a failure.
[  188.460503][T25937] name failslab, interval 1, probability 0, space 0, times 0
[  188.464640][T25934]  should_fail+0x23c/0x250
[  188.464661][T25934]  ? kcalloc+0x32/0x50
[  188.464680][T25934]  __should_failslab+0x81/0x90
[  188.490395][T25934]  should_failslab+0x5/0x20
[  188.494921][T25934]  __kmalloc+0x66/0x340
[  188.499058][T25934]  kcalloc+0x32/0x50
[  188.503073][T25934]  ext4_find_extent+0x21c/0x7f0
[  188.507925][T25934]  ? __list_del_entry_valid+0x54/0xc0
[  188.513290][T25934]  ext4_ext_map_blocks+0xd9/0x1f00
[  188.518383][T25934]  ? rmqueue+0x43/0xd00
[  188.522514][T25934]  ? _raw_spin_unlock_irqrestore+0x27/0x40
[  188.528341][T25934]  ? __down_read_common+0x16b/0x5a0
[  188.533513][T25934]  ? percpu_counter_add_batch+0xc0/0xd0
[  188.539059][T25934]  ? ext4_es_lookup_extent+0x206/0x490
[  188.544528][T25934]  ext4_da_get_block_prep+0x428/0x9b0
[  188.549881][T25934]  __block_write_begin_int+0x4a2/0x1060
[  188.555410][T25934]  ? ext4_da_release_space+0x230/0x230
[  188.560857][T25934]  ? ext4_da_write_begin+0x410/0x820
[  188.566121][T25934]  ? ext4_da_release_space+0x230/0x230
[  188.571558][T25934]  __block_write_begin+0x2b/0x40
[  188.576486][T25934]  ext4_da_write_begin+0x4c8/0x820
[  188.581674][T25934]  generic_perform_write+0x196/0x3a0
[  188.586941][T25934]  ext4_buffered_write_iter+0x2f2/0x3f0
[  188.592537][T25934]  ext4_file_write_iter+0x2e7/0x11d0
[  188.597807][T25934]  ? avc_policy_seqno+0x22/0x30
[  188.602637][T25934]  ? selinux_file_permission+0x22e/0x530
[  188.608277][T25934]  do_iter_readv_writev+0x2cb/0x360
[  188.613454][T25934]  do_iter_write+0x112/0x4c0
[  188.618129][T25934]  ? kmalloc_array+0x2d/0x40
[  188.622694][T25934]  vfs_iter_write+0x4c/0x70
[  188.627169][T25934]  iter_file_splice_write+0x40a/0x750
[  188.632576][T25934]  ? splice_from_pipe+0xc0/0xc0
[  188.637404][T25934]  direct_splice_actor+0x80/0xa0
[  188.642392][T25934]  splice_direct_to_actor+0x345/0x650
[  188.647744][T25934]  ? do_splice_direct+0x170/0x170
[  188.652757][T25934]  do_splice_direct+0xf5/0x170
[  188.657507][T25934]  do_sendfile+0x773/0xda0
[  188.661973][T25934]  __x64_sys_sendfile64+0xf2/0x130
[  188.667067][T25934]  do_syscall_64+0x4a/0x90
[  188.671467][T25934]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  188.677349][T25934] RIP: 0033:0x4665d9
[  188.681219][T25934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  188.700832][T25934] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  188.709242][T25934] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  188.717259][T25934] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  188.725206][T25934] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  188.733156][T25934] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  188.741105][T25934] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  188.749085][T25937] CPU: 1 PID: 25937 Comm: syz-executor.4 Not tainted 5.13.0-rc4-syzkaller #0
[  188.757916][T25937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  188.767950][T25937] Call Trace:
[  188.771210][T25937]  dump_stack+0x137/0x19d
[  188.775540][T25937]  should_fail+0x23c/0x250
[  188.779941][T25937]  ? kmalloc_array+0x2d/0x40
[  188.784557][T25937]  __should_failslab+0x81/0x90
[  188.789331][T25937]  should_failslab+0x5/0x20
[  188.793939][T25937]  __kmalloc+0x66/0x340
[  188.798084][T25937]  ? splice_from_pipe+0xc0/0xc0
[  188.802918][T25937]  kmalloc_array+0x2d/0x40
[  188.807315][T25937]  iter_file_splice_write+0xc1/0x750
[  188.812580][T25937]  ? atime_needs_update+0x2ba/0x390
[  188.817758][T25937]  ? ext4_file_read_iter+0x1db/0x290
[  188.823041][T25937]  ? generic_file_splice_read+0x284/0x310
[  188.828740][T25937]  ? splice_from_pipe+0xc0/0xc0
[  188.833582][T25937]  direct_splice_actor+0x80/0xa0
[  188.838550][T25937]  splice_direct_to_actor+0x345/0x650
[  188.843940][T25937]  ? do_splice_direct+0x170/0x170
[  188.848972][T25937]  do_splice_direct+0xf5/0x170
[  188.853730][T25937]  do_sendfile+0x773/0xda0
[  188.858133][T25937]  __x64_sys_sendfile64+0xf2/0x130
[  188.863309][T25937]  do_syscall_64+0x4a/0x90
[  188.867733][T25937]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  188.873609][T25937] RIP: 0033:0x4665d9
[  188.877497][T25937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  188.897100][T25937] RSP: 002b:00007fb2c8fc6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  188.905492][T25937] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:15:52 executing program 2 (fault-call:2 fault-nth:1):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffff9e}, 0x0)

[  188.913455][T25937] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[  188.921455][T25937] RBP: 00007fb2c8fc61d0 R08: 0000000000000000 R09: 0000000000000000
[  188.929407][T25937] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  188.937416][T25937] R13: 00007ffecf7c5c0f R14: 00007fb2c8fc6300 R15: 0000000000022000
[  188.954961][T25938] loop5: detected capacity change from 0 to 264192
[  188.973396][T25957] FAULT_INJECTION: forcing a failure.
[  188.973396][T25957] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.984740][T25938] FAT-fs (loop5): bogus number of reserved sectors
[  188.986455][T25957] CPU: 0 PID: 25957 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  188.992911][T25938] FAT-fs (loop5): Can't find a valid FAT filesystem
[  189.001643][T25957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  189.001655][T25957] Call Trace:
[  189.001662][T25957]  dump_stack+0x137/0x19d
[  189.001685][T25957]  should_fail+0x23c/0x250
[  189.001700][T25957]  should_fail_usercopy+0x16/0x20
[  189.001719][T25957]  _copy_from_user+0x1c/0xd0
[  189.039895][T25957]  iovec_from_user+0xc4/0x2d0
[  189.044577][T25957]  ? should_fail+0xd6/0x250
[  189.049124][T25957]  __import_iovec+0x49/0x270
[  189.053693][T25957]  ? __copy_msghdr_from_user+0x232/0x350
[  189.059309][T25957]  import_iovec+0x69/0x80
[  189.063620][T25957]  __sys_sendmsg+0x1ab/0x270
[  189.068210][T25957]  ? do_filp_open+0x17a/0x1f0
[  189.072949][T25957]  ? fsnotify_perm+0x59/0x2e0
[  189.077608][T25957]  ? __fsnotify_parent+0x32f/0x430
[  189.082702][T25957]  ? get_pid_task+0x8b/0xc0
[  189.087189][T25957]  ? vfs_write+0x50c/0x770
[  189.091633][T25957]  ? __fget_light+0x21b/0x260
[  189.096374][T25957]  ? __cond_resched+0x11/0x40
[  189.101033][T25957]  ? fput+0x2d/0x130
[  189.104911][T25957]  ? ksys_write+0x157/0x180
[  189.109419][T25957]  __x64_sys_sendmsg+0x42/0x50
[  189.114251][T25957]  do_syscall_64+0x4a/0x90
[  189.118652][T25957]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  189.124530][T25957] RIP: 0033:0x4665d9
[  189.128436][T25957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  189.148019][T25957] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.156417][T25957] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  189.164371][T25957] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
23:15:52 executing program 0 (fault-call:2 fault-nth:7):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffffef}, 0x0)

[  189.172330][T25957] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  189.180363][T25957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.188316][T25957] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
23:15:52 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:15:52 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001)

23:15:52 executing program 2 (fault-call:2 fault-nth:2):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  189.215149][T25963] loop3: detected capacity change from 0 to 16
[  189.237460][T25969] FAULT_INJECTION: forcing a failure.
[  189.237460][T25969] name failslab, interval 1, probability 0, space 0, times 0
[  189.250116][T25969] CPU: 1 PID: 25969 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  189.258873][T25969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  189.268919][T25969] Call Trace:
[  189.272187][T25969]  dump_stack+0x137/0x19d
[  189.276523][T25969]  should_fail+0x23c/0x250
[  189.281053][T25969]  ? __es_insert_extent+0x51f/0xe70
[  189.286263][T25969]  __should_failslab+0x81/0x90
[  189.291064][T25969]  should_failslab+0x5/0x20
[  189.295581][T25969]  kmem_cache_alloc+0x46/0x2f0
[  189.300368][T25969]  __es_insert_extent+0x51f/0xe70
[  189.304130][T25977] FAULT_INJECTION: forcing a failure.
[  189.304130][T25977] name failslab, interval 1, probability 0, space 0, times 0
[  189.305394][T25969]  ? kcalloc+0x32/0x50
[  189.305417][T25969]  ? __kmalloc+0x23d/0x340
[  189.326397][T25969]  ? kcalloc+0x32/0x50
[  189.330521][T25969]  ext4_es_insert_extent+0x1bb/0x19d0
[  189.335929][T25969]  ? ext4_ext_convert_to_initialized+0xf50/0xf50
[  189.342246][T25969]  ext4_ext_map_blocks+0xf79/0x1f00
[  189.347424][T25969]  ? __down_read_common+0x16b/0x5a0
[  189.352597][T25969]  ? percpu_counter_add_batch+0x69/0xd0
[  189.358117][T25969]  ? ext4_es_lookup_extent+0x206/0x490
[  189.363572][T25969]  ext4_da_get_block_prep+0x428/0x9b0
[  189.368923][T25969]  __block_write_begin_int+0x4a2/0x1060
[  189.374451][T25969]  ? ext4_da_release_space+0x230/0x230
[  189.379952][T25969]  ? ext4_da_write_begin+0x410/0x820
[  189.385225][T25969]  ? ext4_da_release_space+0x230/0x230
[  189.390689][T25969]  __block_write_begin+0x2b/0x40
[  189.395646][T25969]  ext4_da_write_begin+0x4c8/0x820
[  189.400738][T25969]  generic_perform_write+0x196/0x3a0
[  189.406011][T25969]  ext4_buffered_write_iter+0x2f2/0x3f0
[  189.411573][T25969]  ext4_file_write_iter+0x2e7/0x11d0
[  189.416858][T25969]  ? avc_policy_seqno+0x22/0x30
[  189.421757][T25969]  ? selinux_file_permission+0x22e/0x530
[  189.427408][T25969]  do_iter_readv_writev+0x2cb/0x360
[  189.432615][T25969]  do_iter_write+0x112/0x4c0
[  189.437184][T25969]  ? kmalloc_array+0x2d/0x40
[  189.441830][T25969]  vfs_iter_write+0x4c/0x70
[  189.446310][T25969]  iter_file_splice_write+0x40a/0x750
[  189.451664][T25969]  ? splice_from_pipe+0xc0/0xc0
[  189.456516][T25969]  direct_splice_actor+0x80/0xa0
[  189.461430][T25969]  splice_direct_to_actor+0x345/0x650
[  189.466791][T25969]  ? do_splice_direct+0x170/0x170
[  189.471792][T25969]  do_splice_direct+0xf5/0x170
[  189.476536][T25969]  do_sendfile+0x773/0xda0
[  189.480980][T25969]  __x64_sys_sendfile64+0xf2/0x130
[  189.486110][T25969]  do_syscall_64+0x4a/0x90
[  189.490536][T25969]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  189.496412][T25969] RIP: 0033:0x4665d9
[  189.500289][T25969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  189.519876][T25969] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  189.528271][T25969] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  189.536231][T25969] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  189.544209][T25969] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  189.552236][T25969] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
23:15:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xfffffff0}, 0x0)

23:15:52 executing program 0 (fault-call:2 fault-nth:8):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  189.560193][T25969] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
[  189.568149][T25977] CPU: 0 PID: 25977 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  189.576975][T25977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  189.587051][T25977] Call Trace:
[  189.590321][T25977]  dump_stack+0x137/0x19d
[  189.594676][T25977]  should_fail+0x23c/0x250
[  189.599096][T25977]  __should_failslab+0x81/0x90
[  189.603866][T25977]  should_failslab+0x5/0x20
[  189.608357][T25977]  kmem_cache_alloc_node+0x58/0x2b0
[  189.613556][T25977]  ? __alloc_skb+0xed/0x420
[  189.618118][T25977]  __alloc_skb+0xed/0x420
[  189.622475][T25977]  netlink_sendmsg+0x4c7/0x7c0
[  189.627301][T25977]  ? netlink_getsockopt+0x720/0x720
[  189.632562][T25977]  ____sys_sendmsg+0x360/0x4d0
[  189.637326][T25977]  ? import_iovec+0x69/0x80
[  189.641829][T25977]  __sys_sendmsg+0x1ed/0x270
[  189.646469][T25977]  ? __fsnotify_parent+0x32f/0x430
[  189.651664][T25977]  ? get_pid_task+0x8b/0xc0
[  189.656175][T25977]  ? vfs_write+0x50c/0x770
[  189.660579][T25977]  ? __fget_light+0x21b/0x260
[  189.662913][T25986] FAULT_INJECTION: forcing a failure.
[  189.662913][T25986] name failslab, interval 1, probability 0, space 0, times 0
[  189.665254][T25977]  ? __cond_resched+0x11/0x40
[  189.665275][T25977]  ? fput+0x2d/0x130
[  189.665292][T25977]  ? ksys_write+0x157/0x180
[  189.690848][T25977]  __x64_sys_sendmsg+0x42/0x50
[  189.695591][T25977]  do_syscall_64+0x4a/0x90
[  189.699992][T25977]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  189.705867][T25977] RIP: 0033:0x4665d9
[  189.709762][T25977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  189.729353][T25977] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.737809][T25977] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  189.745845][T25977] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  189.753800][T25977] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  189.761831][T25977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.769782][T25977] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
[  189.777763][T25986] CPU: 1 PID: 25986 Comm: syz-executor.0 Not tainted 5.13.0-rc4-syzkaller #0
[  189.786527][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  189.796581][T25986] Call Trace:
[  189.799840][T25986]  dump_stack+0x137/0x19d
[  189.804156][T25986]  should_fail+0x23c/0x250
[  189.808558][T25986]  ? __es_insert_extent+0x51f/0xe70
[  189.813807][T25986]  __should_failslab+0x81/0x90
[  189.818557][T25986]  should_failslab+0x5/0x20
[  189.823126][T25986]  kmem_cache_alloc+0x46/0x2f0
[  189.827875][T25986]  __es_insert_extent+0x51f/0xe70
[  189.832895][T25986]  ext4_es_insert_delayed_block+0xfb/0x370
[  189.838795][T25986]  ? ext4_claim_free_clusters+0x5b/0x80
[  189.844336][T25986]  ext4_da_get_block_prep+0x582/0x9b0
[  189.849858][T25986]  __block_write_begin_int+0x4a2/0x1060
[  189.855386][T25986]  ? ext4_da_release_space+0x230/0x230
[  189.860924][T25986]  ? ext4_da_write_begin+0x410/0x820
[  189.866189][T25986]  ? ext4_da_release_space+0x230/0x230
[  189.871720][T25986]  __block_write_begin+0x2b/0x40
[  189.876641][T25986]  ext4_da_write_begin+0x4c8/0x820
[  189.881806][T25986]  generic_perform_write+0x196/0x3a0
[  189.887162][T25986]  ext4_buffered_write_iter+0x2f2/0x3f0
[  189.892774][T25986]  ext4_file_write_iter+0x2e7/0x11d0
[  189.898044][T25986]  ? avc_policy_seqno+0x22/0x30
[  189.902924][T25986]  ? selinux_file_permission+0x22e/0x530
[  189.908539][T25986]  do_iter_readv_writev+0x2cb/0x360
[  189.913776][T25986]  do_iter_write+0x112/0x4c0
[  189.918355][T25986]  ? kmalloc_array+0x2d/0x40
[  189.922991][T25986]  vfs_iter_write+0x4c/0x70
[  189.927474][T25986]  iter_file_splice_write+0x40a/0x750
[  189.932844][T25986]  ? splice_from_pipe+0xc0/0xc0
[  189.937693][T25986]  direct_splice_actor+0x80/0xa0
[  189.942621][T25986]  splice_direct_to_actor+0x345/0x650
[  189.947985][T25986]  ? do_splice_direct+0x170/0x170
[  189.952987][T25986]  do_splice_direct+0xf5/0x170
[  189.957731][T25986]  do_sendfile+0x773/0xda0
[  189.962203][T25986]  __x64_sys_sendfile64+0xf2/0x130
[  189.967307][T25986]  do_syscall_64+0x4a/0x90
[  189.971781][T25986]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  189.977656][T25986] RIP: 0033:0x4665d9
[  189.981531][T25986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  190.001144][T25986] RSP: 002b:00007f96b65cc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  190.009535][T25986] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:15:53 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000640)=[{&(0x7f0000000140)="ac47dbcebf28565d1729a96dc5f3cb09a3840a816ada45a3fa5f934ee46f5cb0e0794ce42bec1576f211f50a04bb62abd54b7a2eda5673f5e47d3805a3986e9589dfacd0e03b6bceeb158367c96a8428a60a78056595ae15c7827e9081522b8d70f6e64d8e6049847226ba70020ea5e9ea511db48b8484ed6ca495abc9cc3af4a32b303cdb9b4e1300af048a05e6f650f145fa712ac818a1109ee2", 0x0, 0x8}, {&(0x7f0000000200)="f931de8202fde0a0d728b688f9c3dfd76c214dac3bf843db6941c87e4462d71ee961b64742e2dd52abf0b0bb45d5cf9e9aa95aae05089f394dc45610b6492f1b76a14563ecfe1560167a41733f7bf9314f00e484454572326fb7faefadb74e507584d1f2d6753b4b03330c3250f16237474d533872f77149bde2afdfdf52cd3d9801bcf4883d836faca2c10d876c26bc1ca5de5866a2b60f4de07f47ddfe88f5b08b841b09f3cc2b0e5ce881fd319c0731a3046d30bcab56f333", 0x0, 0xfffffffffffffffb}, {&(0x7f00000002c0)="382d1cf63023247ef965be7c8f86281601f5cfe73d6b200f25dbf4976a7cc5476873deb73e6275ded253ee1c9e5b4730a6133719e73448fdb661cbec78c1aadf7d870472c32085e7ef3d02c50b26a4b060d1f8af9dfa4af44707ecf911bfbab9a3a92411a727156ee55f7d4e951e8f3ffc86cf6255b148cef652c7400d1c9af991662de492c033a6ab", 0x0, 0x1}, {&(0x7f00000000c0)="443caad087ee9b15c9fa67cccfe7487548c19b17eff6defea63db0a4ba74f98f1f7c7b6798f580", 0x0, 0x4}, {&(0x7f0000000380)="0a56304a3c6b97253ec82fb12886a42a019fab998fe619e9ad65ed3bbd8f5fb6ded1c85b1552d07f9fedd71c32c6bcfaf3db03436b8b5949a3f905171da97977d6f0cb5bca48e654c3b926fcc75048ce740b647dd01656c47109ee", 0x0, 0x5}, {&(0x7f0000000400)="03176bc1f8327524cb8886cae3e5aba09edc68c2357767197741e978fb4b2c286c11e1232e6b9b11683a8a72f7f1c610742c9dccf441b0073a1bca72bbf1733210a9556ad6576a4d02edf0d64a2f73463e2896", 0x0, 0x4}, {&(0x7f0000000480)="542179c65a6ada4b99cf115a3b4db5eda3b885088ec5c1aa083e8274c7b512", 0x0, 0xfffffffffffffffb}, {&(0x7f00000004c0)="47398b705f16529dc2be47a43c08952284b9dff35838a77ceb9f88c3a4d5b0d7625f58b944e53021b1079474730465043652dba5e5e995d9e5fa58a11acb47029898a4463064eed82cb7b7c0afb6c3550ea188853f369adc85d48116317ec4ced9b9a6d75d7daf2c56097fe1c1c42a283d533b92a3377298064f958de1d03100ecba53860266331775c13d5b128249ac6aba21d14612f56ca8860ebf93702fbca7cf35ee44d34f9b74", 0x0, 0x4}, {&(0x7f0000000580)="9cce8c79229eccd014fe4f65987afe3d9123cdef19c0aa6df8975af8e3087528e09092d6f6669028f7855b521076dcb91de0d5f32b1ba632293bf37cc1f6017e116481045a58f1af80da1c7930e70c4cc61dcb5e085cb7f2158acefc6bd996bfa2f7d685bb545e5a89bcd0065ff6ac3f4696610608c71d06fa3934a652e3d236a7c5b5090213dc83e8f115b10e6c96cb321ae49bd8", 0x0, 0x10000}], 0x22491, &(0x7f0000000180)=ANY=[])
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000740)='./bus\x00', 0xc00000c3)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x3000000000000}, 0x0)

23:15:53 executing program 2 (fault-call:2 fault-nth:3):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  190.017484][T25986] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  190.025445][T25986] RBP: 00007f96b65cc1d0 R08: 0000000000000000 R09: 0000000000000000
[  190.033456][T25986] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001
[  190.041406][T25986] R13: 00007ffc2e479a2f R14: 00007f96b65cc300 R15: 0000000000022000
23:15:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0)

23:15:53 executing program 0 (fault-call:2 fault-nth:9):
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:53 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x7ffff000)
truncate(0x0, 0xff6)

[  190.094709][T25998] FAULT_INJECTION: forcing a failure.
[  190.094709][T25998] name failslab, interval 1, probability 0, space 0, times 0
[  190.107426][T25998] CPU: 0 PID: 25998 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  190.116183][T25998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  190.126241][T25998] Call Trace:
[  190.129514][T25998]  dump_stack+0x137/0x19d
[  190.133848][T25998]  should_fail+0x23c/0x250
[  190.138268][T25998]  __should_failslab+0x81/0x90
[  190.143024][T25998]  should_failslab+0x5/0x20
[  190.147513][T25998]  kmem_cache_alloc_node_trace+0x58/0x2e0
[  190.151082][T25997] loop3: detected capacity change from 0 to 16
[  190.153233][T25998]  ? __kmalloc_node_track_caller+0x30/0x40
[  190.165166][T25998]  ? kmem_cache_alloc_node+0x1da/0x2b0
[  190.170636][T25998]  __kmalloc_node_track_caller+0x30/0x40
[  190.176321][T25998]  ? netlink_sendmsg+0x4c7/0x7c0
[  190.181255][T25998]  __alloc_skb+0x187/0x420
[  190.185676][T25998]  netlink_sendmsg+0x4c7/0x7c0
[  190.189868][T25999] loop5: detected capacity change from 0 to 16383
[  190.190476][T25998]  ? netlink_getsockopt+0x720/0x720
[  190.202095][T25998]  ____sys_sendmsg+0x360/0x4d0
[  190.206861][T25998]  ? import_iovec+0x69/0x80
[  190.211362][T25998]  __sys_sendmsg+0x1ed/0x270
[  190.215938][T25998]  ? __fsnotify_parent+0x32f/0x430
[  190.221049][T25998]  ? get_pid_task+0x8b/0xc0
[  190.225597][T25998]  ? vfs_write+0x50c/0x770
[  190.229995][T25998]  ? __fget_light+0x21b/0x260
[  190.234653][T25998]  ? __cond_resched+0x11/0x40
[  190.239312][T25998]  ? fput+0x2d/0x130
[  190.243243][T25998]  ? ksys_write+0x157/0x180
[  190.247723][T25998]  __x64_sys_sendmsg+0x42/0x50
[  190.252470][T25998]  do_syscall_64+0x4a/0x90
[  190.256871][T25998]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  190.262774][T25998] RIP: 0033:0x4665d9
[  190.266650][T25998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  190.286244][T25998] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
23:15:53 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001)

23:15:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x100000000000000}, 0x0)

23:15:53 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  190.294668][T25998] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  190.302672][T25998] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  190.310625][T25998] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  190.318581][T25998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.326531][T25998] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
23:15:53 executing program 2 (fault-call:2 fault-nth:4):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0)

[  190.435344][T26036] FAULT_INJECTION: forcing a failure.
[  190.435344][T26036] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  190.438291][T26034] loop3: detected capacity change from 0 to 16
[  190.448445][T26036] CPU: 0 PID: 26036 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  190.458578][T25999] loop5: detected capacity change from 0 to 16383
[  190.463343][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  190.463355][T26036] Call Trace:
23:15:53 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7ffff000)

[  190.463362][T26036]  dump_stack+0x137/0x19d
[  190.463384][T26036]  should_fail+0x23c/0x250
[  190.463401][T26036]  should_fail_usercopy+0x16/0x20
[  190.496815][T26036]  _copy_from_iter_full+0x148/0xa10
[  190.502068][T26036]  ? check_stack_object+0x61/0x70
[  190.507095][T26036]  ? __virt_addr_valid+0x15a/0x1a0
[  190.512208][T26036]  ? __check_object_size+0x253/0x310
[  190.517607][T26036]  netlink_sendmsg+0x579/0x7c0
[  190.522419][T26036]  ? netlink_getsockopt+0x720/0x720
[  190.527616][T26036]  ____sys_sendmsg+0x360/0x4d0
[  190.532505][T26036]  ? import_iovec+0x69/0x80
[  190.537034][T26036]  __sys_sendmsg+0x1ed/0x270
[  190.541609][T26036]  ? __fsnotify_parent+0x32f/0x430
[  190.546708][T26036]  ? get_pid_task+0x8b/0xc0
[  190.551196][T26036]  ? vfs_write+0x50c/0x770
[  190.555611][T26036]  ? __fget_light+0x21b/0x260
[  190.560270][T26036]  ? __cond_resched+0x11/0x40
[  190.564944][T26036]  ? fput+0x2d/0x130
[  190.568884][T26036]  ? ksys_write+0x157/0x180
[  190.573387][T26036]  __x64_sys_sendmsg+0x42/0x50
[  190.578200][T26036]  do_syscall_64+0x4a/0x90
[  190.582595][T26036]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  190.588564][T26036] RIP: 0033:0x4665d9
[  190.592440][T26036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  190.612139][T26036] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.620635][T26036] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  190.628586][T26036] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  190.636538][T26036] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  190.644539][T26036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.652501][T26036] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
23:15:54 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x20)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x4040, 0x25)
sendfile(r1, r2, 0x0, 0x80000001)
preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000001300)=""/145, 0x91}], 0x6, 0x9, 0x7)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
preadv(r3, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/200, 0xc8}, {&(0x7f00000014c0)=""/89, 0x59}, {&(0x7f0000001540)=""/145, 0x91}], 0x3, 0x8, 0x8)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
open(&(0x7f0000001600)='./bus\x00', 0x200000, 0x118)

23:15:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000002)
truncate(0x0, 0xff6)

23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x300000000000000}, 0x0)

23:15:54 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xffffffffffffffff)

23:15:54 executing program 2 (fault-call:2 fault-nth:5):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:54 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  190.752573][T26069] FAULT_INJECTION: forcing a failure.
[  190.752573][T26069] name failslab, interval 1, probability 0, space 0, times 0
[  190.765381][T26069] CPU: 0 PID: 26069 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  190.774194][T26069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  190.775109][T26068] loop3: detected capacity change from 0 to 16
[  190.784240][T26069] Call Trace:
[  190.784250][T26069]  dump_stack+0x137/0x19d
[  190.798073][T26069]  should_fail+0x23c/0x250
[  190.802486][T26069]  ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0
[  190.808885][T26069]  __should_failslab+0x81/0x90
[  190.813686][T26069]  should_failslab+0x5/0x20
[  190.818186][T26069]  __kmalloc+0x66/0x340
[  190.822347][T26069]  ? selinux_capable+0x34/0x40
[  190.827127][T26069]  genl_family_rcv_msg_attrs_parse+0x75/0x1a0
[  190.833242][T26069]  ? ns_capable+0x86/0xb0
[  190.837566][T26069]  genl_rcv_msg+0x5aa/0x800
[  190.842111][T26069]  ? avc_has_perm_noaudit+0x19a/0x240
23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x400000000000000}, 0x0)

23:15:54 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040))
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:54 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

[  190.847616][T26069]  ? ethnl_cable_test_fault_length+0x200/0x200
[  190.853770][T26069]  ? rhashtable_jhash2+0x13a/0x1a0
[  190.858889][T26069]  netlink_rcv_skb+0x13e/0x240
[  190.863728][T26069]  ? genl_bind+0x1d0/0x1d0
[  190.868237][T26069]  genl_rcv+0x24/0x40
[  190.872251][T26069]  netlink_unicast+0x5ec/0x6b0
[  190.877086][T26069]  netlink_sendmsg+0x6f8/0x7c0
[  190.881859][T26069]  ? netlink_getsockopt+0x720/0x720
[  190.884832][T26073] loop5: detected capacity change from 0 to 16
[  190.887047][T26069]  ____sys_sendmsg+0x360/0x4d0
[  190.887067][T26069]  ? import_iovec+0x69/0x80
23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x500000000000000}, 0x0)

23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x600000000000000}, 0x0)

[  190.887085][T26069]  __sys_sendmsg+0x1ed/0x270
[  190.907014][T26069]  ? __fsnotify_parent+0x32f/0x430
[  190.912149][T26069]  ? get_pid_task+0x8b/0xc0
[  190.916697][T26069]  ? vfs_write+0x50c/0x770
[  190.921119][T26069]  ? __fget_light+0x21b/0x260
[  190.925785][T26069]  ? __cond_resched+0x11/0x40
[  190.930499][T26069]  ? fput+0x2d/0x130
[  190.934479][T26069]  ? ksys_write+0x157/0x180
[  190.934499][T26069]  __x64_sys_sendmsg+0x42/0x50
[  190.934540][T26069]  do_syscall_64+0x4a/0x90
23:15:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000003)
truncate(0x0, 0xff6)

[  190.934561][T26069]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  190.934580][T26069] RIP: 0033:0x4665d9
[  190.934591][T26069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  190.934612][T26069] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.934677][T26069] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  190.934687][T26069] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  190.934696][T26069] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  190.934706][T26069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
23:15:54 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffffffffffff000)

23:15:54 executing program 2 (fault-call:2 fault-nth:6):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x700000000000000}, 0x0)

23:15:54 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)

23:15:54 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  190.934714][T26069] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
[  191.038972][T26103] loop3: detected capacity change from 0 to 16
23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x900000000000000}, 0x0)

[  191.127136][T26127] FAULT_INJECTION: forcing a failure.
[  191.127136][T26127] name failslab, interval 1, probability 0, space 0, times 0
[  191.139770][T26127] CPU: 0 PID: 26127 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  191.148629][T26127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  191.158678][T26127] Call Trace:
[  191.161968][T26127]  dump_stack+0x137/0x19d
[  191.166284][T26127]  should_fail+0x23c/0x250
[  191.170694][T26127]  __should_failslab+0x81/0x90
23:15:54 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000004)
truncate(0x0, 0xff6)

23:15:54 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046)

[  191.175465][T26127]  should_failslab+0x5/0x20
[  191.179967][T26127]  kmem_cache_alloc_node+0x58/0x2b0
[  191.185190][T26127]  ? __alloc_skb+0xed/0x420
[  191.189703][T26127]  __alloc_skb+0xed/0x420
[  191.194068][T26127]  netlink_ack+0x292/0x690
[  191.198480][T26127]  netlink_rcv_skb+0x1b7/0x240
[  191.203331][T26127]  ? genl_bind+0x1d0/0x1d0
[  191.207770][T26127]  genl_rcv+0x24/0x40
[  191.211819][T26127]  netlink_unicast+0x5ec/0x6b0
[  191.216586][T26127]  netlink_sendmsg+0x6f8/0x7c0
[  191.221347][T26127]  ? netlink_getsockopt+0x720/0x720
[  191.226598][T26127]  ____sys_sendmsg+0x360/0x4d0
[  191.231391][T26127]  ? import_iovec+0x69/0x80
[  191.235885][T26127]  __sys_sendmsg+0x1ed/0x270
[  191.240462][T26127]  ? __fsnotify_parent+0x32f/0x430
[  191.245571][T26127]  ? get_pid_task+0x8b/0xc0
[  191.250135][T26127]  ? vfs_write+0x50c/0x770
[  191.253924][T26144] loop5: detected capacity change from 0 to 16
[  191.254560][T26127]  ? __fget_light+0x21b/0x260
[  191.265390][T26127]  ? __cond_resched+0x11/0x40
[  191.270058][T26127]  ? fput+0x2d/0x130
[  191.273945][T26127]  ? ksys_write+0x157/0x180
[  191.278438][T26127]  __x64_sys_sendmsg+0x42/0x50
[  191.283186][T26127]  do_syscall_64+0x4a/0x90
[  191.287648][T26127]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  191.293526][T26127] RIP: 0033:0x4665d9
[  191.297471][T26127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  191.317089][T26127] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
23:15:54 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
lsetxattr$security_evm(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100), &(0x7f0000000180)=@md5={0x1, "94f25e90d50367de8ba883c839300903"}, 0x11, 0x1)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
openat(r2, &(0x7f0000000000)='./bus\x00', 0x541200, 0x30)
sendfile(r0, r1, 0x0, 0x4000000000010046)
openat(r1, &(0x7f0000000080)='./bus\x00', 0x408380, 0x92)

23:15:54 executing program 2 (fault-call:2 fault-nth:7):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  191.325483][T26127] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  191.333435][T26127] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  191.341382][T26127] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  191.349331][T26127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.357278][T26127] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x8000000000000000}, 0x0)

23:15:54 executing program 3 (fault-call:5 fault-nth:0):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9effffff00000000}, 0x0)

23:15:54 executing program 0:
rmdir(&(0x7f0000000080)='./bus\x00')
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/126, 0x7e}], 0x1, 0x8, 0x80000000)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
sendfile(r1, r2, &(0x7f0000001200)=0x8, 0x2)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
dup(r3)
dup3(r2, r0, 0x0)

[  191.394910][T26156] loop3: detected capacity change from 0 to 16
23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xda03000000000000}, 0x0)

23:15:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xefffffff00000000}, 0x0)

[  191.460055][T26168] FAULT_INJECTION: forcing a failure.
[  191.460055][T26168] name failslab, interval 1, probability 0, space 0, times 0
[  191.472728][T26168] CPU: 1 PID: 26168 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  191.481480][T26168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  191.491562][T26168] Call Trace:
[  191.494835][T26168]  dump_stack+0x137/0x19d
[  191.499169][T26168]  should_fail+0x23c/0x250
[  191.503709][T26168]  __should_failslab+0x81/0x90
[  191.508466][T26168]  should_failslab+0x5/0x20
[  191.512972][T26168]  kmem_cache_alloc_node_trace+0x58/0x2e0
[  191.518692][T26168]  ? __kmalloc_node_track_caller+0x30/0x40
[  191.524528][T26168]  ? kmem_cache_alloc_node+0x1da/0x2b0
[  191.529987][T26168]  __kmalloc_node_track_caller+0x30/0x40
[  191.535618][T26168]  ? netlink_ack+0x292/0x690
[  191.540205][T26168]  __alloc_skb+0x187/0x420
[  191.544642][T26168]  netlink_ack+0x292/0x690
[  191.549093][T26168]  netlink_rcv_skb+0x1b7/0x240
[  191.553839][T26168]  ? genl_bind+0x1d0/0x1d0
[  191.558252][T26168]  genl_rcv+0x24/0x40
[  191.558329][T26168]  netlink_unicast+0x5ec/0x6b0
[  191.558346][T26168]  netlink_sendmsg+0x6f8/0x7c0
[  191.558363][T26168]  ? netlink_getsockopt+0x720/0x720
[  191.558381][T26168]  ____sys_sendmsg+0x360/0x4d0
[  191.558394][T26168]  ? import_iovec+0x69/0x80
[  191.586220][T26168]  __sys_sendmsg+0x1ed/0x270
[  191.590815][T26168]  ? __fsnotify_parent+0x32f/0x430
[  191.595941][T26168]  ? get_pid_task+0x8b/0xc0
[  191.600437][T26168]  ? vfs_write+0x50c/0x770
[  191.604959][T26168]  ? __fget_light+0x21b/0x260
[  191.609611][T26168]  ? __cond_resched+0x11/0x40
[  191.614263][T26168]  ? fput+0x2d/0x130
[  191.618140][T26168]  ? ksys_write+0x157/0x180
[  191.622613][T26168]  __x64_sys_sendmsg+0x42/0x50
[  191.627350][T26168]  do_syscall_64+0x4a/0x90
[  191.631755][T26168]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  191.637686][T26168] RIP: 0033:0x4665d9
23:15:55 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = signalfd4(r0, &(0x7f0000000140)={[0x803]}, 0x8, 0x80000)
renameat(r2, &(0x7f00000000c0)='./bus\x00', r3, &(0x7f0000000180)='./file0/file0\x00')
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xf0ffffff00000000}, 0x0)

[  191.641554][T26168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  191.661175][T26168] RSP: 002b:00007f7284931188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  191.669705][T26168] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  191.677656][T26168] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  191.685605][T26168] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  191.693554][T26168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.701622][T26168] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
[  191.742574][T26189] loop3: detected capacity change from 0 to 16
[  191.751720][T26189] FAULT_INJECTION: forcing a failure.
[  191.751720][T26189] name failslab, interval 1, probability 0, space 0, times 0
[  191.764410][T26189] CPU: 1 PID: 26189 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  191.773165][T26189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  191.783274][T26189] Call Trace:
[  191.786540][T26189]  dump_stack+0x137/0x19d
[  191.791035][T26189]  should_fail+0x23c/0x250
[  191.795446][T26189]  __should_failslab+0x81/0x90
[  191.800235][T26189]  ? alloc_pipe_info+0xac/0x350
[  191.805062][T26189]  should_failslab+0x5/0x20
[  191.809610][T26189]  kmem_cache_alloc_trace+0x49/0x310
[  191.814967][T26189]  alloc_pipe_info+0xac/0x350
[  191.819782][T26189]  splice_direct_to_actor+0x5f7/0x650
[  191.825211][T26189]  ? do_splice_direct+0x170/0x170
[  191.830265][T26189]  ? security_file_permission+0x87/0xa0
[  191.835783][T26189]  ? rw_verify_area+0x136/0x250
[  191.840608][T26189]  do_splice_direct+0xf5/0x170
[  191.845415][T26189]  do_sendfile+0x773/0xda0
[  191.849834][T26189]  __x64_sys_sendfile64+0xf2/0x130
[  191.854917][T26189]  do_syscall_64+0x4a/0x90
[  191.859328][T26189]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  191.865197][T26189] RIP: 0033:0x4665d9
[  191.869089][T26189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:15:55 executing program 3 (fault-call:5 fault-nth:1):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:55 executing program 2 (fault-call:2 fault-nth:8):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:55 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
splice(r0, &(0x7f0000000000)=0x200, r2, &(0x7f0000000080)=0x3f0, 0x0, 0x5)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
fcntl$setlease(r3, 0x400, 0x1)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x110, r4, 0xd00000)

23:15:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000005)
truncate(0x0, 0xff6)

23:15:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0)

23:15:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffffff00000000}, 0x0)

[  191.888745][T26189] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  191.897149][T26189] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  191.905116][T26189] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  191.913072][T26189] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  191.921016][T26189] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  191.928957][T26189] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  191.960023][T26200] FAULT_INJECTION: forcing a failure.
[  191.960023][T26200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  191.973147][T26200] CPU: 1 PID: 26200 Comm: syz-executor.2 Not tainted 5.13.0-rc4-syzkaller #0
[  191.982026][T26200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  191.992070][T26200] Call Trace:
[  191.995345][T26200]  dump_stack+0x137/0x19d
[  191.999677][T26200]  should_fail+0x23c/0x250
[  192.004084][T26200]  should_fail_usercopy+0x16/0x20
23:15:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0)

[  192.009186][T26200]  _copy_to_user+0x1c/0x90
[  192.013595][T26200]  simple_read_from_buffer+0xab/0x120
[  192.018973][T26200]  proc_fail_nth_read+0xf6/0x140
[  192.023973][T26200]  ? rw_verify_area+0x136/0x250
[  192.028832][T26200]  ? proc_fault_inject_write+0x200/0x200
[  192.034468][T26200]  vfs_read+0x154/0x5d0
[  192.038632][T26200]  ? __fget_light+0x21b/0x260
[  192.043328][T26200]  ? __cond_resched+0x11/0x40
[  192.048079][T26200]  ksys_read+0xce/0x180
[  192.052241][T26200]  __x64_sys_read+0x3e/0x50
23:15:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0)

[  192.056738][T26200]  do_syscall_64+0x4a/0x90
[  192.061222][T26200]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  192.061328][T26200] RIP: 0033:0x41935c
23:15:55 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  192.061351][T26200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  192.061364][T26200] RSP: 002b:00007f7284931170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  192.061378][T26200] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 000000000041935c
[  192.061387][T26200] RDX: 000000000000000f RSI: 00007f72849311e0 RDI: 0000000000000004
23:15:55 executing program 3 (fault-call:5 fault-nth:2):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0)

[  192.061395][T26200] RBP: 00007f72849311d0 R08: 0000000000000000 R09: 0000000000000000
[  192.061404][T26200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.061428][T26200] R13: 00007fff26d6f76f R14: 00007f7284931300 R15: 0000000000022000
[  192.069583][T26221] loop5: detected capacity change from 0 to 16
[  192.143338][T26231] loop3: detected capacity change from 0 to 16
23:15:55 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000006)
truncate(0x0, 0xff6)

[  192.168361][T26231] FAULT_INJECTION: forcing a failure.
[  192.168361][T26231] name failslab, interval 1, probability 0, space 0, times 0
[  192.168398][T26231] CPU: 1 PID: 26231 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  192.168416][T26231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  192.168482][T26231] Call Trace:
[  192.168488][T26231]  dump_stack+0x137/0x19d
[  192.168507][T26231]  should_fail+0x23c/0x250
[  192.168522][T26231]  ? kcalloc+0x32/0x40
[  192.168556][T26231]  __should_failslab+0x81/0x90
[  192.168577][T26231]  should_failslab+0x5/0x20
[  192.168631][T26231]  __kmalloc+0x66/0x340
[  192.168650][T26231]  ? kmem_cache_alloc_trace+0x215/0x310
[  192.168669][T26231]  ? alloc_pipe_info+0xac/0x350
[  192.168683][T26231]  kcalloc+0x32/0x40
[  192.168696][T26231]  alloc_pipe_info+0x1be/0x350
[  192.168710][T26231]  splice_direct_to_actor+0x5f7/0x650
[  192.168728][T26231]  ? do_splice_direct+0x170/0x170
[  192.168812][T26231]  ? security_file_permission+0x87/0xa0
[  192.168829][T26231]  ? rw_verify_area+0x136/0x250
[  192.168849][T26231]  do_splice_direct+0xf5/0x170
[  192.168863][T26231]  do_sendfile+0x773/0xda0
[  192.168877][T26231]  __x64_sys_sendfile64+0xf2/0x130
[  192.168889][T26231]  do_syscall_64+0x4a/0x90
[  192.168925][T26231]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  192.168946][T26231] RIP: 0033:0x4665d9
[  192.168958][T26231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  192.168974][T26231] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  192.169071][T26231] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  192.169080][T26231] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  192.169089][T26231] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  192.169098][T26231] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  192.169107][T26231] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  192.246251][T26246] loop5: detected capacity change from 0 to 16
[  192.304917][T26265] loop3: detected capacity change from 0 to 16
[  192.434247][T26274] FAULT_INJECTION: forcing a failure.
[  192.434247][T26274] name failslab, interval 1, probability 0, space 0, times 0
[  192.473980][T26274] CPU: 1 PID: 26274 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  192.473994][T26274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  192.474001][T26274] Call Trace:
[  192.474006][T26274]  dump_stack+0x137/0x19d
[  192.474022][T26274]  should_fail+0x23c/0x250
[  192.474066][T26274]  ? kmalloc_array+0x2d/0x40
[  192.474078][T26274]  __should_failslab+0x81/0x90
[  192.474092][T26274]  should_failslab+0x5/0x20
[  192.474102][T26274]  __kmalloc+0x66/0x340
[  192.474114][T26274]  ? splice_from_pipe+0xc0/0xc0
[  192.474125][T26274]  kmalloc_array+0x2d/0x40
[  192.474136][T26274]  iter_file_splice_write+0xc1/0x750
[  192.474154][T26274]  ? atime_needs_update+0x2ba/0x390
[  192.474166][T26274]  ? ext4_file_read_iter+0x1db/0x290
[  192.474180][T26274]  ? generic_file_splice_read+0x284/0x310
[  192.474191][T26274]  ? splice_from_pipe+0xc0/0xc0
[  192.474280][T26274]  direct_splice_actor+0x80/0xa0
[  192.474296][T26274]  splice_direct_to_actor+0x345/0x650
[  192.474308][T26274]  ? do_splice_direct+0x170/0x170
[  192.474329][T26274]  do_splice_direct+0xf5/0x170
[  192.474340][T26274]  do_sendfile+0x773/0xda0
[  192.474351][T26274]  __x64_sys_sendfile64+0xf2/0x130
[  192.474361][T26274]  do_syscall_64+0x4a/0x90
[  192.474374][T26274]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  192.474388][T26274] RIP: 0033:0x4665d9
23:15:56 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
sendfile(r1, r2, 0x0, 0x27)

23:15:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x5}, 0x0)

23:15:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:56 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d8266732e666174000201010002400080baa6ad", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20102, 0x94)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r3, 0x0, 0x80000001)
sendmsg(r2, &(0x7f0000000600)={&(0x7f0000000240)=@llc={0x1a, 0x201, 0x8, 0x6, 0x2, 0xfc, @multicast}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="b6b5c0a1f33a066b8e38018dc3e3ae7326aa784bb9ad493dbb37413546f8e4fbb12edfc25654035db9da832ad91d2cd3ab4a7bab23da6452a4c12c5dd806d18a4c2a65e338cbad2fe0fae960d368601abeaa0c38e5013290b2db61e79493c12f34cf9327b46d2311a72738335d2288c6124d26926ef675a9aff293bf1e8374e53604e8467d28e875429d5083dea54d7cfe2416bfa2511a3c38825f8b2993c096ff518b356bd253f861f684e02f15007f1b2c4414678224391608598d3c08c87c", 0xc0}, {&(0x7f00000003c0)="5af5d1451d77261f47e9ab565ff439353b3fc40d574c8d5dfdec281f1cd068daed81e80490248226eafb4da52c0b440f1cf1b950790b3bb6e1fd", 0x3a}], 0x2, &(0x7f0000000440)=[{0xc0, 0x109, 0xba81, "0f7aa0a9ca9273e1fe5f4b45caad3f970dacecdcaee685548011391313493be3c1d45c2435428b802c6cbf8b92f50be8a86ca25d46580948f24a375ba92b182f67eddd0897cb3d838754d544771ba5a5ee952595f1f1412f0a5d10ebbf57e6540ef2f1697bdcd7061f20671d67be1614101c9435d444ce3b856efa305aa34555f9a20e3fee191b16fff032e568e313f172aa9ba3e45aeb95b56fa2120a9d7401f3fd67a3fa3215a21fc7f0fc7888"}, {0x38, 0x104, 0x2, "bcd84fb3c29cc04c893bf24b50de141bda3c5a0cc36b8377d4909730eb4acef4760ea7db9a"}, {0x90, 0x1, 0x3, "4e22d46a310a9c92dad61a2f625edae4715b82eb872bf7653f2202f3fda6b460827b4f18c9170c09c3230003ef49447d0750c24161f8d367e545db7740945577b59a28a27b735219101b91fa8ea139943189fd589d5ef882ae46a54887b24accc0b1ccd74460ff02f7f01da29ea98b0544ef168cd6d13bff5318"}, {0x38, 0x84, 0x1e, "0550cb4fbf20d02cd131db63d8fbea4740db43e7bb6610e1f81f328e2930278d32"}], 0x1c0}, 0x400d0)
truncate(&(0x7f0000003800)='./bus\x00', 0xb)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = open(&(0x7f00000001c0)='./bus\x00', 0x2000, 0x10)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x100010, r3, 0x25977000)
r6 = accept4$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x180800)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r5, 0x0, r0, 0x2, 0x0, 0x0, {0x0, r7}}, 0x6)

23:15:56 executing program 3 (fault-call:5 fault-nth:3):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:56 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000007)
truncate(0x0, 0xff6)

[  192.474396][T26274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  192.474485][T26274] RSP: 002b:00007f1c2ed59188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  192.474496][T26274] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  192.474503][T26274] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  192.474509][T26274] RBP: 00007f1c2ed591d0 R08: 0000000000000000 R09: 0000000000000000
[  192.474521][T26274] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  192.474528][T26274] R13: 00007ffcaa0c27cf R14: 00007f1c2ed59300 R15: 0000000000022000
[  192.724169][T26293] loop3: detected capacity change from 0 to 16
[  192.746719][T26293] FAULT_INJECTION: forcing a failure.
[  192.746719][T26293] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  192.751546][T26298] loop5: detected capacity change from 0 to 16
23:15:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x6}, 0x0)

23:15:56 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
truncate(&(0x7f0000000000)='./bus\x00', 0x100000001)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
sendfile(r1, r0, &(0x7f0000000080)=0x1000, 0xbd)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x4000000000010046)

23:15:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  192.759988][T26293] CPU: 1 PID: 26293 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  192.768223][T26298] FAT-fs (loop5): invalid media value (0xa6)
[  192.774865][T26293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  192.774878][T26293] Call Trace:
[  192.774885][T26293]  dump_stack+0x137/0x19d
[  192.780861][T26298] FAT-fs (loop5): Can't find a valid FAT filesystem
[  192.790898][T26293]  should_fail+0x23c/0x250
[  192.790921][T26293]  __alloc_pages+0x102/0x320
[  192.814015][T26293]  alloc_pages+0x21d/0x310
[  192.818422][T26293]  __page_cache_alloc+0x4d/0xf0
[  192.823267][T26293]  pagecache_get_page+0x5f4/0x900
[  192.828306][T26293]  ? mod_delayed_work_on+0x9d/0xd0
[  192.833501][T26293]  grab_cache_page_write_begin+0x3f/0x70
[  192.839120][T26293]  cont_write_begin+0x501/0x850
[  192.843952][T26293]  fat_write_begin+0x61/0xf0
[  192.848521][T26293]  ? fat_block_truncate_page+0x30/0x30
[  192.853960][T26293]  generic_perform_write+0x196/0x3a0
[  192.859223][T26293]  ? file_update_time+0x3ae/0x3e0
[  192.864227][T26293]  __generic_file_write_iter+0x202/0x300
[  192.869837][T26293]  ? generic_write_checks+0x250/0x290
[  192.875202][T26293]  generic_file_write_iter+0x75/0x130
[  192.880580][T26293]  do_iter_readv_writev+0x2cb/0x360
[  192.885761][T26293]  do_iter_write+0x112/0x4c0
[  192.890344][T26293]  ? kmalloc_array+0x2d/0x40
[  192.894911][T26293]  vfs_iter_write+0x4c/0x70
[  192.899387][T26293]  iter_file_splice_write+0x40a/0x750
[  192.904795][T26293]  ? splice_from_pipe+0xc0/0xc0
[  192.909663][T26293]  direct_splice_actor+0x80/0xa0
[  192.914611][T26293]  splice_direct_to_actor+0x345/0x650
[  192.920035][T26293]  ? do_splice_direct+0x170/0x170
23:15:56 executing program 3 (fault-call:5 fault-nth:4):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:56 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
inotify_init()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x4010, r3, 0xb0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
read(r3, &(0x7f0000000000)=""/25, 0x19)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x4010, r2, 0x56d86000)
r4 = syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x1f, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="3c6267130609fa265144b1c7fdbbaa4ff76efa2435f57044aa324a3d4c1abb9ce844ad81232b8ed9bbf42444cb9bd7c75773125d4f07fa56376c251d0e8050608f7cb6061ddaec8be50c97d9a07d2295b69ec49857faa99a8230e339ea377bc0eb87db48227e158bea7fef11eeb8cdb41f27cb30243ed67e1df1958e22d50fe5cfbb6aa0d2b192a008df54dd0425c7b7682deae1053ea6d96d26dd0b81c455716f275f2b44868d10ca492b0e6c1881104668793d06cf721c9cb112fd9781e953f2789ff6b5f3d2333ca6b12f9b795e4eff68a4c571b0393227714fc07db6439000d6b8220042f99d673972344f2331fae836687df997", 0xf6, 0x8}, {&(0x7f0000000280)="24686397938825161f08b5656fb21215eb9e6288905f1ca57a12950796e5132918a20b3568fd8b4dda938c47c51907970f44ff270367b7e6c02ff339adc024affa5ca0b2b3bec7df6b0df41a3d952bbb9a495a56be87ce18742aaf32a61bf7fe88f5ebc0a4e881f0b2307fb4dbeaf6f0a3e2c6332a6a1a694ae86eae34c72fae096d03283db9a0ae4b0517c498f9b9e22cc490129f5e3b20c099fe8cb0f72fbac2d6f69f964505f928decb4d1af6573057d0192311bbc37d3b5ea1629649e518591d65", 0xc3, 0x9}], 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB='/dev/vcsa\x00,,&+,/dev/vcsa\x00,/proc/timer_list\x00,obj_type=)@&,obj_type=^/$,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736861743d2f6465762f76637361f9415041002c6d626a5f74797065bd2c212d2d287b40ec17188c52000001004060de0315eee684e48be347931d7d502ab16fdc50a6cc33f97b80235413438f5a147d54843c67de6751b399bc2519a3ff000000000000000078bdce2dc45e1d5de938402698d1c1ecbc0f8705509aa68825dca87d238aa8cab9438e7560e5da7e0a97fb7c479e7ed3ec95ce2ca924ec5651481735b3c301cb40be5a39c16cc2ecc26328314fcd0ff4b2373c93534ac3dce9e108b6264419213df6c0034227f74e75596883ef843239c9a84a2db1498131bdfd49b472f35cf91500"/248])
tee(r1, r4, 0x3f, 0x6)

[  192.925099][T26293]  do_splice_direct+0xf5/0x170
[  192.929840][T26293]  do_sendfile+0x773/0xda0
[  192.934289][T26293]  __x64_sys_sendfile64+0xf2/0x130
[  192.939380][T26293]  do_syscall_64+0x4a/0x90
[  192.943828][T26293]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  192.943845][T26293] RIP: 0033:0x4665d9
23:15:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x7}, 0x0)

[  192.943853][T26293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:15:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:56 executing program 3 (fault-call:5 fault-nth:5):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  192.943863][T26293] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  192.943874][T26293] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  192.943881][T26293] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  192.943888][T26293] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  192.943894][T26293] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  192.943901][T26293] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  193.055186][T26332] loop3: detected capacity change from 0 to 16
[  193.058696][T26332] FAULT_INJECTION: forcing a failure.
[  193.058696][T26332] name failslab, interval 1, probability 0, space 0, times 0
[  193.058770][T26332] CPU: 0 PID: 26332 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  193.058804][T26332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  193.058815][T26332] Call Trace:
[  193.058822][T26332]  dump_stack+0x137/0x19d
[  193.058840][T26332]  should_fail+0x23c/0x250
[  193.058854][T26332]  ? fat_cache_add+0x219/0x570
[  193.058873][T26332]  __should_failslab+0x81/0x90
[  193.058947][T26332]  should_failslab+0x5/0x20
[  193.058964][T26332]  kmem_cache_alloc+0x46/0x2f0
[  193.058984][T26332]  fat_cache_add+0x219/0x570
[  193.059002][T26332]  fat_get_cluster+0x58e/0x870
[  193.059036][T26332]  ? __brelse+0x2c/0x50
[  193.059060][T26332]  fat_get_mapped_cluster+0xd0/0x250
[  193.059079][T26332]  fat_bmap+0x258/0x290
[  193.059092][T26332]  fat_get_block+0x36d/0x5a0
[  193.059111][T26332]  __block_write_begin_int+0x4a2/0x1060
[  193.059132][T26332]  ? fat_block_truncate_page+0x30/0x30
[  193.059153][T26332]  ? wait_for_stable_page+0x56/0x70
[  193.059171][T26332]  cont_write_begin+0x522/0x850
[  193.059187][T26332]  fat_write_begin+0x61/0xf0
[  193.059202][T26332]  ? fat_block_truncate_page+0x30/0x30
[  193.059225][T26332]  generic_perform_write+0x196/0x3a0
[  193.059243][T26332]  ? file_update_time+0x3ae/0x3e0
[  193.059263][T26332]  __generic_file_write_iter+0x202/0x300
[  193.059287][T26332]  ? generic_write_checks+0x250/0x290
[  193.059308][T26332]  generic_file_write_iter+0x75/0x130
[  193.059386][T26332]  do_iter_readv_writev+0x2cb/0x360
[  193.059406][T26332]  do_iter_write+0x112/0x4c0
[  193.059423][T26332]  ? kmalloc_array+0x2d/0x40
[  193.059441][T26332]  vfs_iter_write+0x4c/0x70
[  193.059453][T26332]  iter_file_splice_write+0x40a/0x750
[  193.059469][T26332]  ? splice_from_pipe+0xc0/0xc0
[  193.059482][T26332]  direct_splice_actor+0x80/0xa0
[  193.059571][T26332]  splice_direct_to_actor+0x345/0x650
[  193.059592][T26332]  ? do_splice_direct+0x170/0x170
[  193.059610][T26332]  do_splice_direct+0xf5/0x170
[  193.059627][T26332]  do_sendfile+0x773/0xda0
[  193.059644][T26332]  __x64_sys_sendfile64+0xf2/0x130
[  193.059659][T26332]  do_syscall_64+0x4a/0x90
[  193.059679][T26332]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  193.059759][T26332] RIP: 0033:0x4665d9
[  193.059772][T26332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  193.059804][T26332] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  193.059818][T26332] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  193.059827][T26332] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  193.059836][T26332] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  193.059844][T26332] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  193.059853][T26332] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  193.066383][T26332] attempt to access beyond end of device
[  193.066383][T26332] loop3: rw=2049, want=122, limit=16
[  193.066402][T26332] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  193.066419][T26332] attempt to access beyond end of device
[  193.066419][T26332] loop3: rw=2049, want=123, limit=16
[  193.066433][T26332] Buffer I/O error on dev loop3, logical block 122, lost async page write
[  193.066449][T26332] attempt to access beyond end of device
[  193.066449][T26332] loop3: rw=2049, want=124, limit=16
[  193.066509][T26332] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  193.066524][T26332] attempt to access beyond end of device
[  193.066524][T26332] loop3: rw=2049, want=125, limit=16
[  193.066539][T26332] Buffer I/O error on dev loop3, logical block 124, lost async page write
[  193.066553][T26332] attempt to access beyond end of device
[  193.066553][T26332] loop3: rw=2049, want=126, limit=16
[  193.066568][T26332] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  193.066583][T26332] attempt to access beyond end of device
[  193.066583][T26332] loop3: rw=2049, want=127, limit=16
[  193.066597][T26332] Buffer I/O error on dev loop3, logical block 126, lost async page write
[  193.066694][T26332] attempt to access beyond end of device
[  193.066694][T26332] loop3: rw=2049, want=128, limit=16
[  193.066710][T26332] Buffer I/O error on dev loop3, logical block 127, lost async page write
[  193.162516][T26352] loop3: detected capacity change from 0 to 16
[  193.171901][T26354] nfs: Unknown parameter '/dev/vcsa'
[  193.194399][T26298] loop5: detected capacity change from 0 to 16
[  193.198971][T26352] FAULT_INJECTION: forcing a failure.
[  193.198971][T26352] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  193.202718][T26298] FAT-fs (loop5): Unrecognized mount option "" or missing value
[  193.205062][T26352] CPU: 1 PID: 26352 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  193.205083][T26352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  193.645630][T26352] Call Trace:
[  193.645638][T26352]  dump_stack+0x137/0x19d
[  193.645654][T26352]  should_fail+0x23c/0x250
[  193.645664][T26352]  __alloc_pages+0x102/0x320
[  193.645676][T26352]  alloc_pages+0x21d/0x310
[  193.645756][T26352]  __page_cache_alloc+0x4d/0xf0
[  193.645818][T26352]  pagecache_get_page+0x5f4/0x900
[  193.645830][T26352]  grab_cache_page_write_begin+0x3f/0x70
[  193.645842][T26352]  cont_write_begin+0x501/0x850
[  193.645855][T26352]  fat_write_begin+0x61/0xf0
[  193.645867][T26352]  ? fat_block_truncate_page+0x30/0x30
[  193.645896][T26352]  generic_perform_write+0x196/0x3a0
[  193.645908][T26352]  ? fat_write_begin+0xf0/0xf0
[  193.645919][T26352]  __generic_file_write_iter+0x202/0x300
[  193.645949][T26352]  ? generic_write_checks+0x250/0x290
[  193.645960][T26352]  generic_file_write_iter+0x75/0x130
[  193.645972][T26352]  do_iter_readv_writev+0x2cb/0x360
[  193.646053][T26352]  do_iter_write+0x112/0x4c0
[  193.646062][T26352]  ? kmalloc_array+0x2d/0x40
[  193.646073][T26352]  vfs_iter_write+0x4c/0x70
[  193.646082][T26352]  iter_file_splice_write+0x40a/0x750
[  193.646095][T26352]  ? splice_from_pipe+0xc0/0xc0
[  193.646162][T26352]  direct_splice_actor+0x80/0xa0
[  193.646173][T26352]  splice_direct_to_actor+0x345/0x650
[  193.646185][T26352]  ? do_splice_direct+0x170/0x170
[  193.646250][T26352]  do_splice_direct+0xf5/0x170
[  193.646261][T26352]  do_sendfile+0x773/0xda0
[  193.646271][T26352]  __x64_sys_sendfile64+0xf2/0x130
[  193.646281][T26352]  do_syscall_64+0x4a/0x90
[  193.646299][T26352]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  193.646347][T26352] RIP: 0033:0x4665d9
[  193.646355][T26352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  193.646365][T26352] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  193.646376][T26352] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  193.646383][T26352] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  193.646390][T26352] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  193.646396][T26352] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  193.646403][T26352] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  193.655423][T26352] attempt to access beyond end of device
23:15:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x7f7f, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17, 0xfffffffffffffffd}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
removexattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)=@random={'os2.', 'vfat\x00'})
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00')

23:15:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000008)
truncate(0x0, 0xff6)

23:15:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9}, 0x0)

23:15:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:57 executing program 3 (fault-call:5 fault-nth:6):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  193.655423][T26352] loop3: rw=2049, want=121, limit=16
[  193.655539][T26352] attempt to access beyond end of device
[  193.655539][T26352] loop3: rw=2049, want=122, limit=16
[  193.655621][T26352] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  193.655633][T26352] attempt to access beyond end of device
[  193.655633][T26352] loop3: rw=2049, want=123, limit=16
[  193.655642][T26352] Buffer I/O error on dev loop3, logical block 122, lost async page write
23:15:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0)

23:15:57 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RELDISP(r2, 0x5605)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  193.655652][T26352] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  193.941148][T26371] nfs: Unknown parameter '/dev/vcsa'
[  194.002350][T26383] loop3: detected capacity change from 0 to 16
[  194.035202][T26383] FAULT_INJECTION: forcing a failure.
[  194.035202][T26383] name failslab, interval 1, probability 0, space 0, times 0
23:15:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x7, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3da}, 0x0)

[  194.047844][T26383] CPU: 0 PID: 26383 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  194.056603][T26383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  194.066654][T26383] Call Trace:
[  194.069936][T26383]  dump_stack+0x137/0x19d
[  194.074340][T26383]  should_fail+0x23c/0x250
[  194.074361][T26383]  ? xas_create+0x3fb/0xb30
[  194.074383][T26383]  __should_failslab+0x81/0x90
[  194.074405][T26383]  should_failslab+0x5/0x20
[  194.074418][T26383]  kmem_cache_alloc+0x46/0x2f0
[  194.074439][T26383]  xas_create+0x3fb/0xb30
23:15:57 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000009)
truncate(0x0, 0xff6)

23:15:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x9, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x500}, 0x0)

[  194.074477][T26383]  xas_store+0x70/0xca0
[  194.074498][T26383]  ? xas_find_conflict+0x422/0x4c0
[  194.110918][T26383]  __add_to_page_cache_locked+0x1eb/0x4e0
[  194.116639][T26383]  ? workingset_activation+0x270/0x270
[  194.122097][T26383]  add_to_page_cache_lru+0xa0/0x1b0
[  194.122167][T26383]  pagecache_get_page+0x6a3/0x900
[  194.122185][T26383]  grab_cache_page_write_begin+0x3f/0x70
[  194.122244][T26383]  cont_write_begin+0x501/0x850
[  194.122261][T26383]  fat_write_begin+0x61/0xf0
[  194.122279][T26383]  ? fat_block_truncate_page+0x30/0x30
[  194.122304][T26383]  generic_perform_write+0x196/0x3a0
[  194.122321][T26383]  ? fat_write_begin+0xf0/0xf0
[  194.122337][T26383]  __generic_file_write_iter+0x202/0x300
[  194.122434][T26383]  ? generic_write_checks+0x250/0x290
23:15:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x60800, 0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4001, 0x3)
chdir(&(0x7f00000000c0)='./file0\x00')
open(&(0x7f0000000180)='./file0\x00', 0x200400, 0x8)

23:15:57 executing program 3 (fault-call:5 fault-nth:7):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x600}, 0x0)

23:15:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x300, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  194.122452][T26383]  generic_file_write_iter+0x75/0x130
[  194.122472][T26383]  do_iter_readv_writev+0x2cb/0x360
[  194.122491][T26383]  do_iter_write+0x112/0x4c0
[  194.122504][T26383]  ? kmalloc_array+0x2d/0x40
[  194.122519][T26383]  vfs_iter_write+0x4c/0x70
[  194.122583][T26383]  iter_file_splice_write+0x40a/0x750
[  194.122601][T26383]  ? splice_from_pipe+0xc0/0xc0
[  194.122653][T26383]  direct_splice_actor+0x80/0xa0
[  194.122671][T26383]  splice_direct_to_actor+0x345/0x650
[  194.122688][T26383]  ? do_splice_direct+0x170/0x170
[  194.122707][T26383]  do_splice_direct+0xf5/0x170
[  194.122774][T26383]  do_sendfile+0x773/0xda0
23:15:57 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x43c0, 0x0)
mknodat(r3, &(0x7f00000003c0)='./bus\x00', 0x8000, 0xcb6)
preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/179, 0xb3}, {}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/32, 0x20}], 0x5, 0x8, 0x6)

23:15:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x700}, 0x0)

[  194.122791][T26383]  __x64_sys_sendfile64+0xf2/0x130
[  194.122854][T26383]  do_syscall_64+0x4a/0x90
[  194.122996][T26383]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  194.123020][T26383] RIP: 0033:0x4665d9
[  194.123033][T26383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  194.123049][T26383] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
23:15:57 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:15:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x500, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  194.123067][T26383] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  194.123077][T26383] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  194.123085][T26383] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  194.123094][T26383] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  194.123176][T26383] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  194.134605][T26390] loop5: detected capacity change from 0 to 16383
[  194.136711][T26390] FAT-fs (loop5): Unrecognized mount option "vfat" or missing value
23:15:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x900}, 0x0)

[  194.202668][T26390] loop5: detected capacity change from 0 to 16383
[  194.202957][T26390] FAT-fs (loop5): Unrecognized mount option "vfat" or missing value
[  194.302630][T26444] loop5: detected capacity change from 0 to 16
[  194.303982][T26442] loop3: detected capacity change from 0 to 16
[  194.443060][T26459] FAULT_INJECTION: forcing a failure.
[  194.443060][T26459] name failslab, interval 1, probability 0, space 0, times 0
[  194.455701][T26459] CPU: 1 PID: 26459 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  194.464459][T26459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  194.474623][T26459] Call Trace:
[  194.477997][T26459]  dump_stack+0x137/0x19d
[  194.482342][T26459]  should_fail+0x23c/0x250
[  194.486760][T26459]  ? ext4_mb_new_blocks+0x2e7/0x1f90
[  194.492041][T26459]  __should_failslab+0x81/0x90
[  194.496805][T26459]  should_failslab+0x5/0x20
[  194.501442][T26459]  kmem_cache_alloc+0x46/0x2f0
[  194.506242][T26459]  ext4_mb_new_blocks+0x2e7/0x1f90
[  194.511359][T26459]  ? ext4_find_extent+0x6cf/0x7f0
[  194.516392][T26459]  ? ext4_ext_search_right+0x300/0x540
[  194.521867][T26459]  ? ext4_inode_to_goal_block+0x1bd/0x1d0
[  194.527709][T26459]  ext4_ext_map_blocks+0x1569/0x1f00
[  194.533020][T26459]  ? __down_read_common+0x16b/0x5a0
[  194.538196][T26459]  ? percpu_counter_add_batch+0x69/0xd0
[  194.544220][T26459]  ? ext4_es_lookup_extent+0x206/0x490
[  194.549691][T26459]  ext4_map_blocks+0x70d/0xef0
[  194.554555][T26459]  ? ext4_iomap_begin+0x3e2/0x620
[  194.559601][T26459]  ? __cond_resched+0x11/0x40
[  194.564280][T26459]  ext4_iomap_begin+0x4a3/0x620
[  194.569116][T26459]  iomap_apply+0x8d/0x400
[  194.573464][T26459]  ? ext4_xattr_get+0x27d/0x580
[  194.578319][T26459]  __iomap_dio_rw+0x5af/0xad0
[  194.582976][T26459]  ? __iomap_dio_rw+0xad0/0xad0
[  194.587820][T26459]  iomap_dio_rw+0x30/0x70
[  194.592141][T26459]  ? ext4_file_write_iter+0x4a1/0x11d0
[  194.597593][T26459]  ext4_file_write_iter+0xa4f/0x11d0
[  194.602988][T26459]  ? ext4_file_write_iter+0x4a1/0x11d0
[  194.608481][T26459]  do_iter_readv_writev+0x2cb/0x360
[  194.613658][T26459]  do_iter_write+0x112/0x4c0
[  194.618238][T26459]  ? kmalloc_array+0x2d/0x40
[  194.622813][T26459]  vfs_iter_write+0x4c/0x70
[  194.627311][T26459]  iter_file_splice_write+0x40a/0x750
[  194.632806][T26459]  ? splice_from_pipe+0xc0/0xc0
[  194.637631][T26459]  direct_splice_actor+0x80/0xa0
[  194.642543][T26459]  splice_direct_to_actor+0x345/0x650
[  194.647892][T26459]  ? do_splice_direct+0x170/0x170
[  194.652900][T26459]  do_splice_direct+0xf5/0x170
[  194.657641][T26459]  do_sendfile+0x773/0xda0
[  194.662060][T26459]  __x64_sys_sendfile64+0xf2/0x130
[  194.667150][T26459]  do_syscall_64+0x4a/0x90
[  194.671560][T26459]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  194.677435][T26459] RIP: 0033:0x4665d9
[  194.681305][T26459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  194.700890][T26459] RSP: 002b:00007f1c2ed59188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  194.709281][T26459] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  194.717258][T26459] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  194.725209][T26459] RBP: 00007f1c2ed591d0 R08: 0000000000000000 R09: 0000000000000000
[  194.733157][T26459] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  194.741117][T26459] R13: 00007ffcaa0c27cf R14: 00007f1c2ed59300 R15: 0000000000022000
23:15:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000000a)
truncate(0x0, 0xff6)

23:15:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x5f5, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xda03}, 0x0)

23:15:58 executing program 0:
unshare(0x600)
r0 = io_uring_setup(0x625c, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f0000000200)=[0xffffffffffffffff], 0x40000047)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000100))
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r5, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r5, &(0x7f0000000000)=""/25, 0x19)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r7=>r0, 0x797e, 0x9b39, 0x4})
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000240)=[r4, r5, r6, r7], 0x4)
sendfile(r1, r2, 0x0, 0x4000000000010046)

23:15:58 executing program 3 (fault-call:5 fault-nth:8):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  194.776275][T26478] loop5: detected capacity change from 0 to 16
23:15:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x600, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x30000}, 0x0)

23:15:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0x533, &(0x7f0000000980), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
r5 = dup(r2)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0)
r6 = syz_io_uring_setup(0x533, &(0x7f0000000980), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000240)=<r8=>0x0)
r9 = dup(r6)
syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0)
io_uring_enter(r9, 0x53ee, 0x9d5b, 0x3, &(0x7f00000001c0)={[0x2]}, 0x8)
syz_open_dev$loop(&(0x7f00000015c0), 0x7, 0x80000)
syz_io_uring_submit(r3, r8, &(0x7f00000016c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4004, @fd_index=0x6, 0x8000000085, 0x0, 0x0, 0x1, 0x0, {0x3}}, 0x1)
creat(&(0x7f00000000c0)='./bus\x00', 0x27)
sendfile(r0, r1, 0x0, 0x80000001)
preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001740)=""/47, 0x2f}, {&(0x7f0000001300)=""/136, 0x88}, {&(0x7f00000013c0)=""/203, 0xcb}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000001780)=""/231, 0xe7}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000001700)=""/15, 0xf}], 0x9, 0x6, 0x5)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  194.885055][T26498] loop3: detected capacity change from 0 to 16
[  194.898078][T26498] FAULT_INJECTION: forcing a failure.
[  194.898078][T26498] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  194.911346][T26498] CPU: 1 PID: 26498 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  194.920110][T26498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
23:15:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x700, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  194.920122][T26498] Call Trace:
[  194.920184][T26498]  dump_stack+0x137/0x19d
[  194.920209][T26498]  should_fail+0x23c/0x250
[  194.920250][T26498]  __alloc_pages+0x102/0x320
[  194.920335][T26498]  alloc_pages+0x21d/0x310
[  194.920351][T26498]  __page_cache_alloc+0x4d/0xf0
[  194.920369][T26498]  pagecache_get_page+0x5f4/0x900
[  194.920387][T26498]  grab_cache_page_write_begin+0x3f/0x70
[  194.920407][T26498]  cont_write_begin+0x501/0x850
[  194.920477][T26498]  fat_write_begin+0x61/0xf0
23:15:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x34000}, 0x0)

[  194.920559][T26498]  ? fat_block_truncate_page+0x30/0x30
[  194.920578][T26498]  generic_perform_write+0x196/0x3a0
[  194.920597][T26498]  ? fat_write_begin+0xf0/0xf0
[  194.920646][T26498]  __generic_file_write_iter+0x202/0x300
[  194.920665][T26498]  ? generic_write_checks+0x250/0x290
[  194.920700][T26498]  generic_file_write_iter+0x75/0x130
[  194.920796][T26498]  do_iter_readv_writev+0x2cb/0x360
23:15:58 executing program 3 (fault-call:5 fault-nth:9):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000000b)
truncate(0x0, 0xff6)

23:15:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x900, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:58 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:15:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x400300}, 0x0)

[  194.920815][T26498]  do_iter_write+0x112/0x4c0
[  194.920831][T26498]  ? kmalloc_array+0x2d/0x40
[  194.920848][T26498]  vfs_iter_write+0x4c/0x70
[  194.920864][T26498]  iter_file_splice_write+0x40a/0x750
[  194.920965][T26498]  ? splice_from_pipe+0xc0/0xc0
[  194.920983][T26498]  direct_splice_actor+0x80/0xa0
[  194.921001][T26498]  splice_direct_to_actor+0x345/0x650
[  194.921021][T26498]  ? do_splice_direct+0x170/0x170
[  194.921038][T26498]  do_splice_direct+0xf5/0x170
[  194.921055][T26498]  do_sendfile+0x773/0xda0
[  194.921071][T26498]  __x64_sys_sendfile64+0xf2/0x130
[  194.921112][T26498]  do_syscall_64+0x4a/0x90
[  194.921131][T26498]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  194.921177][T26498] RIP: 0033:0x4665d9
[  194.921190][T26498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  194.921243][T26498] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  194.921262][T26498] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  194.921274][T26498] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  194.921285][T26498] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  194.921314][T26498] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001
[  194.921326][T26498] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  195.025277][T26526] loop5: detected capacity change from 0 to 16
[  195.162554][T26558] loop3: detected capacity change from 0 to 16
[  195.165381][T26559] loop5: detected capacity change from 0 to 16
[  195.172226][T26558] FAULT_INJECTION: forcing a failure.
[  195.172226][T26558] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  195.172267][T26558] CPU: 1 PID: 26558 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  195.172300][T26558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  195.172307][T26558] Call Trace:
[  195.172314][T26558]  dump_stack+0x137/0x19d
[  195.172333][T26558]  should_fail+0x23c/0x250
[  195.172349][T26558]  __alloc_pages+0x102/0x320
[  195.172364][T26558]  alloc_pages+0x21d/0x310
[  195.172379][T26558]  __page_cache_alloc+0x4d/0xf0
[  195.172392][T26558]  pagecache_get_page+0x5f4/0x900
[  195.172490][T26558]  grab_cache_page_write_begin+0x3f/0x70
[  195.172538][T26558]  cont_write_begin+0x501/0x850
[  195.172551][T26558]  fat_write_begin+0x61/0xf0
[  195.172568][T26558]  ? fat_block_truncate_page+0x30/0x30
[  195.172586][T26558]  generic_perform_write+0x196/0x3a0
[  195.172660][T26558]  ? fat_write_begin+0xf0/0xf0
[  195.172695][T26558]  __generic_file_write_iter+0x202/0x300
[  195.172709][T26558]  ? generic_write_checks+0x250/0x290
[  195.172722][T26558]  generic_file_write_iter+0x75/0x130
[  195.172750][T26558]  do_iter_readv_writev+0x2cb/0x360
[  195.172767][T26558]  do_iter_write+0x112/0x4c0
[  195.172778][T26558]  ? kmalloc_array+0x2d/0x40
[  195.172793][T26558]  vfs_iter_write+0x4c/0x70
[  195.172804][T26558]  iter_file_splice_write+0x40a/0x750
[  195.172818][T26558]  ? splice_from_pipe+0xc0/0xc0
[  195.172842][T26558]  direct_splice_actor+0x80/0xa0
[  195.172894][T26558]  splice_direct_to_actor+0x345/0x650
[  195.172907][T26558]  ? do_splice_direct+0x170/0x170
[  195.172920][T26558]  do_splice_direct+0xf5/0x170
[  195.172933][T26558]  do_sendfile+0x773/0xda0
[  195.172955][T26558]  __x64_sys_sendfile64+0xf2/0x130
[  195.172972][T26558]  do_syscall_64+0x4a/0x90
[  195.173041][T26558]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  195.173062][T26558] RIP: 0033:0x4665d9
23:15:58 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x90, r2, 0x210, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x700}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xd304}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000)

23:15:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xf505, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0)

23:15:58 executing program 3 (fault-call:5 fault-nth:10):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:58 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
preadv(r1, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/156, 0x9c}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x8, 0x8, 0x101)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
write(r0, &(0x7f0000001580)="f00add000a7fe6b1d2dd886b5bccaf7cfc9d51b9c876e43f657247e6c2fe7505f0160153c1b370b646205014716be4fc1376622f1b03219e62e9b17493a0d0532ff8769dead85b1a0e1292453a17d841d29a35f25be29a802a03b995619927bd05a3568d776d68c0b10b81f6b284e0a00977d90d5faa47adc6b93889c6732281", 0x80)

23:15:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
[  195.173074][T26558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  195.173087][T26558] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  195.173099][T26558] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  195.173108][T26558] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  195.173115][T26558] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000000c)
truncate(0x0, 0xff6)

23:15:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x30000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0)

[  195.173125][T26558] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  195.173134][T26558] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  195.631250][T26589] loop5: detected capacity change from 0 to 16
[  195.649083][T26590] loop3: detected capacity change from 0 to 16
[  195.668390][T26590] FAULT_INJECTION: forcing a failure.
[  195.668390][T26590] name fail_page_alloc, interval 1, probability 0, space 0, times 0
23:15:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3000000}, 0x0)

23:15:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x34000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  195.681635][T26590] CPU: 1 PID: 26590 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  195.690405][T26590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  195.700453][T26590] Call Trace:
[  195.703728][T26590]  dump_stack+0x137/0x19d
[  195.708060][T26590]  should_fail+0x23c/0x250
[  195.712478][T26590]  __alloc_pages+0x102/0x320
[  195.717053][T26590]  alloc_pages+0x21d/0x310
[  195.721462][T26590]  __page_cache_alloc+0x4d/0xf0
[  195.726336][T26590]  pagecache_get_page+0x5f4/0x900
23:15:59 executing program 5:
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x3000)
msgrcv(r0, &(0x7f0000001340)={0x0, ""/174}, 0xb6, 0x0, 0x0)
msgsnd(r0, &(0x7f0000001140)={0x3}, 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)
msgrcv(r0, &(0x7f0000000bc0)={0x0, ""/199}, 0xcf, 0x1, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x1000, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
r5 = syz_mount_image$tmpfs(&(0x7f0000000d00), &(0x7f0000000d40)='./bus\x00', 0x1927, 0x2, &(0x7f0000000ec0)=[{&(0x7f0000000d80)="a04632446beedf22405244b5d6866f82ac8b5a6c9ff703ae15f452958ddc22e0bdd4b1ab38d83a45f403ca077b0f692f74a1ff04691c427642fbdae80d12f56738af2f746007d963a2722af038912f263e198f044e395650077776b4f5f850405f499288c705080b83d0c90be9793321a83ba3d972c9bb4b19b3d3940646869d87d0933cc0553f2471fd7b8fb097dcb8be8d569d564acdd58a12d7fbf77946e7797fd971c49cf1ccc964685071c8387e5c07d866dbec22cc680278b86eb287cafbdf201bb3ed203263c0f1476009554ad5d73f133f53186d30752bbcbb79fc573f616b0aac756adf9e7b48", 0xeb, 0x5e}, {&(0x7f0000000e80)="4fdcfaac67f0f656cb58c4f4", 0xc, 0x7}], 0x1002050, &(0x7f0000000f00)={[{@huge_advise}, {@uid={'uid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2f, 0x36, 0x39, 0x2f, 0x33, 0x31, 0x4, 0x36, 0x34, 0x34]}}}}, {@size={'size', 0x3d, [0x34, 0x30, 0x34, 0x30, 0x6b]}}], [{@permit_directio}]})
renameat(r2, &(0x7f0000000cc0)='./bus\x00', r5, &(0x7f0000000f80)='./bus\x00')
read(r4, &(0x7f0000000000)=""/25, 0x19)
r6 = accept4$unix(r3, &(0x7f0000000940)=@abs, &(0x7f00000009c0)=0x6e, 0x800)
sendmmsg$unix(r3, &(0x7f0000000a40)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000300)="280799b72694e6e16d8480d89c21ded490b176ec7a16dab2b7899234f57ace5c4fec6d7ce941cea0ad7c5feb1799cb0ef4dccfa1a79264a4b0115aa2b4e4a39cb109378629aebc3ac9643727b5f1e18db8a9aa4157374e2b8669cae95ec06971c474ccaa4711d5b68e6f296c2cf53dcc4601d412ccaaf14675a8005ac0d9cf7a389df9a36aff1e21640922ed1cf9aac6f1462461eb0b9275d3a9f5adcb683accd56061b26dfa0f88a756485e7627b5edf0c351485f7703d2285425f0aa33ebd14108b552a357fc4133097168dcf6cfdaf4667a8ae154b8c8b8", 0xd9}, {&(0x7f00000000c0)="4b51ef41169e07fd3e8ed3dfdad323a555b103112ff22819b996bba9b26b2fc9acc02c7c8e19a1a8fb83", 0x2a}, {&(0x7f0000000240)="54d6bd174090a042c3f44741bf9094fb944e557abab4b959f8a9afb51e0d37932897810c067238ff6a10bcc84da7c2399e6156444e8c85c7cedbab10f409971af9a99a168753bfc17229d2ebc5182fed17bf777838149ab93a5e916abbdf6385da9102290687322041cd2d07", 0x6c}, {&(0x7f0000000400)="a69b9918b3c978e08b90eb77f9eea7721ad3147a38df955fc0dc48eee7ff8ad3a1551400ed26799077c324accd46d741f1cf46466793df1f0c3bd2a99930f9858e986d4ab238db25a336e3a25cd1e3e8ce3ccb871fc5360d70a4f266c736f7cd946202e706c7ce2bf503780dd01c6c91098a64e01ca7338ac241a1c1939f28fa9de0777932cd1e6bd2e0fdaa0f6c1b9b4abce209d70b6b742a54d2d932c1f7959e8988c887dd4fbe1106c4231d3f0bee21da6b1834db3210f8c5cb67540ac27fe83f49ba07c7e2e1394a9fc1af02f9f22a156bcd119ff3f59e58a70389cedc9c9a2e2a20b405617bc75b29", 0xeb}, {&(0x7f0000000500)="a685b36def5b99570da54b2f27d8a8456e96ed180e867df762d71f8dbeb76fd63b78680687b1b27ed76dbd5b3193095d9357847575c85fdb7b4768f863729ca4395337d97dc9f2cfb4323a22057be41b725dabbcb8a406d104a393d8e519ba6fe787f5b804993ff00421277849b04d4e175890cf978b61ee3f6fab6a485c66e5575cd7b74f1ee1b08ec0711965631862913f3afe382f49577309ea23f40fbba328d050e63feea1e7ba0e2f23285d22133e44f06fad8c3cc3ddad7cdfa775302f022a9f10f265bf57b744248c90a678d607", 0xd1}], 0x5, 0x0, 0x0, 0x4004010}, {&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000700)="6359586aabac5e59df178e3e1c810e4001a287fceb49f070eb426145a6a43ebba36a0ef765a21a01c269164d11679df5dedcf6b57d01be849a1b8def2f62413049870416997517ca5ccbff3f049e3b9906428712f4ae512e0f8c4fb29b3db991ca4e", 0x62}], 0x1, 0x0, 0x0, 0xe4950cd3c5b49fdf}, {&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)="aa8e0425e56106edb4855a8d228ed1b762b7d18fb213ef429ff4c0312ca449cf6bf74e004cf3582f5cf0b9f9b1ebb73d455b41058495c632aaf0a4830e8145a0c228767f44bdcd8d3fb528b768bd30f2267c0d5d4513c6852f05fb0d81bbf7cc5273d04d516f466eac28fc978ca1f8f82c8e82ad489d9960c2e467114f1cac215f9eaede8a50c055a91d22887dca85176c8a76aaf1d10d73c57406f5684162b623fab246d6e11a33647e918ad37939731fb003b8aa03dec0aa1ae5867c861af744495e092c685d33e7b9356641083fa2e26fd169ace1f1f989fd09c38a83976e6b", 0xe1}], 0x1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1000000000002f4fe2d3f7f0d7152f6b1718eb000001000000010000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x1}], 0x3, 0x1)
open_by_handle_at(r2, &(0x7f0000000b00)=@nfs={0x90, 0x24, {0x9a8, 0x4, 0x92a, 0x80, "5fc5b2feff98e5caed47a184e1651cd8e4c306670516159ef06c6881a7fd6bee11fd4699f1abc4ea3a4e2bf1257276ecf0b2bc10f06983ac20ec7a8a2752aca46d943a5236ec76d232466d18b1ade90411ef108137fbae2e8d808bd4793156cccb4ece1ca0791870fd16c0c7aee3a0b5eac8468cba81747e2cf5c02aab7ce8c7"}}, 0x90001)
sendfile(r2, r3, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  195.731356][T26590]  grab_cache_page_write_begin+0x3f/0x70
[  195.736983][T26590]  cont_write_begin+0x501/0x850
[  195.741877][T26590]  fat_write_begin+0x61/0xf0
[  195.746467][T26590]  ? fat_block_truncate_page+0x30/0x30
[  195.751924][T26590]  generic_perform_write+0x196/0x3a0
[  195.757211][T26590]  ? fat_write_begin+0xf0/0xf0
[  195.762078][T26590]  __generic_file_write_iter+0x202/0x300
[  195.767756][T26590]  ? generic_write_checks+0x250/0x290
[  195.773136][T26590]  generic_file_write_iter+0x75/0x130
23:15:59 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:15:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x400300, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  195.778504][T26590]  do_iter_readv_writev+0x2cb/0x360
[  195.783700][T26590]  do_iter_write+0x112/0x4c0
[  195.788284][T26590]  ? kmalloc_array+0x2d/0x40
[  195.792900][T26590]  vfs_iter_write+0x4c/0x70
[  195.797434][T26590]  iter_file_splice_write+0x40a/0x750
[  195.802813][T26590]  ? splice_from_pipe+0xc0/0xc0
[  195.807764][T26590]  direct_splice_actor+0x80/0xa0
[  195.812692][T26590]  splice_direct_to_actor+0x345/0x650
[  195.818098][T26590]  ? do_splice_direct+0x170/0x170
[  195.823109][T26590]  do_splice_direct+0xf5/0x170
[  195.827883][T26590]  do_sendfile+0x773/0xda0
23:15:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0)

[  195.832290][T26590]  __x64_sys_sendfile64+0xf2/0x130
[  195.837464][T26590]  do_syscall_64+0x4a/0x90
[  195.841940][T26590]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  195.847827][T26590] RIP: 0033:0x4665d9
[  195.851701][T26590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  195.871294][T26590] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
23:15:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x1000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:59 executing program 3 (fault-call:5 fault-nth:11):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x5000000}, 0x0)

[  195.879692][T26590] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  195.887651][T26590] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  195.895612][T26590] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  195.903581][T26590] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  195.911580][T26590] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:15:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000000d)
truncate(0x0, 0xff6)

23:15:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x2000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:59 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000000)=""/25, 0x19)
r2 = epoll_create1(0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r5, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r5, &(0x7f0000000000)=""/25, 0x19)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r6, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r6, &(0x7f0000000000)=""/25, 0x19)
r7 = openat(r1, &(0x7f00000015c0)='./bus\x00', 0x200001, 0x40)
io_submit(0x0, 0x9, &(0x7f0000001700)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)="3b81c4fd4cd9143ff6720b89226147f2eaacc4498f89fd40fcc5c470ffdda946c6b8bf2c86f7268e3a97c1d649b3850d0644f82c0fc2bdc3d8b64463bc57636d934d7dcf7500c19f7d4fa9bbae15c006aa56fb02e0f585443a2d7b612134", 0x5e, 0x5, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="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", 0x11c, 0x7, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000340)="1296d3da6d5b5622fe3a7c3b3d97f156f3d166073fdd073556a907d312c8f434b712db8add1febb2e19f4867e9186449c809534ceae254481fb463d0414f482515926af1aaa5011847af4ca802724398d146d85cd0168a17f1abcd44058f91218bb614cf1162a07cacd207bebb1e75e4bc76fadc8fa89cd962c513183be85380c6526f58e377b26ee5c3af9f5e68cfb68306006666354a", 0x97, 0x1, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0xa8, 0xffffffffffffffff, &(0x7f0000000480)="961cf24c41c78568fff57132e2d1b9c2c99c499a87aa16dcf07f872ec9ed63d27c68a97275b29572bd96365613421b894ce9ef3db9430bce550a3877be7872ad1a5dec8929", 0x45, 0x46, 0x0, 0x3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x8, 0x9d, r2, &(0x7f0000001280)="c8c99ab077f82363553d86051a9d85cd0670f3010d23e541c8be33e3fd3b1c6a92f720df28cecd9d8b4c333e324bad81309e860083e235231bbcd0a69429e9", 0x3f, 0x6, 0x0, 0x3, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x5, 0x9, r4, &(0x7f0000001300)="3d62246faaa0f3732ee1c1b9e9706472096a618fdd5a2638b9d696ff7a2125d3bfdc2b8110eb5e812ed201691b18e001c4f89eceaffb665fbe2138215a72220f7b1b988d8b84242808320c767736df79625acb3904e608e110a2a3447598b3e7f84677b18fba5138a3285aff2b946bf7c8fb4f139ba12cd35c", 0x79, 0x5, 0x0, 0x2, r1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x2, r5, &(0x7f00000013c0)="faf6a426741c2b8cca6df7bd256c29b1b56d622a05c496f30c099c919d540e662027e7fef453c11a54329d6f50deea3b22ed5880e1ccc3a511699c6b64452546c5b992aa1252c5dfea73c4a61efee204262d8e18daf9595b0ad5d7903ece19d871d787bc62863e10b04c5912c386bd3c6b2bab8641ea1fdc5a7b9fca6ddcc1660856a807112397c8aaf48c45714ed51f1e72599795f8585da096640bf689a17e3ddabf3bf0134ea73bcf06cf8bea06ba0b4d1c77e8a26dc956e7fa7034e2ef0b0fb1797e64358b3143dbd732ee08ed7e11cc1f039035760f9c493e8661762c363f3ba2d6871b47c6f89b3ce849628a67c92abc154d93af", 0xf7, 0x3, 0x0, 0x0, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x6, r6, &(0x7f0000001500)="b7e0844a55a87eb13968086dd1fa04317faf96c244b6471de66c348cf8462ca82c2c767ada03a21a39ad7b52ccbdacadeb162cd7ad3320395072ac0d184961613e66ab34344d39f4f295a9c672ae5a069521547e0186db14511d72693e4d53e70f25363f8aaae6b2efe97d5f31fcd103de27f3e9275ab05e8f00dfbdf3c209c24824918bd5be85f5982be9b1cc05fc552cbcc7126235c5a7893956f6dac8", 0x9e, 0x1, 0x0, 0x1, r7}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x78d, r1, &(0x7f0000001640)="3a7e33d50af5e8ed4611bbbea58a4c12c3c24b1a25b4ada301b147d1942bc23a8851b342dd42c22995f14cc3f3460718d4a2920fe5dcf72fe7d44d7cb9dae475a8c86e3a444e50b3005f9fbaba3a12c3b0949bdd493a9cf37a34ae19dd55978c4c5f981a3d13", 0x66, 0x2, 0x0, 0x2, r0}])
sendfile(r0, r1, 0x0, 0x4000000000010046)
lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726974792e2f7047895d52e29d2285725f6c69737400"], &(0x7f00000000c0)=']-\x00', 0x3, 0x0)

23:15:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x6000000}, 0x0)

[  196.008995][T26656] loop3: detected capacity change from 0 to 16
[  196.039462][T26656] FAULT_INJECTION: forcing a failure.
[  196.039462][T26656] name fail_page_alloc, interval 1, probability 0, space 0, times 0
23:15:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x3000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  196.052681][T26656] CPU: 0 PID: 26656 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  196.061426][T26656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  196.061436][T26656] Call Trace:
[  196.061442][T26656]  dump_stack+0x137/0x19d
[  196.061463][T26656]  should_fail+0x23c/0x250
[  196.083601][T26656]  __alloc_pages+0x102/0x320
[  196.088256][T26656]  alloc_pages+0x21d/0x310
[  196.092677][T26656]  __page_cache_alloc+0x4d/0xf0
[  196.097542][T26656]  pagecache_get_page+0x5f4/0x900
[  196.097563][T26656]  grab_cache_page_write_begin+0x3f/0x70
[  196.097591][T26656]  cont_write_begin+0x501/0x850
[  196.097607][T26656]  fat_write_begin+0x61/0xf0
[  196.097624][T26656]  ? fat_block_truncate_page+0x30/0x30
[  196.097644][T26656]  generic_perform_write+0x196/0x3a0
[  196.097662][T26656]  ? fat_write_begin+0xf0/0xf0
[  196.097681][T26656]  __generic_file_write_iter+0x202/0x300
[  196.097761][T26656]  ? generic_write_checks+0x250/0x290
[  196.097775][T26656]  generic_file_write_iter+0x75/0x130
[  196.097831][T26656]  do_iter_readv_writev+0x2cb/0x360
[  196.097847][T26656]  do_iter_write+0x112/0x4c0
[  196.097863][T26656]  ? kmalloc_array+0x2d/0x40
[  196.097879][T26656]  vfs_iter_write+0x4c/0x70
[  196.097895][T26656]  iter_file_splice_write+0x40a/0x750
[  196.097911][T26656]  ? splice_from_pipe+0xc0/0xc0
[  196.098000][T26656]  direct_splice_actor+0x80/0xa0
[  196.098018][T26656]  splice_direct_to_actor+0x345/0x650
[  196.098086][T26656]  ? do_splice_direct+0x170/0x170
[  196.098104][T26656]  do_splice_direct+0xf5/0x170
[  196.098133][T26656]  do_sendfile+0x773/0xda0
[  196.098148][T26656]  __x64_sys_sendfile64+0xf2/0x130
[  196.098163][T26656]  do_syscall_64+0x4a/0x90
[  196.098189][T26656]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  196.098205][T26656] RIP: 0033:0x4665d9
[  196.098214][T26656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  196.098226][T26656] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  196.098239][T26656] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  196.098261][T26656] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  196.098271][T26656] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  196.098282][T26656] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  196.098294][T26656] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  196.213637][T26669] loop5: detected capacity change from 0 to 12
23:15:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
open(&(0x7f00000001c0)='./file1\x00', 0x105000, 0x185)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x2, 0x80, 0x1}, 0x18)
openat(r2, &(0x7f0000000180)='./bus\x00', 0x101000, 0x0)

23:15:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x7000000}, 0x0)

23:15:59 executing program 3 (fault-call:5 fault-nth:12):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:15:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x4000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:15:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000000f)
truncate(0x0, 0xff6)

23:15:59 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046)

[  196.497228][T26653] loop5: detected capacity change from 0 to 12
23:15:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9000000}, 0x0)

23:15:59 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x5e1ac2, 0x2)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x5000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  196.597769][T26721] loop5: detected capacity change from 0 to 16
[  196.609321][T26724] loop3: detected capacity change from 0 to 16
23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9effffff}, 0x0)

23:16:00 executing program 5:
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000300)={{<r3=>0x0, 0xe2, 0x1, 0x7, 0x8, 0xd306, 0xffff, 0x62, 0x1, 0x8f1, 0x5, 0x8, 0x200, 0x9, 0x1}})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001300)={r3, 0x5})
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  196.651205][T26724] FAULT_INJECTION: forcing a failure.
[  196.651205][T26724] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  196.664507][T26724] CPU: 1 PID: 26724 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  196.673269][T26724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  196.683314][T26724] Call Trace:
[  196.686602][T26724]  dump_stack+0x137/0x19d
[  196.690930][T26724]  should_fail+0x23c/0x250
[  196.695360][T26724]  __alloc_pages+0x102/0x320
23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x6000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  196.699946][T26724]  alloc_pages+0x21d/0x310
[  196.704360][T26724]  __page_cache_alloc+0x4d/0xf0
[  196.709215][T26724]  pagecache_get_page+0x5f4/0x900
[  196.714257][T26724]  grab_cache_page_write_begin+0x3f/0x70
[  196.720008][T26724]  cont_write_begin+0x501/0x850
[  196.724891][T26724]  fat_write_begin+0x61/0xf0
[  196.729542][T26724]  ? fat_block_truncate_page+0x30/0x30
[  196.735101][T26724]  generic_perform_write+0x196/0x3a0
[  196.740390][T26724]  ? fat_write_begin+0xf0/0xf0
[  196.745161][T26724]  __generic_file_write_iter+0x202/0x300
[  196.750801][T26724]  ? generic_write_checks+0x250/0x290
[  196.756173][T26724]  generic_file_write_iter+0x75/0x130
[  196.761607][T26724]  do_iter_readv_writev+0x2cb/0x360
[  196.766802][T26724]  do_iter_write+0x112/0x4c0
[  196.771376][T26724]  ? kmalloc_array+0x2d/0x40
[  196.775952][T26724]  vfs_iter_write+0x4c/0x70
[  196.780462][T26724]  iter_file_splice_write+0x40a/0x750
[  196.785924][T26724]  ? splice_from_pipe+0xc0/0xc0
[  196.790802][T26724]  direct_splice_actor+0x80/0xa0
[  196.795734][T26724]  splice_direct_to_actor+0x345/0x650
23:16:00 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x4000000000010046)
r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1000, 0x10000)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, 0x80}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @local, 0x9}, 0x1c)
write(0xffffffffffffffff, &(0x7f00000001c0)="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", 0x1000)
fcntl$addseals(r0, 0x409, 0x2)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0))
openat(r1, &(0x7f0000000180)='./bus\x00', 0x101, 0xb)

23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xda030000}, 0x0)

[  196.801099][T26724]  ? do_splice_direct+0x170/0x170
[  196.806186][T26724]  do_splice_direct+0xf5/0x170
[  196.810939][T26724]  do_sendfile+0x773/0xda0
[  196.815345][T26724]  __x64_sys_sendfile64+0xf2/0x130
[  196.820474][T26724]  do_syscall_64+0x4a/0x90
[  196.824893][T26724]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  196.830788][T26724] RIP: 0033:0x4665d9
23:16:00 executing program 3 (fault-call:5 fault-nth:13):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x7000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  196.834669][T26724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  196.854277][T26724] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  196.862696][T26724] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  196.870662][T26724] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  196.878632][T26724] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  196.886598][T26724] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  196.894547][T26724] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000010)
truncate(0x0, 0xff6)

23:16:00 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x10c, 0x400}, {&(0x7f0000010200)="0500000000000000000000000000000000000000040100002b", 0x19, 0x560}, {&(0x7f0000010300)="000000000000000000000000000000000000000000000000000000001481910a", 0x20, 0x7e0}], 0x0, &(0x7f0000000380)={[{@nolazytime}]})
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xefffffff}, 0x0)

23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x9000000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  196.975236][T26783] loop3: detected capacity change from 0 to 16
[  196.997955][T26783] FAULT_INJECTION: forcing a failure.
[  196.997955][T26783] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  197.011211][T26783] CPU: 0 PID: 26783 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff}, 0x0)

[  197.019990][T26783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  197.030067][T26783] Call Trace:
[  197.033344][T26783]  dump_stack+0x137/0x19d
[  197.037678][T26783]  should_fail+0x23c/0x250
[  197.042172][T26783]  __alloc_pages+0x102/0x320
[  197.042192][T26783]  alloc_pages+0x21d/0x310
[  197.042209][T26783]  __page_cache_alloc+0x4d/0xf0
[  197.042227][T26783]  pagecache_get_page+0x5f4/0x900
[  197.042249][T26783]  grab_cache_page_write_begin+0x3f/0x70
[  197.042320][T26783]  cont_write_begin+0x501/0x850
[  197.042340][T26783]  fat_write_begin+0x61/0xf0
[  197.042360][T26783]  ? fat_block_truncate_page+0x30/0x30
[  197.042449][T26783]  generic_perform_write+0x196/0x3a0
[  197.042545][T26783]  ? fat_write_begin+0xf0/0xf0
[  197.042564][T26783]  __generic_file_write_iter+0x202/0x300
[  197.042583][T26783]  ? generic_write_checks+0x250/0x290
[  197.042600][T26783]  generic_file_write_iter+0x75/0x130
[  197.042629][T26783]  do_iter_readv_writev+0x2cb/0x360
[  197.042664][T26783]  do_iter_write+0x112/0x4c0
[  197.042678][T26783]  ? kmalloc_array+0x2d/0x40
23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff7f}, 0x0)

[  197.042694][T26783]  vfs_iter_write+0x4c/0x70
[  197.042748][T26783]  iter_file_splice_write+0x40a/0x750
[  197.042767][T26783]  ? splice_from_pipe+0xc0/0xc0
[  197.042782][T26783]  direct_splice_actor+0x80/0xa0
[  197.042798][T26783]  splice_direct_to_actor+0x345/0x650
[  197.042814][T26783]  ? do_splice_direct+0x170/0x170
[  197.042829][T26783]  do_splice_direct+0xf5/0x170
[  197.064115][T26795] loop0: detected capacity change from 0 to 7
[  197.067281][T26783]  do_sendfile+0x773/0xda0
[  197.067302][T26783]  __x64_sys_sendfile64+0xf2/0x130
[  197.086284][T26795] EXT4-fs (loop0): bad geometry: block count 256 exceeds size of device (3 blocks)
[  197.087389][T26783]  do_syscall_64+0x4a/0x90
[  197.087413][T26783]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  197.192707][T26783] RIP: 0033:0x4665d9
[  197.192718][T26783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  197.192733][T26783] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  197.192744][T26783] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  197.192751][T26783] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  197.192758][T26783] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  197.192764][T26783] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  197.192771][T26783] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0xffffffff, 0xffffffffffffffff, 0x6})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180))
sendfile(r0, r1, 0x0, 0x80000001)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000)
creat(&(0x7f00000000c0)='./bus/../file0\x00', 0x40)
flock(r1, 0x4)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x9effffff, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000011)
truncate(0x0, 0xff6)

23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff9e}, 0x0)

23:16:00 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r2=>0x0, <r3=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, r3, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r4]}, @devid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002240)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYRESOCT, @ANYRES32=r2, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5, 0x800, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, <r8=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000400)={{}, r8, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r9]}, @devid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000002240)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r10=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40024)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0x0, 0x0, {0x5, @usage=0x8, r5, 0x200, 0xf3, 0x1ff, 0x5, 0x1f, 0x1, @usage=0x7, 0x2, 0x1, [0x7, 0xfffffffffffffe01, 0x1, 0x5, 0xf61, 0x10000000000000]}, {0x8, @struct={0x3, 0x4}, 0x0, 0x4a7, 0x1000, 0x81, 0x3f, 0x2, 0x10, @usage=0x3ff, 0x0, 0xfffffff2, [0x0, 0x1, 0x8, 0x5, 0x80000001, 0x140000000000]}, {0x6, @struct={0x0, 0x9b0}, r10, 0x14a5, 0x1000, 0x6, 0x8000, 0x4, 0x2, @usage=0x3, 0x9, 0x4, [0x3, 0x9, 0x5, 0x1000, 0xa5]}, {0x0, 0x401}})
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:00 executing program 3 (fault-call:5 fault-nth:14):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  197.222149][T26809] loop0: detected capacity change from 0 to 7
[  197.222985][T26809] EXT4-fs (loop0): bad geometry: block count 256 exceeds size of device (3 blocks)
23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xefffffff, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffffef}, 0x0)

23:16:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
openat(r2, &(0x7f0000000280)='./file0\x00', 0x2a4980, 0x14e)
pwritev(r1, &(0x7f0000000ac0)=[{&(0x7f0000000540)="9796584e8f0917400c20862be65c8563c6f4aec86d71043b43606f6a6d5633d506f2d6a28ec6727fd10dcccc4d62ac1578d015d760f9d64742f78619658236f102f784e33551667bc9c3bddbe1ac18b14cb78156a1e6eddb9ddd6b88e3f01919d0ba7c83229695", 0x67}, {&(0x7f00000005c0)="f1a83468cdf0848dd3899fa697d5c2683bc9e88af49a2a1121715a4d10a5cdb908335f313db8298501563aacac1b72e08c673111db085ea2530bee2034f8698e5ae656e7bcb4634209e8baa1e375c0f4e35eccb641746160ba1192b1e2b3096fc7176dfa04685c51d469247faa645545ee00da90afc9acda3fd84ff5f64c90", 0x7f}, {&(0x7f0000000640)="da1c27c7c55e481c3c4896f0cad145e82bad64c870bb8ac786976a3a06ea805efb6da0bbda8b8f7b108b38c899f007bcca7ad57473d679f0ae1ce3bcf23f0335170e909f2ee82bb5463e6e9bbc19a1b792c0594dd741974d2838aed432e2f6b2daca6831dea2e7066bcddb3a5cce207852db2d99fb35f817a828586f23942ac85cadd2a0e2ed193fef043decc689d6d89b077bfd2d8d67546dcf4cef15454dcd7cf6023f2d92d742a34001dac1a74ccd9dde0faead514326eefcc3101e1f3de590b4d84aa740fb68dc49155711bcf391579324765d5357b21733382ee55fa6e681af2c30f7fbbbd946daf0432731956147e0b6", 0xf3}, {&(0x7f0000000740)="7136dab8b43720cd1087aa5b524e2bcc1e24ea3cbb3d6a2e625c5cdb32bfe991502bb3bf2d2f71bfe335fc743f7c86a640e5931613ac1151bcc197ff76a9bb7b06faae0b6af2a2e4dd3f106cd3ef2ae26d09f14f68d8f2ecab57ddd5561a", 0x5e}, {&(0x7f00000007c0)="960962f475445f9ad88639aa4888e9b8241ff822bf1c170fd466ff31ffc736f0770f830ee85be2f906d4d83ff38ea9fd6689ad639cd093ff971f8f83d993b88fa80561840ffa9356243a481cf4cd4364c84d44178fe79b5eb350b2e70537b1750c9409bbca9e7e822e7ab6905b662ea7e4", 0x71}, {&(0x7f0000000840)="61ee89a821d5a9cda80424c41dff71c321d7026527f92583a80431ddf758ae09fa9720298f7175495741186d1626577fbdfc3065f5928598e0a639b5ace286d42718ad3442998663b1f07fd80d441e3424cbc415b943188f9601f37a0acc9735ee23551eafec3ee8a1dc40b8d39675ca1d1bd86829bc9b67d2fa90e42b79596fbf3791e4b8d0c03680ca6abbbcfee89bf8439fdf8674049c1c7889abadde9f53bf478947c586ea011a0313b03fbc893328aa9d750a4207bb0b8b56b20102484ba7d8629fc380aa4db2c90899ac826c6956dcd3c816a6af2f", 0xd8}, {&(0x7f0000000940)="6ed5e674fd40299b4be9e49496f33565908d00fc184972dd4e387db9e4c5a71fb8e1d96f441798bef7d50aa74f8b915e46500c664bfcf5185204cea84aaf961d63b3213c5e8aabaeda002f7523b1366b854bc7a59e1f3fe4eea68573b577ea185b10562831406549fd03d3a1344531e960a3a9a697f2475692c4f672d00bf1ebe7b457597646e1be566c4c678fece959a5923e04c51a4ec93c9f5f196edf9d981afead87b9f24fb13ab00972bc9e316cc6bfe32e91908d48198f13220e62", 0xbe}, {&(0x7f0000000a00)="a5f9b9250627a5fb3c61a6c486aec9b45f6c0ccec57f2bbf4439c56788c143f84355d0354479665e0d0ab8b077869151600c6d3aee8bb5a2af305499789537118bfbeb445c42872aa5ecfdc9704032547738daea419fc374d2228fdc1fddee8aaf8523bc356181b2b538aeb8abfc9896c764e7589ffa92c4ccae499ade358fc4cffd6f021b8ff4b071935281dd68", 0x8e}], 0x8, 0x0, 0xe8)
sendfile(r0, r1, 0x0, 0x80000001)
r3 = fcntl$dupfd(r0, 0x0, r1)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000b40)={0x3f, 0x0, 0x5, 0xd578, 0x1, [{0x8, 0x0, 0x4, '\x00', 0x1000}]})
open_by_handle_at(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2400000000000000b66f978f00a04cf536f96b53a8be4889a061886b531cb607a9000000552d45b522b4a6cc35a25263d8e619a845b856a93dc18ab31577d3ffe125f6d2c42edef0cb3c5f3f55f03cc67928d381f6a1faf21a9ddbab82226744c979168fb91fed511de1901aa8718bab076abccab97b2c727f706e726f67d463e251f40f7396e487fb220e9faa891942f9ecdf33178b9a31cbe7"], 0x200)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)
unshare(0x6e040400)
unshare(0xa00)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)}, {&(0x7f0000000140)=""/172, 0xac}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/88, 0x58}, {&(0x7f0000000400)=""/90, 0x5a}], 0x6, 0x800, 0x20)

[  197.349798][T26834] loop5: detected capacity change from 0 to 16
[  197.402189][T26849] loop3: detected capacity change from 0 to 16
[  197.441452][T26849] FAULT_INJECTION: forcing a failure.
23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfffffff0}, 0x0)

23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xf0ffffff, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000201)
truncate(0x0, 0xff6)

[  197.441452][T26849] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  197.454825][T26849] CPU: 0 PID: 26849 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  197.463585][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  197.473627][T26849] Call Trace:
[  197.476900][T26849]  dump_stack+0x137/0x19d
[  197.481224][T26849]  should_fail+0x23c/0x250
[  197.485634][T26849]  __alloc_pages+0x102/0x320
[  197.490221][T26849]  alloc_pages+0x21d/0x310
[  197.494723][T26849]  __page_cache_alloc+0x4d/0xf0
23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3000000000000}, 0x0)

23:16:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xf5050000, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  197.499607][T26849]  pagecache_get_page+0x5f4/0x900
[  197.504629][T26849]  grab_cache_page_write_begin+0x3f/0x70
[  197.510268][T26849]  cont_write_begin+0x501/0x850
[  197.515110][T26849]  fat_write_begin+0x61/0xf0
[  197.519747][T26849]  ? fat_block_truncate_page+0x30/0x30
[  197.525207][T26849]  generic_perform_write+0x196/0x3a0
[  197.530489][T26849]  ? fat_write_begin+0xf0/0xf0
[  197.535242][T26849]  __generic_file_write_iter+0x202/0x300
[  197.540925][T26849]  ? generic_write_checks+0x250/0x290
[  197.546356][T26849]  generic_file_write_iter+0x75/0x130
[  197.551739][T26849]  do_iter_readv_writev+0x2cb/0x360
[  197.556928][T26849]  do_iter_write+0x112/0x4c0
[  197.561533][T26849]  ? kmalloc_array+0x2d/0x40
[  197.566119][T26849]  vfs_iter_write+0x4c/0x70
[  197.570768][T26849]  iter_file_splice_write+0x40a/0x750
[  197.576146][T26849]  ? splice_from_pipe+0xc0/0xc0
[  197.580983][T26849]  direct_splice_actor+0x80/0xa0
[  197.585917][T26849]  splice_direct_to_actor+0x345/0x650
[  197.591286][T26849]  ? do_splice_direct+0x170/0x170
[  197.596370][T26849]  do_splice_direct+0xf5/0x170
23:16:00 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x40030000000000}, 0x0)

[  197.601123][T26849]  do_sendfile+0x773/0xda0
[  197.605539][T26849]  __x64_sys_sendfile64+0xf2/0x130
[  197.610642][T26849]  do_syscall_64+0x4a/0x90
[  197.615105][T26849]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  197.620994][T26849] RIP: 0033:0x4665d9
[  197.624920][T26849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  197.644522][T26849] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
23:16:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000281)
truncate(0x0, 0xff6)

23:16:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xffffff7f, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  197.652945][T26849] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  197.660910][T26849] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  197.668953][T26849] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  197.676920][T26849] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  197.685029][T26849] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:01 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0xc)
r4 = dup2(r2, r2)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "0000ba00"})
r5 = syz_open_pts(r4, 0x1)
r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x0, 0xc52f, 0x0, 0x0, 0x0, "35a5dbbf620e44c174391cce3313f92a108843"})
write(r5, &(0x7f0000000000)="d5", 0xfffffdc9)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:01 executing program 3 (fault-call:5 fault-nth:15):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x100000000000000}, 0x0)

[  197.744498][T26915] loop5: detected capacity change from 0 to 16
23:16:01 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)=""/11, 0xb}, {&(0x7f0000000400)=""/255, 0xff}], 0x5, 0x1000, 0x5)
vmsplice(r0, &(0x7f0000001a80)=[{&(0x7f0000000580)="8146ffa41218a3de673f41291ddf20ca205ac9541b0569876eaaff20b77a6e69e8844d3889c24eddaa9dffd0868025e683c5ebc9da4d2c3a74bfae21a9aba7e5dd261f1ebb1286bcbb48bc563c3ac5f00104dde378c41772113c0257919a8d6510bd18cd2aa0f94b0bb9ba990081957ec9214c70f7edc9989d0b2df65e6f456f10c70bae4b4c3fe650195d8a2bc2c024ac6c232bd183186ffdc5cd30e496ac6c6a40d5530ea5064a9e1ae7a44986991074919cf75a", 0xb5}, {&(0x7f0000000640)="c208661afdf853eb334475f14e3387c7548638683b0d4786fe1c8de235ad578ddc882815be0ec4b0e82fb8a1a8a5e7b8fe241e53836bcbbae7241ebd89264ad6e70df14e4087999295dbd7b8fd7ecf6fddc328ce3990612ea676e03377a1f6d86422ddd968764c98b648baee4335165c572e92779870de6c045c5d1ba6094456", 0x80}, {&(0x7f00000006c0)="7738f44441bbb37af4b00068a788be0694713b7bb779fbed701dfb5a8619f6bf150351e336a0fa0e8c24cdf25c2834f1a924c73ce0c8e8a3317670584ff4497b444c15f9697daa474243bb1ba78868488c36b460823589f0df2f42ee39d86bb63836aee5276975e63abb8ba305c01aa65e4b8c07381871ab911ec82133bc1d8b5517b9ed6d7356e39007cdcd", 0x8c}, {&(0x7f0000000780)="2b74b9a8816c2d2d30552565bf21f91f6ec162f931f26631aaba2a6e66a3f4ae5fb4097a027ef4ebdd523bb85476e900be7498f966c71ecdf35903c58d10b5d665fda4614b9cd532b2d365db91b6e4d12d1385e36fa0cdfefb086848491d7fc72cb4ef60b37fb8c129fbeda39340e8e6e54ff9b77acdfbfc1787f67ad4c35201f580be49acb7f3ae47e41ed3850ece83e24daa36f1fdfe799fff89c0dac2c55a1fddf4241c03916a4e29918d5561072854a8239331256516212df4c54d", 0xbd}, {&(0x7f0000000840)="1901c471fc7c2e687321906ff690673789f238dd993ea855a8abf1b5fea98294c2f372fc9fe72b46585effd2feb442c37138f8d9f218f5303fd53217132ded77b68bd7ac37b68fc0c7da7dd1666a2135b48ae4ff17913439dc7ba1644b103a57aa9984221ddd5e8a5d7b3d42de6368c2df444ab6e76cbfc93fecf84103f291d0a507fa310adb59bac54d9035454f191bf063f5f84c7fe14a240006eca2e53c1d3a6920cc6a6ebc5be030b5c0d525a6a7dceac2b3119caf7163d1a0d55c9164063969bac57161f219b9a1ae4151bbd1444f350857db4293ca674562ee4363d2f7511cdd0b649873deac17a17f993ee5a333885441", 0xf4}, {&(0x7f0000000940)="4c58925ea8e9ac909aa0ec1901ff3581c331c736391bb02a796c52f509b3b72fa95d2322f8177f4f6eccfb2eb494123996c6c5a74c3b17a042aac545553240e13ad37c2cf22f26e9336c96", 0x4b}, {&(0x7f00000009c0)="ba009961b5458a66087668bb02a1d015b561d7030b969978eed26ac1eb3e44824c1b25190bbe8f9e237bf18fe048694a875344c51907e0479f7d0f202ad052eeffde6a5b5eb51975c0101c26bcc1e89f7e323c4bcc1b5d4b4c0d4590aa0b77657aac119f4965c50e9c04aadf9c6251bfd0a067150a9e1b64c9d4065ce565c43206888dc39f89f54b4592227bd162218c902fe673bd663b5206913641f49653f4b074459dcc20f3a42835ff0ad7004dac32966fe7155fea9d1805", 0xba}, {&(0x7f0000000a80)="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", 0x1000}], 0x8, 0x3)
r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2)
shutdown(r1, 0x0)
flock(r3, 0x4)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:16:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xffffff9e, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000300)
truncate(0x0, 0xff6)

23:16:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x200000000000000}, 0x0)

23:16:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xffffffef, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  197.902740][T26950] loop3: detected capacity change from 0 to 16
[  197.962038][T26950] FAULT_INJECTION: forcing a failure.
[  197.962038][T26950] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  197.975390][T26950] CPU: 0 PID: 26950 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  197.984160][T26950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  197.994209][T26950] Call Trace:
[  197.997486][T26950]  dump_stack+0x137/0x19d
[  198.001853][T26950]  should_fail+0x23c/0x250
[  198.006266][T26950]  __alloc_pages+0x102/0x320
[  198.010850][T26950]  alloc_pages+0x21d/0x310
[  198.015263][T26950]  __page_cache_alloc+0x4d/0xf0
[  198.020115][T26950]  pagecache_get_page+0x5f4/0x900
[  198.025138][T26950]  grab_cache_page_write_begin+0x3f/0x70
[  198.030823][T26950]  cont_write_begin+0x501/0x850
[  198.035711][T26950]  fat_write_begin+0x61/0xf0
[  198.040348][T26950]  ? fat_block_truncate_page+0x30/0x30
[  198.045854][T26950]  generic_perform_write+0x196/0x3a0
[  198.051142][T26950]  ? fat_write_begin+0xf0/0xf0
[  198.055957][T26950]  __generic_file_write_iter+0x202/0x300
[  198.061615][T26950]  ? generic_write_checks+0x250/0x290
[  198.066978][T26950]  generic_file_write_iter+0x75/0x130
[  198.072345][T26950]  do_iter_readv_writev+0x2cb/0x360
[  198.077550][T26950]  do_iter_write+0x112/0x4c0
[  198.082154][T26950]  ? kmalloc_array+0x2d/0x40
[  198.086737][T26950]  vfs_iter_write+0x4c/0x70
[  198.091234][T26950]  iter_file_splice_write+0x40a/0x750
[  198.096602][T26950]  ? splice_from_pipe+0xc0/0xc0
[  198.101449][T26950]  direct_splice_actor+0x80/0xa0
[  198.106381][T26950]  splice_direct_to_actor+0x345/0x650
[  198.111750][T26950]  ? do_splice_direct+0x170/0x170
[  198.116820][T26950]  do_splice_direct+0xf5/0x170
[  198.121593][T26950]  do_sendfile+0x773/0xda0
[  198.126086][T26950]  __x64_sys_sendfile64+0xf2/0x130
[  198.131225][T26950]  do_syscall_64+0x4a/0x90
[  198.135636][T26950]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  198.141559][T26950] RIP: 0033:0x4665d9
23:16:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0xfffffff0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  198.145457][T26950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  198.165061][T26950] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  198.173494][T26950] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  198.181458][T26950] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  198.189542][T26950] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  198.197617][T26950] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  198.205579][T26950] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:01 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x300000000000000}, 0x0)

23:16:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xf, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x2)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  198.214975][T26970] loop5: detected capacity change from 0 to 16
[  198.231861][T26950] handle_bad_sector: 68 callbacks suppressed
[  198.231872][T26950] attempt to access beyond end of device
[  198.231872][T26950] loop3: rw=2049, want=121, limit=16
[  198.249332][T26950] attempt to access beyond end of device
[  198.249332][T26950] loop3: rw=2049, want=122, limit=16
[  198.260238][T26950] buffer_io_error: 60 callbacks suppressed
[  198.260248][T26950] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  198.274678][T26950] attempt to access beyond end of device
[  198.274678][T26950] loop3: rw=2049, want=123, limit=16
[  198.285491][T26950] Buffer I/O error on dev loop3, logical block 122, lost async page write
[  198.298422][T26950] attempt to access beyond end of device
[  198.298422][T26950] loop3: rw=2049, want=124, limit=16
[  198.309246][T26950] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  198.318036][T26950] attempt to access beyond end of device
[  198.318036][T26950] loop3: rw=2049, want=125, limit=16
[  198.328835][T26950] Buffer I/O error on dev loop3, logical block 124, lost async page write
[  198.337872][T26950] attempt to access beyond end of device
[  198.337872][T26950] loop3: rw=2049, want=126, limit=16
[  198.348656][T26950] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  198.357412][T26950] attempt to access beyond end of device
23:16:01 executing program 3 (fault-call:5 fault-nth:16):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  198.357412][T26950] loop3: rw=2049, want=127, limit=16
[  198.368200][T26950] Buffer I/O error on dev loop3, logical block 126, lost async page write
[  198.377041][T26950] attempt to access beyond end of device
[  198.377041][T26950] loop3: rw=2049, want=128, limit=16
[  198.380620][T26999] loop5: detected capacity change from 0 to 16
[  198.387844][T26950] Buffer I/O error on dev loop3, logical block 127, lost async page write
[  198.466561][T27011] loop3: detected capacity change from 0 to 16
[  198.496856][T27011] FAULT_INJECTION: forcing a failure.
[  198.496856][T27011] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  198.510255][T27011] CPU: 0 PID: 27011 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  198.519010][T27011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  198.529041][T27011] Call Trace:
[  198.532301][T27011]  dump_stack+0x137/0x19d
[  198.536682][T27011]  should_fail+0x23c/0x250
[  198.541108][T27011]  __alloc_pages+0x102/0x320
[  198.545691][T27011]  alloc_pages+0x21d/0x310
[  198.550151][T27011]  __page_cache_alloc+0x4d/0xf0
[  198.554994][T27011]  pagecache_get_page+0x5f4/0x900
[  198.559997][T27011]  grab_cache_page_write_begin+0x3f/0x70
[  198.565604][T27011]  cont_write_begin+0x501/0x850
[  198.570452][T27011]  fat_write_begin+0x61/0xf0
[  198.575020][T27011]  ? fat_block_truncate_page+0x30/0x30
[  198.580465][T27011]  generic_perform_write+0x196/0x3a0
[  198.585728][T27011]  ? fat_write_begin+0xf0/0xf0
[  198.590469][T27011]  __generic_file_write_iter+0x202/0x300
[  198.596142][T27011]  ? generic_write_checks+0x250/0x290
[  198.601489][T27011]  generic_file_write_iter+0x75/0x130
[  198.606837][T27011]  do_iter_readv_writev+0x2cb/0x360
[  198.612009][T27011]  do_iter_write+0x112/0x4c0
[  198.616574][T27011]  ? kmalloc_array+0x2d/0x40
[  198.621139][T27011]  vfs_iter_write+0x4c/0x70
[  198.625662][T27011]  iter_file_splice_write+0x40a/0x750
[  198.631062][T27011]  ? splice_from_pipe+0xc0/0xc0
[  198.635896][T27011]  direct_splice_actor+0x80/0xa0
[  198.640808][T27011]  splice_direct_to_actor+0x345/0x650
[  198.646237][T27011]  ? do_splice_direct+0x170/0x170
[  198.651413][T27011]  do_splice_direct+0xf5/0x170
[  198.656179][T27011]  do_sendfile+0x773/0xda0
[  198.656199][T27011]  __x64_sys_sendfile64+0xf2/0x130
[  198.656212][T27011]  do_syscall_64+0x4a/0x90
[  198.656229][T27011]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  198.676115][T27011] RIP: 0033:0x4665d9
[  198.679995][T27011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  198.699816][T27011] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  198.708226][T27011] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:16:02 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'ip6tnl0\x00', r4, 0x29, 0x4, 0xff, 0x0, 0x14, @loopback, @private2, 0x40, 0x700, 0x100000b3, 0x80000001}})

23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x10, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x400000000000000}, 0x0)

23:16:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x10010, r2, 0xd334c000)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:16:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000301)
truncate(0x0, 0xff6)

23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x500000000000000}, 0x0)

[  198.716272][T27011] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  198.724232][T27011] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  198.732198][T27011] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  198.740163][T27011] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:02 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x80000001, 0x200200)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x2d4, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x1c8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xca, 0x3, "21a1a9792b32ac270076b5c87b6842d40d696a5f73cd96de0c85b30d56a9e0ac8ffce571bd94533bffa9bd03e6ce6d56daf18a95c712aa7573b2e267f84a438684596485919fe2fc42f8f38b38167520252640b5ffe30272c70378166b63ca62ef7240ddb37458f979c2148cfec798da0e48ae5c87b09ae329bcbaedb42356fe5dc25450b7498f88739b3dcfe87acc8880c04ec316183a57517c37511d21e694e349fb135c2e6672753c42ca7a968297d8311498aa835fe7383c05d6e9f0848c581563c342d2"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "4fc6b3d2c9dfb59e9486bfd272d9167ce4fcc6c4248ea6bbf71b06063b91dad641"}}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "04cc168d11ccb748372645d1f6800566d4858ae5d5213cdb411be3db6170734ce8fc4b444485948f94a8a717877b385eaa5d215f6f6485f734dc52da19cae301a0591d1743ab623be7dc7ca517709bb0be792c0db3de035ad121f4c415727816bffd71fdb0553f0551536cb107bad068399a6337a14080b440097cafc0169e8d826b47d142f6dbb8fb9a3796ae664a0a97d8a597d5ed9255"}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x551}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb2e0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x24000040}, 0x48010)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x1353c3, 0x6a)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)

[  198.783948][T27011] attempt to access beyond end of device
[  198.783948][T27011] loop3: rw=2049, want=121, limit=16
[  198.806378][T27011] attempt to access beyond end of device
[  198.806378][T27011] loop3: rw=2049, want=122, limit=16
[  198.808972][T27028] loop5: detected capacity change from 0 to 16
[  198.817193][T27011] Buffer I/O error on dev loop3, logical block 121, lost async page write
23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x600000000000000}, 0x0)

23:16:02 executing program 3 (fault-call:5 fault-nth:17):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x22, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  198.850872][T27011] Buffer I/O error on dev loop3, logical block 122, lost async page write
[  198.859521][T27011] Buffer I/O error on dev loop3, logical block 123, lost async page write
23:16:02 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0xc0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x700000000000000}, 0x0)

23:16:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000500)
truncate(0x0, 0xff6)

23:16:02 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000400)=[{&(0x7f0000000140)="f63c7d79ffaf768d331545f8a5bc110487631130e951a1dbe8e64c8567061eef5803975746631f75023609a3f05567c79717039a41c9b05135826da6dfd5abb2e00a3233de72fd99738c7a6892dbd50c0a2e8430f45e6466b11535cd362a67b396a2e79022cf038059a705d9f2c18fdb5c2c", 0x72, 0x8}, {&(0x7f00000000c0)="f4c0ce40fe5bc5b66028e3827cb49752368c5b919feee41d697c6b100d80cf4bc6c6de8d0f94aef3a8efd1a290", 0x2d, 0x7}, {&(0x7f00000001c0)="1b1806b9af9f7c7f63ef53bce9f5ef49bfdb9bdc01135942eaa0a8e771b06f82d91f43f7f40e31e263b45fc58dc8ebccca9a495873aaef978cd73c31d913e072fd15b62ef0dd9ec5dfbf1e2124d03bd95122c04171c424dfecdd6ae3e70f989c76ecf67b6eed7225e79e2894f41d96f805cae50c755f57926a5915f2dfe5efb2d8928cde89aaa314ec188d1e631dfb7331a2100d3675430b1721fa1724a5f67f1bf61e6a35dfb573c82a3871d9d644b35556e976eaa7711e84ad79f1bfabcbf0861a05347b1fa3e7a2715f947ea481ab", 0xd0, 0xffffffffffffffda}, {&(0x7f00000002c0)="02adc41f97afaac8871e2e4fe41c01872c8be4724253c11f930b67c246c43fcbae25b1f9e717fb1ff642a9a0413cdb9b785e26d8e67165d29cf55878ae9df330bddac50a6fdb8841c63feb86bc876882579eec1168e04a07f95c5beedb7689fecd5244bc69816ce49114943fcd38d51592a1f156320a7aec3ca22387f866febda6299d78aede1eabf654a9b5841269349c28dddfd3c14df53d413d8171cd0474648c062ee2b8463b663dc93e4bdafcdec656323ac43ff685f3e8eaae7a783cd317b1a1f1b05dbc770acb34b2566d9c0de65c82914af6e28ded5be7aede64ea555e4eb7d17c01c459de4d871a91c3c06095603d44", 0xf4, 0x30a20cba}, {&(0x7f00000003c0)="1873969e2295d7", 0x7, 0x2}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
chdir(&(0x7f0000000480)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5, 0x800, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r4=>0x0, <r5=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000400)={{}, r5, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r6]}, @devid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r7=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYRESOCT, @ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000004c0)={r7, "b32328cba2024a057a8c1696deb08e7d"})
read(r1, &(0x7f0000000000)=""/25, 0x19)
sendfile(r1, r0, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

[  198.953204][T27063] __nla_validate_parse: 2 callbacks suppressed
[  198.953215][T27063] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'.
[  198.998917][T27071] loop3: detected capacity change from 0 to 16
[  199.007534][T27079] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'.
[  199.027140][T27071] FAULT_INJECTION: forcing a failure.
[  199.027140][T27071] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  199.040382][T27071] CPU: 0 PID: 27071 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x25, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x900000000000000}, 0x0)

[  199.049140][T27071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  199.059187][T27071] Call Trace:
[  199.062460][T27071]  dump_stack+0x137/0x19d
[  199.066839][T27071]  should_fail+0x23c/0x250
[  199.071266][T27071]  __alloc_pages+0x102/0x320
[  199.075857][T27071]  alloc_pages+0x21d/0x310
[  199.080272][T27071]  __page_cache_alloc+0x4d/0xf0
[  199.085121][T27071]  pagecache_get_page+0x5f4/0x900
[  199.090144][T27071]  grab_cache_page_write_begin+0x3f/0x70
23:16:02 executing program 0:
flock(0xffffffffffffffff, 0x1)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
fcntl$setlease(r2, 0x400, 0x1)
fallocate(r1, 0x45, 0xe6, 0x2b)
dup3(r1, r1, 0x80000)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  199.095771][T27071]  cont_write_begin+0x501/0x850
[  199.100652][T27071]  fat_write_begin+0x61/0xf0
[  199.102004][T27095] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'.
[  199.105231][T27071]  ? fat_block_truncate_page+0x30/0x30
[  199.119968][T27071]  generic_perform_write+0x196/0x3a0
[  199.125257][T27071]  ? fat_write_begin+0xf0/0xf0
[  199.130019][T27071]  __generic_file_write_iter+0x202/0x300
[  199.135641][T27071]  ? generic_write_checks+0x250/0x290
[  199.141021][T27071]  generic_file_write_iter+0x75/0x130
23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xc0, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  199.146499][T27071]  do_iter_readv_writev+0x2cb/0x360
[  199.151779][T27071]  do_iter_write+0x112/0x4c0
[  199.156361][T27071]  ? kmalloc_array+0x2d/0x40
[  199.160961][T27071]  vfs_iter_write+0x4c/0x70
[  199.165198][T27096] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'.
[  199.165503][T27071]  iter_file_splice_write+0x40a/0x750
[  199.180116][T27071]  ? splice_from_pipe+0xc0/0xc0
[  199.185042][T27071]  direct_splice_actor+0x80/0xa0
[  199.189972][T27071]  splice_direct_to_actor+0x345/0x650
23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x8000000000000000}, 0x0)

23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xec0, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  199.195337][T27071]  ? do_splice_direct+0x170/0x170
[  199.200358][T27071]  do_splice_direct+0xf5/0x170
[  199.205001][T27093] loop5: detected capacity change from 0 to 16908
[  199.205119][T27071]  do_sendfile+0x773/0xda0
[  199.205140][T27071]  __x64_sys_sendfile64+0xf2/0x130
[  199.205157][T27071]  do_syscall_64+0x4a/0x90
[  199.220298][T27093] FAT-fs (loop5): Unrecognized mount option "à
[  199.220298][T27093] 23Þrý™sŒzh’ÛÕ
[  199.220298][T27093] .„0ô^df±5Í6*g³–¢ç�"Ï€Y§ÙòÁ�Û\" or missing value
[  199.221043][T27071]  entry_SYSCALL_64_after_hwframe+0x44/0xae
23:16:02 executing program 3 (fault-call:5 fault-nth:18):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  199.221066][T27071] RIP: 0033:0x4665d9
[  199.221078][T27071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  199.221093][T27071] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  199.221110][T27071] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  199.287312][T27071] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
23:16:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000501)
truncate(0x0, 0xff6)

23:16:02 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1612c2, 0x110)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = eventfd(0x86c)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)={0x7fff, 0x537c, 0x4, 0x8, 0x5, [{0x40, 0x7, 0x100000000, '\x00', 0x1000}, {0x100000000, 0x9, 0x4, '\x00', 0x2004}, {0x1000, 0x7, 0x65ab, '\x00', 0x100}, {0xff, 0x41, 0x7f, '\x00', 0x80}, {0x1f, 0x8001, 0x5, '\x00', 0x800}]})

[  199.287322][T27071] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  199.287329][T27071] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  199.287341][T27071] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  199.304306][T27108] device lo entered promiscuous mode
[  199.305474][T27108] Y­4��`Ò˜: renamed from lo
23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  199.359924][T27093] loop5: detected capacity change from 0 to 16908
[  199.384920][T27093] FAT-fs (loop5): Unrecognized mount option "à
[  199.384920][T27093] 23Þrý™sŒzh’ÛÕ
[  199.384920][T27093] .„0ô^df±5Í6*g³–¢ç�"Ï€Y§ÙòÁ�Û\" or missing value
[  199.423586][T27131] loop3: detected capacity change from 0 to 16
[  199.452531][T27131] FAULT_INJECTION: forcing a failure.
[  199.452531][T27131] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  199.465942][T27131] CPU: 0 PID: 27131 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  199.474771][T27131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  199.484839][T27131] Call Trace:
[  199.488109][T27131]  dump_stack+0x137/0x19d
[  199.492426][T27131]  should_fail+0x23c/0x250
[  199.496826][T27131]  __alloc_pages+0x102/0x320
[  199.501426][T27131]  alloc_pages+0x21d/0x310
[  199.505912][T27131]  __page_cache_alloc+0x4d/0xf0
[  199.510758][T27131]  pagecache_get_page+0x5f4/0x900
[  199.515776][T27131]  grab_cache_page_write_begin+0x3f/0x70
[  199.521408][T27131]  cont_write_begin+0x501/0x850
[  199.526254][T27131]  fat_write_begin+0x61/0xf0
[  199.530873][T27131]  ? fat_block_truncate_page+0x30/0x30
[  199.536387][T27131]  generic_perform_write+0x196/0x3a0
[  199.541723][T27131]  ? fat_write_begin+0xf0/0xf0
[  199.546495][T27131]  __generic_file_write_iter+0x202/0x300
[  199.552153][T27131]  ? generic_write_checks+0x250/0x290
[  199.557576][T27131]  generic_file_write_iter+0x75/0x130
[  199.563024][T27131]  do_iter_readv_writev+0x2cb/0x360
[  199.568206][T27131]  do_iter_write+0x112/0x4c0
[  199.572783][T27131]  ? kmalloc_array+0x2d/0x40
[  199.577369][T27131]  vfs_iter_write+0x4c/0x70
[  199.581861][T27131]  iter_file_splice_write+0x40a/0x750
[  199.587223][T27131]  ? splice_from_pipe+0xc0/0xc0
[  199.592131][T27131]  direct_splice_actor+0x80/0xa0
[  199.597088][T27131]  splice_direct_to_actor+0x345/0x650
[  199.602465][T27131]  ? do_splice_direct+0x170/0x170
[  199.607549][T27131]  do_splice_direct+0xf5/0x170
[  199.612326][T27131]  do_sendfile+0x773/0xda0
[  199.616743][T27131]  __x64_sys_sendfile64+0xf2/0x130
23:16:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x2000024, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:16:02 executing program 0:
open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x1, 0xfb)
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)={0x200000, 0x120, 0x2}, 0x18)
sendfile(r1, r0, 0x0, 0x5)

23:16:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xda03000000000000}, 0x0)

23:16:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2000046c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000600)
truncate(0x0, 0xff6)

[  199.621855][T27131]  do_syscall_64+0x4a/0x90
[  199.626286][T27131]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  199.632183][T27131] RIP: 0033:0x4665d9
[  199.636072][T27131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  199.655844][T27131] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  199.664245][T27131] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:16:03 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read(r0, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r0, &(0x7f0000000000)=""/25, 0x19)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000))
r1 = open(&(0x7f0000000140)='./bus\x00', 0x5a9bc2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)

23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xefffffff00000000}, 0x0)

23:16:03 executing program 3 (fault-call:5 fault-nth:19):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  199.672214][T27131] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  199.680232][T27131] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  199.688193][T27131] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  199.688806][T27173] loop5: detected capacity change from 0 to 16
[  199.696171][T27131] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0xfffffdef, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

[  199.835543][T27203] loop3: detected capacity change from 0 to 16
[  199.853920][T27203] FAULT_INJECTION: forcing a failure.
[  199.853920][T27203] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  199.867243][T27203] CPU: 0 PID: 27203 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
23:16:03 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
sendfile(r1, r0, 0x0, 0x4000000000010046)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x34}}, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000003580), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r6, 0x736908346fbb83b4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NBD_CMD_STATUS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x400}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[  199.875996][T27203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  199.878744][T27173] loop5: detected capacity change from 0 to 16
[  199.886043][T27203] Call Trace:
[  199.886052][T27203]  dump_stack+0x137/0x19d
[  199.899837][T27203]  should_fail+0x23c/0x250
[  199.904270][T27203]  __alloc_pages+0x102/0x320
[  199.908856][T27203]  alloc_pages+0x21d/0x310
[  199.913275][T27203]  __page_cache_alloc+0x4d/0xf0
[  199.918124][T27203]  pagecache_get_page+0x5f4/0x900
[  199.923150][T27203]  grab_cache_page_write_begin+0x3f/0x70
[  199.928780][T27203]  cont_write_begin+0x501/0x850
[  199.933649][T27203]  fat_write_begin+0x61/0xf0
[  199.938275][T27203]  ? fat_block_truncate_page+0x30/0x30
[  199.943782][T27203]  generic_perform_write+0x196/0x3a0
[  199.949148][T27203]  ? fat_write_begin+0xf0/0xf0
[  199.953949][T27203]  __generic_file_write_iter+0x202/0x300
[  199.959630][T27203]  ? generic_write_checks+0x250/0x290
[  199.964997][T27203]  generic_file_write_iter+0x75/0x130
[  199.970369][T27203]  do_iter_readv_writev+0x2cb/0x360
[  199.975656][T27203]  do_iter_write+0x112/0x4c0
[  199.980260][T27203]  ? kmalloc_array+0x2d/0x40
[  199.984848][T27203]  vfs_iter_write+0x4c/0x70
[  199.989420][T27203]  iter_file_splice_write+0x40a/0x750
[  199.994911][T27203]  ? splice_from_pipe+0xc0/0xc0
[  199.999753][T27203]  direct_splice_actor+0x80/0xa0
[  200.004701][T27203]  splice_direct_to_actor+0x345/0x650
[  200.010184][T27203]  ? do_splice_direct+0x170/0x170
[  200.015271][T27203]  do_splice_direct+0xf5/0x170
[  200.020028][T27203]  do_sendfile+0x773/0xda0
[  200.024481][T27203]  __x64_sys_sendfile64+0xf2/0x130
23:16:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='iso9660\x00', 0x300806, &(0x7f00000001c0)='vfat\x00')
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300))
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:16:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x2, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

23:16:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000601)
truncate(0x0, 0xff6)

23:16:03 executing program 3 (fault-call:5 fault-nth:20):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  200.024495][T27203]  do_syscall_64+0x4a/0x90
[  200.024522][T27203]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  200.024589][T27203] RIP: 0033:0x4665d9
[  200.024598][T27203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  200.024608][T27203] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffffff00000000}, 0x0)

[  200.024619][T27203] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  200.024626][T27203] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  200.024632][T27203] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  200.024639][T27203] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
23:16:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x3, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  200.024645][T27203] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  200.144332][T27237] loop5: detected capacity change from 0 to 16
23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x20000, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x8)

23:16:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x8, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)

[  200.195294][T27250] loop3: detected capacity change from 0 to 16
[  200.209782][T27250] FAULT_INJECTION: forcing a failure.
[  200.209782][T27250] name failslab, interval 1, probability 0, space 0, times 0
[  200.222418][T27250] CPU: 0 PID: 27250 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  200.231318][T27250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  200.231330][T27250] Call Trace:
[  200.231337][T27250]  dump_stack+0x137/0x19d
[  200.231359][T27250]  should_fail+0x23c/0x250
[  200.231377][T27250]  ? fat_cache_add+0x219/0x570
[  200.231437][T27250]  __should_failslab+0x81/0x90
[  200.231471][T27250]  should_failslab+0x5/0x20
[  200.231485][T27250]  kmem_cache_alloc+0x46/0x2f0
[  200.231578][T27250]  fat_cache_add+0x219/0x570
[  200.231594][T27250]  fat_get_cluster+0x58e/0x870
[  200.231608][T27250]  fat_get_mapped_cluster+0xd0/0x250
[  200.231705][T27250]  fat_bmap+0x258/0x290
[  200.231719][T27250]  fat_get_block+0x36d/0x5a0
[  200.231758][T27250]  __block_write_begin_int+0x4a2/0x1060
[  200.231779][T27250]  ? fat_block_truncate_page+0x30/0x30
[  200.231823][T27250]  ? wait_for_stable_page+0x56/0x70
[  200.231889][T27250]  cont_write_begin+0x522/0x850
[  200.231908][T27250]  fat_write_begin+0x61/0xf0
[  200.231927][T27250]  ? fat_block_truncate_page+0x30/0x30
[  200.231983][T27250]  generic_perform_write+0x196/0x3a0
[  200.232028][T27250]  ? fat_write_begin+0xf0/0xf0
[  200.232047][T27250]  __generic_file_write_iter+0x202/0x300
[  200.232074][T27250]  ? generic_write_checks+0x250/0x290
23:16:03 executing program 0:
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = syz_open_dev$rtc(&(0x7f0000000000), 0x2, 0x4800)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x1b, 0x1f, 0xd, 0x5, 0x6, 0xe43, 0x0, 0x10c, 0x1})
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x10001)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

23:16:03 executing program 3 (fault-call:5 fault-nth:21):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000701)
truncate(0x0, 0xff6)

23:16:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x9, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x0)

23:16:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[  200.232092][T27250]  generic_file_write_iter+0x75/0x130
[  200.232108][T27250]  do_iter_readv_writev+0x2cb/0x360
[  200.232123][T27250]  do_iter_write+0x112/0x4c0
[  200.232140][T27250]  ? iter_file_splice_write+0x382/0x750
[  200.232213][T27250]  vfs_iter_write+0x4c/0x70
[  200.232228][T27250]  iter_file_splice_write+0x40a/0x750
[  200.232248][T27250]  ? splice_from_pipe+0xc0/0xc0
[  200.232266][T27250]  direct_splice_actor+0x80/0xa0
[  200.232280][T27250]  splice_direct_to_actor+0x345/0x650
[  200.232340][T27250]  ? do_splice_direct+0x170/0x170
23:16:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1b, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  200.232359][T27250]  do_splice_direct+0xf5/0x170
[  200.232378][T27250]  do_sendfile+0x773/0xda0
[  200.232395][T27250]  __x64_sys_sendfile64+0xf2/0x130
[  200.232441][T27250]  do_syscall_64+0x4a/0x90
[  200.232457][T27250]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  200.232498][T27250] RIP: 0033:0x4665d9
[  200.232512][T27250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  200.232578][T27250] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  200.232597][T27250] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  200.232609][T27250] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  200.232620][T27250] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  200.232630][T27250] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  200.232641][T27250] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  200.342832][T27283] loop5: detected capacity change from 0 to 16
[  200.438063][T27283] loop5: detected capacity change from 0 to 16
[  200.523544][T27303] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0
[  200.582918][T27305] FAULT_INJECTION: forcing a failure.
[  200.582918][T27305] name failslab, interval 1, probability 0, space 0, times 0
[  200.598927][T27305] CPU: 1 PID: 27305 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  200.607760][T27305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  200.617894][T27305] Call Trace:
[  200.621154][T27305]  dump_stack+0x137/0x19d
[  200.625468][T27305]  should_fail+0x23c/0x250
[  200.629865][T27305]  ? __es_insert_extent+0x51f/0xe70
[  200.635044][T27305]  __should_failslab+0x81/0x90
[  200.639870][T27305]  should_failslab+0x5/0x20
[  200.644438][T27305]  kmem_cache_alloc+0x46/0x2f0
[  200.649272][T27305]  __es_insert_extent+0x51f/0xe70
[  200.654332][T27305]  ext4_es_insert_extent+0x1bb/0x19d0
[  200.659761][T27305]  ? ext4_es_lookup_extent+0x36b/0x490
[  200.665332][T27305]  ext4_map_blocks+0xa4c/0xef0
[  200.670138][T27305]  ? ext4_iomap_begin+0x3e2/0x620
[  200.675152][T27305]  ? __cond_resched+0x11/0x40
[  200.679814][T27305]  ext4_iomap_begin+0x4a3/0x620
[  200.684794][T27305]  iomap_apply+0x8d/0x400
[  200.689164][T27305]  ? unlock_page_memcg+0xc3/0xe0
[  200.694096][T27305]  __iomap_dio_rw+0x5af/0xad0
[  200.698760][T27305]  ? __iomap_dio_rw+0xad0/0xad0
[  200.703597][T27305]  iomap_dio_rw+0x30/0x70
[  200.707926][T27305]  ? ext4_file_write_iter+0x4a1/0x11d0
[  200.713372][T27305]  ext4_file_write_iter+0xa4f/0x11d0
[  200.718661][T27305]  ? ext4_file_write_iter+0x4a1/0x11d0
[  200.724115][T27305]  do_iter_readv_writev+0x2cb/0x360
[  200.729298][T27305]  do_iter_write+0x112/0x4c0
[  200.733869][T27305]  ? kmalloc_array+0x2d/0x40
[  200.738471][T27305]  vfs_iter_write+0x4c/0x70
[  200.742955][T27305]  iter_file_splice_write+0x40a/0x750
[  200.748341][T27305]  ? splice_from_pipe+0xc0/0xc0
[  200.753176][T27305]  direct_splice_actor+0x80/0xa0
[  200.758141][T27305]  splice_direct_to_actor+0x345/0x650
[  200.763495][T27305]  ? do_splice_direct+0x170/0x170
[  200.768555][T27305]  do_splice_direct+0xf5/0x170
[  200.773299][T27305]  do_sendfile+0x773/0xda0
[  200.777770][T27305]  __x64_sys_sendfile64+0xf2/0x130
[  200.782858][T27305]  do_syscall_64+0x4a/0x90
[  200.787292][T27305]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  200.793169][T27305] RIP: 0033:0x4665d9
[  200.797042][T27305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  200.816700][T27305] RSP: 002b:00007f1c2ed59188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  200.825093][T27305] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  200.833044][T27305] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  200.840998][T27305] RBP: 00007f1c2ed591d0 R08: 0000000000000000 R09: 0000000000000000
[  200.849016][T27305] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  200.856964][T27305] R13: 00007ffcaa0c27cf R14: 00007f1c2ed59300 R15: 0000000000022000
23:16:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  200.867795][  T885] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  200.909011][T27298] loop3: detected capacity change from 0 to 16
23:16:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0)

23:16:04 executing program 3 (fault-call:5 fault-nth:22):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:04 executing program 0:
r0 = open(&(0x7f0000000100)='./bus\x00', 0x161282, 0x92)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
io_setup(0x81, &(0x7f0000000100)=<r4=>0x0)
fcntl$setstatus(r3, 0x4, 0x6800)
io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xffffffc9}])
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x2d, 0x6, 0xda, 0x0, 0x10000, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa9, 0x4, @perf_config_ext={0x8}, 0x0, 0x6, 0x1, 0x0, 0x765d, 0x100, 0x8001, 0x0, 0x3, 0x0, 0xff}, r2, 0x9, r3, 0x4)
syz_open_procfs(r2, &(0x7f0000000140)='attr\x00')
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @loopback}, 0x90, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000000)='bridge_slave_0\x00', 0x7ff, 0x2, 0xfff8})

23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x300, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000801)
truncate(0x0, 0xff6)

[  200.937635][T27322] loop5: detected capacity change from 0 to 16
23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  201.039739][T27342] loop3: detected capacity change from 0 to 16
[  201.070799][T27342] FAULT_INJECTION: forcing a failure.
[  201.070799][T27342] name failslab, interval 1, probability 0, space 0, times 0
[  201.076878][T27353] loop5: detected capacity change from 0 to 16
[  201.083431][T27342] CPU: 0 PID: 27342 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  201.098329][T27342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  201.108379][T27342] Call Trace:
[  201.111708][T27342]  dump_stack+0x137/0x19d
[  201.116041][T27342]  should_fail+0x23c/0x250
[  201.120528][T27342]  ? fat_cache_add+0x219/0x570
[  201.125294][T27342]  __should_failslab+0x81/0x90
[  201.130053][T27342]  should_failslab+0x5/0x20
[  201.134551][T27342]  kmem_cache_alloc+0x46/0x2f0
[  201.139371][T27342]  fat_cache_add+0x219/0x570
[  201.143964][T27342]  fat_get_cluster+0x58e/0x870
[  201.148734][T27342]  fat_truncate_blocks+0x277/0x550
[  201.153842][T27342]  ? unmap_mapping_range+0x46/0x50
[  201.159047][T27342]  fat_write_begin+0xd0/0xf0
[  201.163781][T27342]  generic_perform_write+0x196/0x3a0
[  201.169165][T27342]  ? fat_write_begin+0xf0/0xf0
[  201.173925][T27342]  __generic_file_write_iter+0x202/0x300
[  201.179557][T27342]  ? generic_write_checks+0x250/0x290
[  201.184947][T27342]  generic_file_write_iter+0x75/0x130
[  201.190317][T27342]  do_iter_readv_writev+0x2cb/0x360
[  201.195587][T27342]  do_iter_write+0x112/0x4c0
[  201.200173][T27342]  ? kmalloc_array+0x2d/0x40
[  201.204755][T27342]  vfs_iter_write+0x4c/0x70
[  201.209257][T27342]  iter_file_splice_write+0x40a/0x750
[  201.214661][T27342]  ? splice_from_pipe+0xc0/0xc0
[  201.219508][T27342]  direct_splice_actor+0x80/0xa0
[  201.224443][T27342]  splice_direct_to_actor+0x345/0x650
[  201.229905][T27342]  ? do_splice_direct+0x170/0x170
[  201.235001][T27342]  do_splice_direct+0xf5/0x170
23:16:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x0)

23:16:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000900)
truncate(0x0, 0xff6)

23:16:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x2, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:04 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000000700)=""/4111, 0x100f)
read(r1, &(0x7f0000000000)=""/25, 0x19)
recvmmsg(r1, &(0x7f000000bf40)=[{{&(0x7f0000002900)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000002980)=""/244, 0xf4}, {&(0x7f0000002a80)=""/102, 0x66}, {&(0x7f0000002b00)=""/115, 0x73}], 0x3, &(0x7f00000018c0)=""/54, 0x36}, 0x100}, {{&(0x7f0000002b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002c00)=""/114, 0x72}, {&(0x7f0000002c80)}, {&(0x7f0000002cc0)=""/231, 0xe7}, {&(0x7f0000003dc0)=""/37, 0x25}, {&(0x7f0000003e00)=""/45, 0x2d}], 0x5, &(0x7f0000003ec0)=""/32, 0x20}, 0x100}, {{&(0x7f0000003f00)=@ethernet, 0x80, &(0x7f00000045c0)=[{&(0x7f0000003f80)=""/157, 0x9d}, {&(0x7f0000004040)=""/235, 0xeb}, {&(0x7f0000004140)=""/159, 0x9f}, {&(0x7f0000004200)=""/245, 0xf5}, {&(0x7f0000004300)=""/71, 0x47}, {&(0x7f0000004380)=""/104, 0x68}, {&(0x7f0000004400)=""/233, 0xe9}, {&(0x7f0000004500)=""/156, 0x9c}], 0x8}, 0xd3df}, {{0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000004640)=""/27, 0x1b}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/198, 0xc6}, {&(0x7f0000005780)=""/13, 0xd}, {&(0x7f00000057c0)=""/235, 0xeb}, {&(0x7f00000058c0)=""/248, 0xf8}, {&(0x7f00000059c0)=""/58, 0x3a}], 0x7, &(0x7f0000005a80)=""/202, 0xca}, 0x4b}, {{&(0x7f0000005b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000006d40)=[{&(0x7f0000005c00)=""/4096, 0x1000}, {&(0x7f0000006c00)=""/144, 0x90}, {&(0x7f0000006cc0)=""/106, 0x6a}], 0x3, &(0x7f0000006d80)=""/150, 0x96}, 0xffffffff}, {{&(0x7f0000006e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000009280)=[{&(0x7f0000006ec0)=""/138, 0x8a}, {&(0x7f0000006f80)=""/57, 0x39}, {&(0x7f0000006fc0)=""/4096, 0x1000}, {&(0x7f0000007fc0)=""/108, 0x6c}, {&(0x7f0000008040)=""/15, 0xf}, {&(0x7f0000008080)=""/227, 0xe3}, {&(0x7f0000008180)=""/57, 0x39}, {&(0x7f00000081c0)=""/154, 0x9a}, {&(0x7f0000008280)=""/4096, 0x1000}], 0x9, &(0x7f0000009340)=""/53, 0x35}, 0x1}, {{&(0x7f0000009380)=@ipx, 0x80, &(0x7f0000009b00)=[{&(0x7f0000009400)=""/250, 0xfa}, {&(0x7f0000009500)=""/75, 0x4b}, {&(0x7f0000009580)=""/64, 0x40}, {&(0x7f00000095c0)=""/150, 0x96}, {&(0x7f0000009680)=""/254, 0xfe}, {&(0x7f0000009780)=""/143, 0x8f}, {&(0x7f0000009840)=""/50, 0x32}, {&(0x7f0000009880)=""/108, 0x6c}, {&(0x7f0000009900)=""/237, 0xed}, {&(0x7f0000009a00)=""/202, 0xca}], 0xa, &(0x7f0000009bc0)=""/135, 0x87}}, {{&(0x7f0000009c80)=@hci, 0x80, &(0x7f000000be40)=[{&(0x7f0000009d00)=""/4096, 0x1000}, {&(0x7f000000ad00)=""/65, 0x41}, {&(0x7f000000ad80)=""/188, 0xbc}, {&(0x7f000000ae40)=""/4096, 0x1000}], 0x4, &(0x7f000000be80)=""/139, 0x8b}, 0xfff}], 0x8, 0x100, &(0x7f000000c140))
r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x10000000, 0x40000)
r3 = syz_mount_image$nfs4(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000000440)="61e17d3ebdde9e2958f5bf9d43bfb3b9c28755e1c90f6d1a274fc41f78d2346c57208fe16e5200c114243504b0f419a27a50a39f81cbd3256a18c21fe03e64b7c6714013788e290b3f0447", 0x4b, 0x8}, {&(0x7f00000004c0)="ddaefd15a7b3cf11428ffa002fdefb8df2654a0b9b5bf6fcd7525e6944234f990ef8f583b36897a6bb277b1f6e3a9541a4a7b4e2", 0x34, 0x2}, {&(0x7f0000000500)="4e98f86bf21a19e552ed73295562371f6673bd56", 0x14, 0x5}, {&(0x7f0000001900)="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", 0x1000, 0x9}], 0xd, &(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee01, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000005c0), 0x440080, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
io_submit(0x0, 0x4, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x2f, r0, &(0x7f0000000000)="a39971ef1aef820b9d724f447f369d5160d50b8c9bdd32e24cedea2e4fbc7990ea4393a5a78dbeb209e936a3ac5773", 0x2f, 0xfffffffffffffff8, 0x0, 0x3, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000180)="e23dcad0b8e97a7f34b7e4008ba7da73a2a888ea17aaa974040b40326ef8783d0ece5c426b68ce43ed65a7bf09c79404bf3f5ab9900b88c0f67198d1e4ea4f92a9f39adc877c0941d26e6af9da3187ddf1f03c53ecf393a32a98165c8c96f7120d0f96f5d2d200265f988954b413f1b0267d860e643869c6237e7d646267ce18cda129cd0b80fd033e7b8aceb0453243cdb2a8eabb4fd79cecc509ffacf0b54946d04331c603fca72d14433a87b02dad2d8b355fc14bcd519c54543369c63ad2606bdc50a231e22841ebd4ec12f45a347aef9dfc09479c7c491050f1f2d2dbffa2b42ea47f8198c767", 0xe9, 0x2, 0x0, 0x3, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xfff, r0, &(0x7f0000000280)="c65d4c7ef3c8f8b61df8825b120a556741ed2d0c60004c21732948e990d6236ac9e7d299c23d4e7d38b67aa01bc8cb0f6d4ef69d478b0a751338193255659ac0986de8aa087c3ecfbba5764def05326ed872ca770cac44a86ace679bd38fcd268618ba8d661ede358be31b4ea1ad017d1bcb8ef7863db36504b8a32698f1f4ba4cc898bf1663b111a2e064591ec724fcd7b69b20ec1fc529ed4fd0f43df0106f467a55495e51e9647dcf727a3db3ed3eff11cf2f1afe06dde89da3db989fc3221a18a59718", 0xc5, 0x4, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x8000, r3, &(0x7f0000000640)="7076ed14aecdfae0fca1af90983f598a25cdfaa8e40d7f756f46a07d6e9be72cc2eb", 0x22, 0xfffffffffffffeff, 0x0, 0x3, r4}])
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x4000000000010046)
readahead(r3, 0xffffffff, 0x5)

23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x3, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  201.239771][T27342]  do_sendfile+0x773/0xda0
[  201.244180][T27342]  __x64_sys_sendfile64+0xf2/0x130
[  201.249286][T27342]  do_syscall_64+0x4a/0x90
[  201.253707][T27342]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  201.259608][T27342] RIP: 0033:0x4665d9
[  201.263534][T27342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:16:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7}, 0x0)

[  201.283137][T27342] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  201.283160][T27342] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  201.283170][T27342] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  201.283179][T27342] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  201.283188][T27342] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
23:16:04 executing program 3 (fault-call:5 fault-nth:23):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x4, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x0)

23:16:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x5, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  201.283197][T27342] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  201.359939][T27378] loop0: detected capacity change from 0 to 8
[  201.360188][T27391] loop5: detected capacity change from 0 to 16
[  201.366936][T27378] nfs4: Unknown parameter '/proc/tim'
23:16:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300}, 0x0)

23:16:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000901)
truncate(0x0, 0xff6)

23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x6, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:04 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0)

23:16:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3da}, 0x0)

[  201.447001][T27389] loop0: detected capacity change from 0 to 8
[  201.461416][T27389] nfs4: Unknown parameter '/proc/tim'
23:16:04 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x7, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  201.520588][T27426] loop5: detected capacity change from 0 to 16
[  201.527033][T27428] loop3: detected capacity change from 0 to 16
[  201.547050][T27428] FAULT_INJECTION: forcing a failure.
[  201.547050][T27428] name failslab, interval 1, probability 0, space 0, times 0
[  201.559753][T27428] CPU: 0 PID: 27428 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  201.568501][T27428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  201.578549][T27428] Call Trace:
[  201.581896][T27428]  dump_stack+0x137/0x19d
[  201.586219][T27428]  should_fail+0x23c/0x250
[  201.590637][T27428]  ? mempool_alloc_slab+0x16/0x20
[  201.595675][T27428]  __should_failslab+0x81/0x90
[  201.600435][T27428]  should_failslab+0x5/0x20
[  201.604949][T27428]  kmem_cache_alloc+0x46/0x2f0
[  201.609709][T27428]  ? mark_page_accessed+0x1e3/0x550
[  201.615026][T27428]  ? pagecache_get_page+0x77a/0x900
[  201.620333][T27428]  mempool_alloc_slab+0x16/0x20
[  201.625185][T27428]  ? mempool_free+0x130/0x130
[  201.629913][T27428]  mempool_alloc+0x8c/0x300
[  201.634411][T27428]  bio_alloc_bioset+0xcc/0x480
[  201.639180][T27428]  ? bdev_write_page+0x82/0x130
[  201.644039][T27428]  __mpage_writepage+0xa40/0x1080
[  201.649071][T27428]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  201.654830][T27428]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  201.660464][T27428]  write_cache_pages+0x4d7/0x810
[  201.665429][T27428]  ? mpage_writepages+0x120/0x120
[  201.670716][T27428]  ? fat_readpage+0x20/0x20
[  201.675252][T27428]  ? fat_block_truncate_page+0x30/0x30
[  201.680713][T27428]  mpage_writepages+0x6d/0x120
[  201.685522][T27428]  ? fat_block_truncate_page+0x30/0x30
[  201.691053][T27428]  fat_writepages+0x20/0x30
[  201.695625][T27428]  do_writepages+0x7b/0x150
[  201.700298][T27428]  ? generic_perform_write+0x332/0x3a0
[  201.705758][T27428]  filemap_write_and_wait_range+0x20a/0x390
[  201.711648][T27428]  __generic_file_write_iter+0x231/0x300
[  201.717275][T27428]  ? generic_write_checks+0x250/0x290
[  201.722675][T27428]  generic_file_write_iter+0x75/0x130
[  201.728107][T27428]  do_iter_readv_writev+0x2cb/0x360
[  201.733304][T27428]  do_iter_write+0x112/0x4c0
[  201.737902][T27428]  ? kmalloc_array+0x2d/0x40
[  201.742491][T27428]  vfs_iter_write+0x4c/0x70
[  201.746992][T27428]  iter_file_splice_write+0x40a/0x750
[  201.752354][T27428]  ? splice_from_pipe+0xc0/0xc0
[  201.757273][T27428]  direct_splice_actor+0x80/0xa0
[  201.762217][T27428]  splice_direct_to_actor+0x345/0x650
[  201.767588][T27428]  ? do_splice_direct+0x170/0x170
[  201.772845][T27428]  do_splice_direct+0xf5/0x170
[  201.777622][T27428]  do_sendfile+0x773/0xda0
[  201.782030][T27428]  __x64_sys_sendfile64+0xf2/0x130
[  201.787133][T27428]  do_syscall_64+0x4a/0x90
[  201.791566][T27428]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  201.797503][T27428] RIP: 0033:0x4665d9
[  201.801383][T27428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:16:05 executing program 3 (fault-call:5 fault-nth:24):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x500}, 0x0)

23:16:05 executing program 0:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x80000001, 0x5)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
sendfile(r0, r0, &(0x7f0000000100)=0x6c, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x408)
sendfile(r0, r1, 0x0, 0x4000000000010046)
lgetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)=@random={'os2.', '&!%%\x00'}, &(0x7f00000000c0)=""/21, 0x15)

23:16:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000a01)
truncate(0x0, 0xff6)

[  201.820962][T27428] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  201.829343][T27428] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  201.837294][T27428] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  201.845258][T27428] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  201.853206][T27428] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  201.861155][T27428] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

23:16:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x300, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:05 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:05 executing program 0:
r0 = open(&(0x7f0000001600)='./bus\x00', 0x1612c2, 0x0)
mkdirat(r0, &(0x7f0000000080)='./bus\x00', 0x21)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x109800, 0x0)
preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000080)}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/205, 0xcd}], 0x7, 0x4f, 0x435e)
symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000001640)='./bus\x00')

[  201.927643][T27483] loop5: detected capacity change from 0 to 16
23:16:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x700}, 0x0)

23:16:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x500, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  201.989635][T27496] loop3: detected capacity change from 0 to 16
[  202.013285][T27496] FAULT_INJECTION: forcing a failure.
[  202.013285][T27496] name failslab, interval 1, probability 0, space 0, times 0
[  202.025924][T27496] CPU: 0 PID: 27496 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
23:16:05 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000))
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x4000000000010046)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x304400, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004000)
r4 = accept4$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x1c, 0x180000)
fcntl$getown(r4, 0x9)

[  202.034730][T27496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  202.044780][T27496] Call Trace:
[  202.048055][T27496]  dump_stack+0x137/0x19d
[  202.052446][T27496]  should_fail+0x23c/0x250
[  202.056861][T27496]  ? mempool_alloc_slab+0x16/0x20
[  202.061931][T27496]  __should_failslab+0x81/0x90
[  202.066800][T27496]  should_failslab+0x5/0x20
[  202.071331][T27496]  kmem_cache_alloc+0x46/0x2f0
[  202.076096][T27496]  ? mempool_alloc_slab+0x16/0x20
[  202.081132][T27496]  mempool_alloc_slab+0x16/0x20
[  202.085978][T27496]  ? mempool_free+0x130/0x130
[  202.090656][T27496]  mempool_alloc+0x8c/0x300
[  202.095166][T27496]  bio_alloc_bioset+0x1af/0x480
[  202.100010][T27496]  __mpage_writepage+0xa40/0x1080
[  202.105045][T27496]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  202.110687][T27496]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  202.116336][T27496]  write_cache_pages+0x4d7/0x810
[  202.121279][T27496]  ? mpage_writepages+0x120/0x120
[  202.126302][T27496]  ? fat_readpage+0x20/0x20
[  202.130798][T27496]  ? fat_block_truncate_page+0x30/0x30
[  202.136292][T27496]  mpage_writepages+0x6d/0x120
[  202.141053][T27496]  ? fat_block_truncate_page+0x30/0x30
[  202.146548][T27496]  fat_writepages+0x20/0x30
[  202.151078][T27496]  do_writepages+0x7b/0x150
[  202.155588][T27496]  ? generic_perform_write+0x332/0x3a0
[  202.161046][T27496]  filemap_write_and_wait_range+0x20a/0x390
[  202.161067][T27496]  __generic_file_write_iter+0x231/0x300
[  202.161089][T27496]  ? generic_write_checks+0x250/0x290
[  202.161108][T27496]  generic_file_write_iter+0x75/0x130
23:16:05 executing program 3 (fault-call:5 fault-nth:25):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x900}, 0x0)

23:16:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x5f5, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000b00)
truncate(0x0, 0xff6)

23:16:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xda03}, 0x0)

[  202.161163][T27496]  do_iter_readv_writev+0x2cb/0x360
[  202.161180][T27496]  do_iter_write+0x112/0x4c0
[  202.161197][T27496]  ? kmalloc_array+0x2d/0x40
[  202.161283][T27496]  vfs_iter_write+0x4c/0x70
[  202.161297][T27496]  iter_file_splice_write+0x40a/0x750
[  202.161317][T27496]  ? splice_from_pipe+0xc0/0xc0
[  202.161335][T27496]  direct_splice_actor+0x80/0xa0
[  202.161353][T27496]  splice_direct_to_actor+0x345/0x650
[  202.161368][T27496]  ? do_splice_direct+0x170/0x170
[  202.161435][T27496]  do_splice_direct+0xf5/0x170
[  202.161458][T27496]  do_sendfile+0x773/0xda0
23:16:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x600, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  202.161476][T27496]  __x64_sys_sendfile64+0xf2/0x130
[  202.161494][T27496]  do_syscall_64+0x4a/0x90
[  202.161515][T27496]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  202.161538][T27496] RIP: 0033:0x4665d9
[  202.161551][T27496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  202.161648][T27496] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
23:16:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000}, 0x0)

[  202.161667][T27496] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  202.161678][T27496] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  202.161686][T27496] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  202.161774][T27496] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  202.161786][T27496] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  202.214147][T27527] loop5: detected capacity change from 0 to 16
[  202.381084][T27559] loop3: detected capacity change from 0 to 16
[  202.394529][T27559] FAULT_INJECTION: forcing a failure.
[  202.394529][T27559] name failslab, interval 1, probability 0, space 0, times 0
[  202.407179][T27559] CPU: 0 PID: 27559 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  202.415931][T27559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  202.425997][T27559] Call Trace:
[  202.429262][T27559]  dump_stack+0x137/0x19d
[  202.433594][T27559]  should_fail+0x23c/0x250
[  202.438000][T27559]  ? mempool_alloc_slab+0x16/0x20
[  202.443019][T27559]  __should_failslab+0x81/0x90
[  202.447890][T27559]  should_failslab+0x5/0x20
[  202.452386][T27559]  kmem_cache_alloc+0x46/0x2f0
[  202.457140][T27559]  mempool_alloc_slab+0x16/0x20
[  202.462022][T27559]  ? mempool_free+0x130/0x130
[  202.466746][T27559]  mempool_alloc+0x8c/0x300
[  202.471344][T27559]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  202.477083][T27559]  bio_alloc_bioset+0xcc/0x480
[  202.481976][T27559]  ? __test_set_page_writeback+0x49b/0x500
[  202.485289][T27571] loop5: detected capacity change from 0 to 16
[  202.487768][T27559]  submit_bh_wbc+0x130/0x330
[  202.498480][T27559]  __block_write_full_page+0x648/0xa10
[  202.503930][T27559]  ? mark_buffer_write_io_error+0x170/0x170
[  202.509838][T27559]  ? fat_block_truncate_page+0x30/0x30
[  202.515348][T27559]  ? fat_block_truncate_page+0x30/0x30
[  202.520819][T27559]  block_write_full_page+0x240/0x260
[  202.526101][T27559]  fat_writepage+0x20/0x30
[  202.530532][T27559]  __mpage_writepage+0xcf3/0x1080
[  202.535658][T27559]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  202.541279][T27559]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  202.546899][T27559]  write_cache_pages+0x4d7/0x810
[  202.551898][T27559]  ? mpage_writepages+0x120/0x120
[  202.556906][T27559]  ? fat_readpage+0x20/0x20
[  202.561511][T27559]  ? fat_block_truncate_page+0x30/0x30
[  202.566966][T27559]  mpage_writepages+0x6d/0x120
[  202.571708][T27559]  ? fat_block_truncate_page+0x30/0x30
[  202.577157][T27559]  fat_writepages+0x20/0x30
[  202.581680][T27559]  do_writepages+0x7b/0x150
[  202.586202][T27559]  ? generic_perform_write+0x332/0x3a0
[  202.591658][T27559]  filemap_write_and_wait_range+0x20a/0x390
[  202.597531][T27559]  __generic_file_write_iter+0x231/0x300
[  202.603282][T27559]  ? generic_write_checks+0x250/0x290
[  202.608644][T27559]  generic_file_write_iter+0x75/0x130
[  202.613997][T27559]  do_iter_readv_writev+0x2cb/0x360
[  202.619173][T27559]  do_iter_write+0x112/0x4c0
[  202.623769][T27559]  ? kmalloc_array+0x2d/0x40
[  202.628350][T27559]  vfs_iter_write+0x4c/0x70
[  202.632841][T27559]  iter_file_splice_write+0x40a/0x750
[  202.638221][T27559]  ? splice_from_pipe+0xc0/0xc0
[  202.643084][T27559]  direct_splice_actor+0x80/0xa0
[  202.648134][T27559]  splice_direct_to_actor+0x345/0x650
[  202.653592][T27559]  ? do_splice_direct+0x170/0x170
[  202.658617][T27559]  do_splice_direct+0xf5/0x170
[  202.663373][T27559]  do_sendfile+0x773/0xda0
[  202.667985][T27559]  __x64_sys_sendfile64+0xf2/0x130
[  202.673253][T27559]  do_syscall_64+0x4a/0x90
23:16:05 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x700, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:05 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x41)
r1 = accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'macvlan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000000000000000000000000e4d6f591d13d85ea000000709d428d"]})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x4000000000010046)
accept(r1, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff}}, &(0x7f0000000240)=0x80)
syncfs(r3)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e)

23:16:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

23:16:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x900, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  202.677746][T27559]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  202.683721][T27559] RIP: 0033:0x4665d9
[  202.687597][T27559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  202.707189][T27559] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  202.715583][T27559] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  202.723534][T27559] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
23:16:06 executing program 3 (fault-call:5 fault-nth:26):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000b01)
truncate(0x0, 0xff6)

23:16:06 executing program 0:
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @remote}, 0x205, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='vxcan1\x00', 0xe8, 0x20, 0x3549})
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
creat(&(0x7f0000000180)='./bus\x00', 0x20)
write(r1, &(0x7f0000000100)="283e3a967544f7e95ff3ef992f06a27c9ddbde5c428701f40d14436f3ba7d684aba79f0dc41d23f0ad0a965cd514bcd5c0d541a1fd9c", 0x36)

23:16:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

[  202.731494][T27559] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  202.739444][T27559] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  202.747395][T27559] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf505, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:06 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0xd)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:06 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  202.832783][T27602] loop3: detected capacity change from 0 to 16
[  202.866741][T27602] FAULT_INJECTION: forcing a failure.
[  202.866741][T27602] name failslab, interval 1, probability 0, space 0, times 0
[  202.879399][T27602] CPU: 0 PID: 27602 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  202.888221][T27602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  202.898309][T27602] Call Trace:
[  202.901580][T27602]  dump_stack+0x137/0x19d
[  202.905917][T27602]  should_fail+0x23c/0x250
[  202.910326][T27602]  ? mempool_alloc_slab+0x16/0x20
[  202.915447][T27602]  __should_failslab+0x81/0x90
[  202.920258][T27602]  should_failslab+0x5/0x20
[  202.924005][T27612] loop5: detected capacity change from 0 to 16
[  202.924761][T27602]  kmem_cache_alloc+0x46/0x2f0
[  202.935654][T27602]  ? mempool_alloc_slab+0x16/0x20
[  202.940692][T27602]  mempool_alloc_slab+0x16/0x20
[  202.945548][T27602]  ? mempool_free+0x130/0x130
[  202.950229][T27602]  mempool_alloc+0x8c/0x300
[  202.954749][T27602]  ? __bio_add_page+0x1a3/0x210
[  202.959595][T27602]  bio_alloc_bioset+0xcc/0x480
[  202.964378][T27602]  submit_bh_wbc+0x130/0x330
[  202.968959][T27602]  __block_write_full_page+0x648/0xa10
[  202.974471][T27602]  ? mark_buffer_write_io_error+0x170/0x170
[  202.980352][T27602]  ? fat_block_truncate_page+0x30/0x30
[  202.985793][T27602]  ? fat_block_truncate_page+0x30/0x30
[  202.991236][T27602]  block_write_full_page+0x240/0x260
[  202.996659][T27602]  fat_writepage+0x20/0x30
[  203.001075][T27602]  __mpage_writepage+0xcf3/0x1080
[  203.006147][T27602]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  203.011823][T27602]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  203.017521][T27602]  write_cache_pages+0x4d7/0x810
[  203.022445][T27602]  ? mpage_writepages+0x120/0x120
[  203.027467][T27602]  ? fat_readpage+0x20/0x20
[  203.031973][T27602]  ? fat_block_truncate_page+0x30/0x30
[  203.037423][T27602]  mpage_writepages+0x6d/0x120
[  203.042183][T27602]  ? fat_block_truncate_page+0x30/0x30
[  203.047646][T27602]  fat_writepages+0x20/0x30
[  203.052135][T27602]  do_writepages+0x7b/0x150
[  203.056621][T27602]  ? generic_perform_write+0x332/0x3a0
[  203.062144][T27602]  filemap_write_and_wait_range+0x20a/0x390
[  203.068020][T27602]  __generic_file_write_iter+0x231/0x300
[  203.073635][T27602]  ? generic_write_checks+0x250/0x290
[  203.079043][T27602]  generic_file_write_iter+0x75/0x130
[  203.084402][T27602]  do_iter_readv_writev+0x2cb/0x360
[  203.089583][T27602]  do_iter_write+0x112/0x4c0
[  203.094159][T27602]  ? kmalloc_array+0x2d/0x40
[  203.098745][T27602]  vfs_iter_write+0x4c/0x70
[  203.103231][T27602]  iter_file_splice_write+0x40a/0x750
[  203.108601][T27602]  ? splice_from_pipe+0xc0/0xc0
[  203.113436][T27602]  direct_splice_actor+0x80/0xa0
[  203.118354][T27602]  splice_direct_to_actor+0x345/0x650
[  203.123709][T27602]  ? do_splice_direct+0x170/0x170
[  203.128717][T27602]  do_splice_direct+0xf5/0x170
[  203.133460][T27602]  do_sendfile+0x773/0xda0
[  203.137857][T27602]  __x64_sys_sendfile64+0xf2/0x130
[  203.142961][T27602]  do_syscall_64+0x4a/0x90
[  203.147359][T27602]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  203.153238][T27602] RIP: 0033:0x4665d9
[  203.157113][T27602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
23:16:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

23:16:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x30000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:06 executing program 0:
r0 = open(&(0x7f0000000000)='./bus/../file0\x00', 0x1212c2, 0x2d)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000c00)
truncate(0x0, 0xff6)

[  203.176699][T27602] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  203.185095][T27602] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  203.193067][T27602] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  203.201023][T27602] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  203.208973][T27602] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  203.216926][T27602] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x34000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  203.241537][T27602] handle_bad_sector: 65 callbacks suppressed
[  203.241548][T27602] attempt to access beyond end of device
[  203.241548][T27602] loop3: rw=2049, want=123, limit=16
[  203.284889][T27602] attempt to access beyond end of device
[  203.284889][T27602] loop3: rw=2049, want=124, limit=16
[  203.295744][T27602] buffer_io_error: 63 callbacks suppressed
[  203.295755][T27602] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  203.310734][T27602] attempt to access beyond end of device
[  203.310734][T27602] loop3: rw=2049, want=125, limit=16
[  203.321528][T27602] Buffer I/O error on dev loop3, logical block 124, lost async page write
23:16:06 executing program 3 (fault-call:5 fault-nth:27):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:06 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(r0, &(0x7f00000000c0)='./bus\x00', 0x109402, 0x11)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:06 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x45)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

23:16:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x400300, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  203.330086][T27602] attempt to access beyond end of device
[  203.330086][T27602] loop3: rw=2049, want=126, limit=16
[  203.340968][T27602] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  203.353371][T27602] attempt to access beyond end of device
[  203.353371][T27602] loop3: rw=2049, want=127, limit=16
[  203.364178][T27602] Buffer I/O error on dev loop3, logical block 126, lost async page write
[  203.373134][T27602] attempt to access beyond end of device
[  203.373134][T27602] loop3: rw=2049, want=128, limit=16
23:16:06 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, 0xffffffffffffffff, 0x10001})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
sendfile(r3, r0, &(0x7f0000000000)=0x80, 0x5f)
sendfile(r0, r2, 0x0, 0x4000000000010046)

23:16:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

23:16:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x1000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000c01)
truncate(0x0, 0xff6)

[  203.384013][T27602] Buffer I/O error on dev loop3, logical block 127, lost async page write
[  203.417542][T27650] loop5: detected capacity change from 0 to 16
23:16:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

23:16:06 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
clone3(&(0x7f0000000280)={0x40000000, &(0x7f0000000000), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0), {0x13}, &(0x7f0000000180)=""/79, 0x4f, &(0x7f0000000200)=""/113, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8, {r1}}, 0x58)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000300)={r4, r5, 0x81})
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  203.493100][T27674] loop3: detected capacity change from 0 to 16
[  203.536407][T27674] attempt to access beyond end of device
[  203.536407][T27674] loop3: rw=2049, want=122, limit=16
[  203.547289][T27674] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  203.555918][T27674] attempt to access beyond end of device
[  203.555918][T27674] loop3: rw=2049, want=123, limit=16
[  203.562339][T27692] loop5: detected capacity change from 0 to 16
[  203.566688][T27674] Buffer I/O error on dev loop3, logical block 122, lost async page write
[  203.582053][T27674] FAULT_INJECTION: forcing a failure.
[  203.582053][T27674] name failslab, interval 1, probability 0, space 0, times 0
[  203.594685][T27674] CPU: 1 PID: 27674 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  203.603442][T27674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  203.613489][T27674] Call Trace:
[  203.616754][T27674]  dump_stack+0x137/0x19d
[  203.621077][T27674]  should_fail+0x23c/0x250
[  203.625504][T27674]  ? mempool_alloc_slab+0x16/0x20
[  203.630525][T27674]  __should_failslab+0x81/0x90
[  203.630547][T27674]  should_failslab+0x5/0x20
[  203.630559][T27674]  kmem_cache_alloc+0x46/0x2f0
[  203.630578][T27674]  ? __schedule+0x427/0x5b0
[  203.630594][T27674]  mempool_alloc_slab+0x16/0x20
[  203.630687][T27674]  ? mempool_free+0x130/0x130
[  203.630739][T27674]  mempool_alloc+0x8c/0x300
[  203.630756][T27674]  ? __bio_add_page+0x1a3/0x210
[  203.630782][T27674]  bio_alloc_bioset+0xcc/0x480
[  203.630843][T27674]  submit_bh_wbc+0x130/0x330
[  203.630867][T27674]  __block_write_full_page+0x648/0xa10
[  203.630883][T27674]  ? mark_buffer_write_io_error+0x170/0x170
[  203.630896][T27674]  ? fat_block_truncate_page+0x30/0x30
[  203.630910][T27674]  ? fat_block_truncate_page+0x30/0x30
[  203.630977][T27674]  block_write_full_page+0x240/0x260
[  203.630996][T27674]  fat_writepage+0x20/0x30
[  203.631012][T27674]  __mpage_writepage+0xcf3/0x1080
[  203.631029][T27674]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  203.631051][T27674]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  203.631140][T27674]  write_cache_pages+0x4d7/0x810
[  203.631208][T27674]  ? mpage_writepages+0x120/0x120
[  203.631225][T27674]  ? fat_readpage+0x20/0x20
[  203.631238][T27674]  ? fat_block_truncate_page+0x30/0x30
[  203.631252][T27674]  mpage_writepages+0x6d/0x120
[  203.631348][T27674]  ? fat_block_truncate_page+0x30/0x30
[  203.631365][T27674]  fat_writepages+0x20/0x30
[  203.631378][T27674]  do_writepages+0x7b/0x150
[  203.631391][T27674]  ? generic_perform_write+0x332/0x3a0
[  203.631411][T27674]  filemap_write_and_wait_range+0x20a/0x390
[  203.631500][T27674]  __generic_file_write_iter+0x231/0x300
[  203.631521][T27674]  ? generic_write_checks+0x250/0x290
[  203.631538][T27674]  generic_file_write_iter+0x75/0x130
[  203.631570][T27674]  do_iter_readv_writev+0x2cb/0x360
[  203.631618][T27674]  do_iter_write+0x112/0x4c0
[  203.631633][T27674]  ? kmalloc_array+0x2d/0x40
[  203.631650][T27674]  vfs_iter_write+0x4c/0x70
[  203.631689][T27674]  iter_file_splice_write+0x40a/0x750
[  203.631707][T27674]  ? splice_from_pipe+0xc0/0xc0
[  203.631800][T27674]  direct_splice_actor+0x80/0xa0
[  203.631823][T27674]  splice_direct_to_actor+0x345/0x650
[  203.631840][T27674]  ? do_splice_direct+0x170/0x170
[  203.631865][T27674]  do_splice_direct+0xf5/0x170
[  203.631939][T27674]  do_sendfile+0x773/0xda0
[  203.631955][T27674]  __x64_sys_sendfile64+0xf2/0x130
[  203.631971][T27674]  do_syscall_64+0x4a/0x90
[  203.631991][T27674]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  203.632011][T27674] RIP: 0033:0x4665d9
[  203.632023][T27674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  203.632038][T27674] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  203.632055][T27674] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  203.632067][T27674] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  203.632078][T27674] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  203.632089][T27674] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
23:16:07 executing program 3 (fault-call:5 fault-nth:28):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x2000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)

23:16:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x3000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  203.632100][T27674] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  203.654825][T27674] attempt to access beyond end of device
[  203.654825][T27674] loop3: rw=2049, want=124, limit=16
[  203.949821][T27674] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  203.959642][T27674] attempt to access beyond end of device
[  203.959642][T27674] loop3: rw=2049, want=125, limit=16
[  203.970468][T27674] Buffer I/O error on dev loop3, logical block 124, lost async page write
[  203.979125][T27674] Buffer I/O error on dev loop3, logical block 125, lost async page write
23:16:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000d00)
truncate(0x0, 0xff6)

23:16:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x4000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

23:16:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:07 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
io_setup(0x10001, &(0x7f0000000000)=<r2=>0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000180)="6db346bbcb7f0208b902f43dc93f95e5eda47e2e6226d043fe4e2d1701f6ea29e590133a704cf21fe1a124e689554605cbbe758a2a39a53050bfec901fe9f34aa757e8c2df414c041746173b9de9df52b12e9447706960e77cecbd22312026c68f9c64be19a753c0bcbe8755aa5378ffb0dfba4820120c568468e6d1c1cfa58bc1ce9c58c744ff4646a22e4b8606c1d9ab3600cb4e4f0bbdabd27a9c627f8e615dbffd7bce75c30b72f1903b03332fd2865e9fc490a68d14a365528c4eb22a6aad7fad1c4a86a615520396c13d2c66e04c5ffcc02d3811f7b8ce102a201a6e2237fca16a8328daca26b9b3dadbc04a133f4b14139e9a4cb9266c31faec", 0xfd, 0x3, 0x0, 0x0, r3}])
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  204.047844][T27721] loop5: detected capacity change from 0 to 16
[  204.087099][T27734] loop3: detected capacity change from 0 to 16
23:16:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

23:16:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x5000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  204.123237][T27734] FAULT_INJECTION: forcing a failure.
[  204.123237][T27734] name failslab, interval 1, probability 0, space 0, times 0
[  204.135968][T27734] CPU: 1 PID: 27734 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  204.144715][T27734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  204.154850][T27734] Call Trace:
[  204.158124][T27734]  dump_stack+0x137/0x19d
[  204.162471][T27734]  should_fail+0x23c/0x250
[  204.166946][T27734]  ? mempool_alloc_slab+0x16/0x20
[  204.171965][T27734]  __should_failslab+0x81/0x90
[  204.176727][T27734]  should_failslab+0x5/0x20
[  204.181228][T27734]  kmem_cache_alloc+0x46/0x2f0
[  204.186021][T27734]  ? mempool_alloc_slab+0x16/0x20
[  204.191036][T27734]  mempool_alloc_slab+0x16/0x20
[  204.195918][T27734]  ? mempool_free+0x130/0x130
[  204.200599][T27734]  mempool_alloc+0x8c/0x300
[  204.205102][T27734]  ? __bio_add_page+0x1a3/0x210
[  204.209947][T27734]  bio_alloc_bioset+0xcc/0x480
[  204.214752][T27734]  submit_bh_wbc+0x130/0x330
[  204.219336][T27734]  __block_write_full_page+0x648/0xa10
[  204.224823][T27734]  ? mark_buffer_write_io_error+0x170/0x170
[  204.230712][T27734]  ? fat_block_truncate_page+0x30/0x30
[  204.236236][T27734]  ? fat_block_truncate_page+0x30/0x30
[  204.241695][T27734]  block_write_full_page+0x240/0x260
[  204.246975][T27734]  fat_writepage+0x20/0x30
[  204.251386][T27734]  __mpage_writepage+0xcf3/0x1080
[  204.256501][T27734]  ? kcsan_setup_watchpoint+0x231/0x3e0
[  204.262105][T27734]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  204.267781][T27734]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  204.273444][T27734]  write_cache_pages+0x4d7/0x810
[  204.278364][T27734]  ? mpage_writepages+0x120/0x120
[  204.283379][T27734]  ? fat_readpage+0x20/0x20
[  204.287922][T27734]  ? fat_block_truncate_page+0x30/0x30
[  204.293449][T27734]  mpage_writepages+0x6d/0x120
[  204.298193][T27734]  ? fat_block_truncate_page+0x30/0x30
[  204.303627][T27734]  fat_writepages+0x20/0x30
[  204.308214][T27734]  do_writepages+0x7b/0x150
[  204.312713][T27734]  ? generic_perform_write+0x332/0x3a0
[  204.318147][T27734]  filemap_write_and_wait_range+0x20a/0x390
[  204.324016][T27734]  __generic_file_write_iter+0x231/0x300
[  204.329623][T27734]  ? generic_write_checks+0x250/0x290
[  204.334990][T27734]  generic_file_write_iter+0x75/0x130
[  204.340456][T27734]  do_iter_readv_writev+0x2cb/0x360
[  204.345704][T27734]  do_iter_write+0x112/0x4c0
[  204.350268][T27734]  ? kmalloc_array+0x2d/0x40
[  204.354837][T27734]  vfs_iter_write+0x4c/0x70
[  204.359323][T27734]  iter_file_splice_write+0x40a/0x750
[  204.364748][T27734]  ? splice_from_pipe+0xc0/0xc0
[  204.369586][T27734]  direct_splice_actor+0x80/0xa0
[  204.374501][T27734]  splice_direct_to_actor+0x345/0x650
[  204.379999][T27734]  ? do_splice_direct+0x170/0x170
[  204.385001][T27734]  do_splice_direct+0xf5/0x170
[  204.389840][T27734]  do_sendfile+0x773/0xda0
[  204.394231][T27734]  __x64_sys_sendfile64+0xf2/0x130
[  204.399343][T27734]  do_syscall_64+0x4a/0x90
[  204.403738][T27734]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  204.409674][T27734] RIP: 0033:0x4665d9
[  204.413622][T27734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  204.433204][T27734] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  204.441602][T27734] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  204.449566][T27734] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  204.457515][T27734] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  204.465475][T27734] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
23:16:07 executing program 3 (fault-call:5 fault-nth:29):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)

23:16:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x6000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:07 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x7000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  204.473427][T27734] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  204.552074][T27781] loop5: detected capacity change from 0 to 16
[  204.572598][T27784] loop3: detected capacity change from 0 to 16
[  204.605964][T27784] FAULT_INJECTION: forcing a failure.
[  204.605964][T27784] name failslab, interval 1, probability 0, space 0, times 0
[  204.618617][T27784] CPU: 1 PID: 27784 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  204.627371][T27784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  204.637406][T27784] Call Trace:
[  204.640667][T27784]  dump_stack+0x137/0x19d
[  204.645003][T27784]  should_fail+0x23c/0x250
[  204.649410][T27784]  ? mempool_alloc_slab+0x16/0x20
[  204.654511][T27784]  __should_failslab+0x81/0x90
[  204.659323][T27784]  should_failslab+0x5/0x20
[  204.663803][T27784]  kmem_cache_alloc+0x46/0x2f0
[  204.668600][T27784]  ? mempool_alloc_slab+0x16/0x20
[  204.673653][T27784]  mempool_alloc_slab+0x16/0x20
[  204.678487][T27784]  ? mempool_free+0x130/0x130
[  204.683187][T27784]  mempool_alloc+0x8c/0x300
[  204.687699][T27784]  ? __bio_add_page+0x1a3/0x210
[  204.692548][T27784]  bio_alloc_bioset+0xcc/0x480
[  204.697298][T27784]  submit_bh_wbc+0x130/0x330
[  204.701942][T27784]  __block_write_full_page+0x648/0xa10
[  204.707436][T27784]  ? mark_buffer_write_io_error+0x170/0x170
[  204.713413][T27784]  ? fat_block_truncate_page+0x30/0x30
[  204.718851][T27784]  ? fat_block_truncate_page+0x30/0x30
[  204.724291][T27784]  block_write_full_page+0x240/0x260
[  204.729555][T27784]  fat_writepage+0x20/0x30
[  204.733950][T27784]  __mpage_writepage+0xcf3/0x1080
[  204.738958][T27784]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  204.744649][T27784]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  204.750377][T27784]  write_cache_pages+0x4d7/0x810
[  204.755392][T27784]  ? mpage_writepages+0x120/0x120
[  204.760410][T27784]  ? fat_readpage+0x20/0x20
[  204.764923][T27784]  ? fat_block_truncate_page+0x30/0x30
[  204.770363][T27784]  mpage_writepages+0x6d/0x120
[  204.775141][T27784]  ? fat_block_truncate_page+0x30/0x30
[  204.780587][T27784]  fat_writepages+0x20/0x30
[  204.785081][T27784]  do_writepages+0x7b/0x150
[  204.789568][T27784]  ? generic_perform_write+0x332/0x3a0
[  204.795059][T27784]  filemap_write_and_wait_range+0x20a/0x390
[  204.800933][T27784]  __generic_file_write_iter+0x231/0x300
[  204.806545][T27784]  ? generic_write_checks+0x250/0x290
[  204.811909][T27784]  generic_file_write_iter+0x75/0x130
[  204.817261][T27784]  do_iter_readv_writev+0x2cb/0x360
[  204.822456][T27784]  do_iter_write+0x112/0x4c0
[  204.827026][T27784]  ? kmalloc_array+0x2d/0x40
[  204.831589][T27784]  vfs_iter_write+0x4c/0x70
[  204.836078][T27784]  iter_file_splice_write+0x40a/0x750
[  204.841494][T27784]  ? splice_from_pipe+0xc0/0xc0
[  204.846327][T27784]  direct_splice_actor+0x80/0xa0
[  204.851244][T27784]  splice_direct_to_actor+0x345/0x650
[  204.856666][T27784]  ? do_splice_direct+0x170/0x170
[  204.861668][T27784]  do_splice_direct+0xf5/0x170
[  204.866411][T27784]  do_sendfile+0x773/0xda0
[  204.870819][T27784]  __x64_sys_sendfile64+0xf2/0x130
[  204.875914][T27784]  do_syscall_64+0x4a/0x90
[  204.880366][T27784]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  204.886344][T27784] RIP: 0033:0x4665d9
23:16:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000d01)
truncate(0x0, 0xff6)

23:16:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0)

23:16:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9000000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:08 executing program 0:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x141203, 0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
sendfile(r1, r0, &(0x7f00000000c0)=0x47, 0x40)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "a2cf258cc2a85540c37f945e9825f45d5061"}, 0x16)
r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8)
sendfile(r3, r2, 0x0, 0x33)

[  204.890217][T27784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  204.909825][T27784] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  204.918213][T27784] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  204.926175][T27784] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  204.934151][T27784] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  204.942100][T27784] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
23:16:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xda030000}, 0x0)

23:16:08 executing program 3 (fault-call:5 fault-nth:30):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  204.950050][T27784] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:08 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="640000006f023f000000000000000000000000000000800400000007000000000000000001000000040000000000000000ff0000000800000000000000200300000005000000000000001001000000060000000000000040020000000600000000000000"], 0x64)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x4000000000010046)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x6, 0xd, 0x26, 0x20}, 0x14)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
close(r4)
r5 = geteuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x2, 0x4e23, 0xfff9, 0x2, 0x20, 0xc0, 0x89, 0x0, r5}, {0x100, 0x3, 0x1, 0xfffffffffffffff7, 0xfff, 0x2, 0x6, 0x9859}, {0x8, 0xffffffffffffff37, 0x4, 0x101}, 0x3f, 0x6e6bb1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2, 0x2, 0x78, 0x401, 0x9, 0x3}}, 0xe8)

23:16:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x9effffff, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xefffffff, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0)

23:16:08 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  205.025998][T27806] loop5: detected capacity change from 0 to 16
23:16:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000e00)
truncate(0x0, 0xff6)

23:16:08 executing program 0:
lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x0, 0x12)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046)
r1 = openat(r0, &(0x7f0000000000)='./bus\x00', 0x200000, 0x8)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0xd4abe000)

[  205.091516][T27822] loop3: detected capacity change from 0 to 16
[  205.132886][T27822] FAULT_INJECTION: forcing a failure.
[  205.132886][T27822] name failslab, interval 1, probability 0, space 0, times 0
[  205.145546][T27822] CPU: 0 PID: 27822 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  205.154346][T27822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  205.164397][T27822] Call Trace:
[  205.167669][T27822]  dump_stack+0x137/0x19d
[  205.171999][T27822]  should_fail+0x23c/0x250
[  205.176416][T27822]  ? mempool_alloc_slab+0x16/0x20
23:16:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf0ffffff, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

23:16:08 executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000023c0), 0x5, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
vmsplice(r1, &(0x7f0000002340)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="04b4ec7c6eef028eb7b85387acce410fd5ce2a0fb42a00a2cb954239ef7114d3110cbdacaa39a0a385c3fecfa0a16d4553b404405178d0343544ff4490758cba69733f61468248ce6b3789f1a75a5693d5331243a01cccc582eaede02ae0c0940ac01789e928113248cbbc8a391e305f0f8ceeb2ce6435b328446b7bbef325831fc2900b330ea98aba68afd9ae627b01c74ccd57799208528ccb3e7858dfd3a058bf4ccd2ebc69b32ce054a5ff3d4bd1ff8d2a70f7814e0b458429119ac10b498f588ab376f1a8e7492dfea2fac599cd8ab811caad5fd304571d5a74bed14919757fb4073db68b1ca07465fbdba335c928493490de41", 0xf6}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000080)="8a1046ff1f1b9354e774c017ffda74b0794e13ffd9eba6d2769ccbd684a7b4c31ea35343ade2fc2da457478ed0f554d72af6d90bb49abf0d02620956d7951d7c747f77007e1869cc7886d84f7f17cd9972f795c58a3552ea80dff31e62984c00e059384caee754ade3abbd8f0a3d040e27621ed02f86994824e1f6bbf0b6ab457cd69ca9ec3127ff282da370bfe2d2576771814ed3a9afa460d37a510e7958502982eaa961e50344c77b2045cfbe6d76b8b987c6d90663b018a9b1a8b7ba9c", 0xbf}, {&(0x7f0000000000)="1356dae467d901ac4f53b96638c24be30c25a2bd", 0x14}, {&(0x7f0000002280)="c2e68e986e6c7a5d0c6a4c33b0e3b2bf293cd28bccb7ea0ff29ba85c9f964f5fc774a4", 0x23}, {&(0x7f00000022c0)="16ad3d567fddc491255a1ae8bf845208b5637f30a4211190d26934c261f3d2d781ad68edf62f6b9f480ae6af9aa0fe6e2f82dbdc63924418e685443477573082e4f9c3ac277a44b5a6373973c18e6993b143161e99c044", 0x57}], 0x7, 0x3)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000002400)={0x3, 0xfffd, 0x100, 0x1, 0xd, "8bf868a1fce476da"})
fallocate(r1, 0x0, 0x3ff, 0x81)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)

[  205.181437][T27822]  __should_failslab+0x81/0x90
[  205.186191][T27822]  should_failslab+0x5/0x20
[  205.190696][T27822]  kmem_cache_alloc+0x46/0x2f0
[  205.195476][T27822]  ? mempool_alloc_slab+0x16/0x20
[  205.200577][T27822]  mempool_alloc_slab+0x16/0x20
[  205.205421][T27822]  ? mempool_free+0x130/0x130
[  205.210175][T27822]  mempool_alloc+0x8c/0x300
[  205.214681][T27822]  ? __bio_add_page+0x1a3/0x210
[  205.219537][T27822]  bio_alloc_bioset+0xcc/0x480
[  205.224381][T27822]  submit_bh_wbc+0x130/0x330
[  205.229021][T27822]  __block_write_full_page+0x648/0xa10
[  205.234537][T27822]  ? mark_buffer_write_io_error+0x170/0x170
[  205.240424][T27822]  ? fat_block_truncate_page+0x30/0x30
[  205.245885][T27822]  ? fat_block_truncate_page+0x30/0x30
[  205.251344][T27822]  block_write_full_page+0x240/0x260
[  205.256643][T27822]  fat_writepage+0x20/0x30
[  205.261108][T27822]  __mpage_writepage+0xcf3/0x1080
[  205.266133][T27822]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  205.271773][T27822]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  205.277411][T27822]  write_cache_pages+0x4d7/0x810
23:16:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xf5050000, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  205.282348][T27822]  ? mpage_writepages+0x120/0x120
[  205.287362][T27822]  ? fat_readpage+0x20/0x20
[  205.291863][T27822]  ? fat_block_truncate_page+0x30/0x30
[  205.297386][T27822]  mpage_writepages+0x6d/0x120
[  205.302151][T27822]  ? fat_block_truncate_page+0x30/0x30
[  205.307729][T27822]  fat_writepages+0x20/0x30
[  205.312228][T27822]  do_writepages+0x7b/0x150
[  205.316739][T27822]  ? generic_perform_write+0x332/0x3a0
[  205.322193][T27822]  filemap_write_and_wait_range+0x20a/0x390
[  205.328099][T27822]  __generic_file_write_iter+0x231/0x300
[  205.333820][T27822]  ? generic_write_checks+0x250/0x290
[  205.339185][T27822]  generic_file_write_iter+0x75/0x130
[  205.344559][T27822]  do_iter_readv_writev+0x2cb/0x360
[  205.349751][T27822]  do_iter_write+0x112/0x4c0
[  205.354329][T27822]  ? kmalloc_array+0x2d/0x40
[  205.358940][T27822]  vfs_iter_write+0x4c/0x70
[  205.363436][T27822]  iter_file_splice_write+0x40a/0x750
[  205.368821][T27822]  ? splice_from_pipe+0xc0/0xc0
[  205.373670][T27822]  direct_splice_actor+0x80/0xa0
[  205.378674][T27822]  splice_direct_to_actor+0x345/0x650
[  205.384075][T27822]  ? do_splice_direct+0x170/0x170
[  205.389097][T27822]  do_splice_direct+0xf5/0x170
[  205.393861][T27822]  do_sendfile+0x773/0xda0
[  205.398342][T27822]  __x64_sys_sendfile64+0xf2/0x130
[  205.403544][T27822]  do_syscall_64+0x4a/0x90
[  205.408033][T27822]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  205.413933][T27822] RIP: 0033:0x4665d9
23:16:08 executing program 3 (fault-call:5 fault-nth:31):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000e01)
truncate(0x0, 0xff6)

23:16:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

23:16:08 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}}], [{@fowner_gt={'fowner>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '/proc/timer_list\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffff7f, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  205.417810][T27822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  205.437410][T27822] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  205.445813][T27822] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  205.453759][T27822] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  205.461704][T27822] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  205.469657][T27822] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  205.477604][T27822] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  205.504054][T27882] loop5: detected capacity change from 0 to 16
[  205.541355][T27894] 9pnet: Could not find request transport: rdma
[  205.566939][T27902] loop3: detected capacity change from 0 to 16
[  205.582481][T27902] FAULT_INJECTION: forcing a failure.
[  205.582481][T27902] name failslab, interval 1, probability 0, space 0, times 0
[  205.587522][T27894] 9pnet: Could not find request transport: rdma
[  205.595123][T27902] CPU: 0 PID: 27902 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  205.610399][T27902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  205.620439][T27902] Call Trace:
[  205.623722][T27902]  dump_stack+0x137/0x19d
[  205.628172][T27902]  should_fail+0x23c/0x250
[  205.632592][T27902]  ? mempool_alloc_slab+0x16/0x20
23:16:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)

23:16:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffff9e, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:09 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
open(&(0x7f0000000540)='./bus\x00', 0x880, 0x100)
pipe2(&(0x7f0000000680)={<r3=>0xffffffffffffffff}, 0x80000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6d}, @void, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x8000)
r5 = syz_io_uring_setup(0x1625, &(0x7f0000000080)={0x0, 0xc7e6, 0x10, 0x0, 0x27, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100))
readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/170, 0xaa}, {&(0x7f0000000440)=""/115, 0x73}], 0x7)

23:16:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000f00)
truncate(0x0, 0xff6)

[  205.637650][T27902]  __should_failslab+0x81/0x90
[  205.642419][T27902]  should_failslab+0x5/0x20
[  205.646915][T27902]  kmem_cache_alloc+0x46/0x2f0
[  205.651780][T27902]  ? mempool_alloc_slab+0x16/0x20
[  205.656997][T27902]  mempool_alloc_slab+0x16/0x20
[  205.661870][T27902]  ? mempool_free+0x130/0x130
[  205.666536][T27902]  mempool_alloc+0x8c/0x300
[  205.671098][T27902]  ? __bio_add_page+0x1a3/0x210
[  205.676093][T27902]  bio_alloc_bioset+0xcc/0x480
[  205.680852][T27902]  submit_bh_wbc+0x130/0x330
[  205.685459][T27902]  __block_write_full_page+0x648/0xa10
23:16:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffffef, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  205.690912][T27902]  ? mark_buffer_write_io_error+0x170/0x170
[  205.696836][T27902]  ? fat_block_truncate_page+0x30/0x30
[  205.702286][T27902]  ? fat_block_truncate_page+0x30/0x30
[  205.707779][T27902]  block_write_full_page+0x240/0x260
[  205.713074][T27902]  fat_writepage+0x20/0x30
[  205.717488][T27902]  __mpage_writepage+0xcf3/0x1080
[  205.722506][T27902]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  205.728223][T27902]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  205.733855][T27902]  write_cache_pages+0x4d7/0x810
23:16:09 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x10d082, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
lseek(r1, 0x998a13, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x4}}}}}, 0x20}}, 0x4000800)
ftruncate(r2, 0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0)
ioctl$BLKPG(r3, 0x1269, &(0x7f0000000100)={0x3, 0x0, 0x0, &(0x7f0000000040)})
r4 = fcntl$dupfd(r0, 0x406, r0)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
accept(r5, &(0x7f0000000200)=@rc={0x1f, @fixed}, &(0x7f0000000180)=0x80)
sendfile(r0, r4, 0x0, 0x4000000000010047)

[  205.738794][T27902]  ? mpage_writepages+0x120/0x120
[  205.743865][T27902]  ? fat_readpage+0x20/0x20
[  205.748458][T27902]  ? fat_block_truncate_page+0x30/0x30
[  205.753917][T27902]  mpage_writepages+0x6d/0x120
[  205.758673][T27902]  ? fat_block_truncate_page+0x30/0x30
[  205.764221][T27902]  fat_writepages+0x20/0x30
[  205.768716][T27902]  do_writepages+0x7b/0x150
[  205.773225][T27902]  ? generic_perform_write+0x332/0x3a0
[  205.778726][T27902]  filemap_write_and_wait_range+0x20a/0x390
[  205.784660][T27902]  __generic_file_write_iter+0x231/0x300
[  205.790288][T27902]  ? generic_write_checks+0x250/0x290
[  205.795651][T27902]  generic_file_write_iter+0x75/0x130
[  205.801026][T27902]  do_iter_readv_writev+0x2cb/0x360
[  205.806374][T27902]  do_iter_write+0x112/0x4c0
[  205.810948][T27902]  ? kmalloc_array+0x2d/0x40
[  205.815540][T27902]  vfs_iter_write+0x4c/0x70
[  205.820040][T27902]  iter_file_splice_write+0x40a/0x750
[  205.825407][T27902]  ? splice_from_pipe+0xc0/0xc0
[  205.830269][T27902]  direct_splice_actor+0x80/0xa0
[  205.835203][T27902]  splice_direct_to_actor+0x345/0x650
[  205.840647][T27902]  ? do_splice_direct+0x170/0x170
[  205.845686][T27902]  do_splice_direct+0xf5/0x170
[  205.850462][T27902]  do_sendfile+0x773/0xda0
[  205.854878][T27902]  __x64_sys_sendfile64+0xf2/0x130
[  205.859992][T27902]  do_syscall_64+0x4a/0x90
[  205.864487][T27902]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  205.870385][T27902] RIP: 0033:0x4665d9
23:16:09 executing program 3 (fault-call:5 fault-nth:32):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0)

23:16:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xfffffff0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:09 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x2000, 0x0)
recvfrom$unix(r0, &(0x7f0000000180)=""/204, 0xcc, 0x40000100, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000f01)
truncate(0x0, 0xff6)

[  205.874265][T27902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  205.893867][T27902] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  205.902277][T27902] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  205.910233][T27902] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  205.918210][T27902] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  205.926218][T27902] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  205.934246][T27902] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  206.008709][T27958] loop5: detected capacity change from 0 to 16
[  206.009568][T27963] loop3: detected capacity change from 0 to 16
[  206.041289][T27963] FAULT_INJECTION: forcing a failure.
[  206.041289][T27963] name failslab, interval 1, probability 0, space 0, times 0
[  206.053994][T27963] CPU: 1 PID: 27963 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  206.062776][T27963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  206.072806][T27963] Call Trace:
[  206.076072][T27963]  dump_stack+0x137/0x19d
[  206.080394][T27963]  should_fail+0x23c/0x250
[  206.084800][T27963]  ? mempool_alloc_slab+0x16/0x20
[  206.089805][T27963]  __should_failslab+0x81/0x90
[  206.094600][T27963]  should_failslab+0x5/0x20
[  206.099082][T27963]  kmem_cache_alloc+0x46/0x2f0
[  206.103861][T27963]  ? mempool_alloc_slab+0x16/0x20
[  206.108864][T27963]  mempool_alloc_slab+0x16/0x20
[  206.113692][T27963]  ? mempool_free+0x130/0x130
[  206.118378][T27963]  mempool_alloc+0x8c/0x300
[  206.122944][T27963]  ? __bio_add_page+0x1a3/0x210
[  206.127766][T27963]  bio_alloc_bioset+0xcc/0x480
[  206.132500][T27963]  submit_bh_wbc+0x130/0x330
[  206.137141][T27963]  __block_write_full_page+0x648/0xa10
[  206.142664][T27963]  ? mark_buffer_write_io_error+0x170/0x170
[  206.148606][T27963]  ? fat_block_truncate_page+0x30/0x30
[  206.154213][T27963]  ? fat_block_truncate_page+0x30/0x30
[  206.159643][T27963]  block_write_full_page+0x240/0x260
[  206.164903][T27963]  fat_writepage+0x20/0x30
[  206.169367][T27963]  __mpage_writepage+0xcf3/0x1080
[  206.174436][T27963]  ? __mod_memcg_lruvec_state+0xaa/0x190
[  206.180047][T27963]  ? clear_page_dirty_for_io+0x2b8/0x2e0
[  206.185670][T27963]  write_cache_pages+0x4d7/0x810
[  206.190599][T27963]  ? mpage_writepages+0x120/0x120
[  206.195658][T27963]  ? fat_readpage+0x20/0x20
[  206.200146][T27963]  ? fat_block_truncate_page+0x30/0x30
[  206.205601][T27963]  mpage_writepages+0x6d/0x120
[  206.210375][T27963]  ? fat_block_truncate_page+0x30/0x30
[  206.215857][T27963]  fat_writepages+0x20/0x30
[  206.220359][T27963]  do_writepages+0x7b/0x150
[  206.224835][T27963]  ? generic_perform_write+0x332/0x3a0
[  206.230305][T27963]  filemap_write_and_wait_range+0x20a/0x390
[  206.236184][T27963]  __generic_file_write_iter+0x231/0x300
[  206.241789][T27963]  ? generic_write_checks+0x250/0x290
[  206.247132][T27963]  generic_file_write_iter+0x75/0x130
[  206.252593][T27963]  do_iter_readv_writev+0x2cb/0x360
[  206.257769][T27963]  do_iter_write+0x112/0x4c0
[  206.262343][T27963]  vfs_iter_write+0x4c/0x70
[  206.266883][T27963]  iter_file_splice_write+0x40a/0x750
[  206.272230][T27963]  ? splice_from_pipe+0xc0/0xc0
[  206.277050][T27963]  direct_splice_actor+0x80/0xa0
[  206.281991][T27963]  splice_direct_to_actor+0x345/0x650
[  206.287402][T27963]  ? do_splice_direct+0x170/0x170
[  206.292400][T27963]  do_splice_direct+0xf5/0x170
[  206.297146][T27963]  do_sendfile+0x773/0xda0
[  206.301545][T27963]  __x64_sys_sendfile64+0xf2/0x130
[  206.306629][T27963]  do_syscall_64+0x4a/0x90
[  206.311039][T27963]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  206.316922][T27963] RIP: 0033:0x4665d9
[  206.320807][T27963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  206.340460][T27963] RSP: 002b:00007f1c2ed7a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  206.348856][T27963] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
23:16:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

23:16:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:09 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

23:16:09 executing program 3 (fault-call:5 fault-nth:33):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

23:16:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001001)
truncate(0x0, 0xff6)

[  206.356866][T27963] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  206.364827][T27963] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
[  206.372889][T27963] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  206.380835][T27963] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
23:16:09 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@aname={'aname', 0x3d, '}'}}, {@cache_none}, {@version_9p2000}], [{@uid_eq={'uid', 0x3d, r2}}, {@obj_user={'obj_user', 0x3d, '/proc/timer_list\x00'}}, {@euid_gt}, {@fowner_lt={'fowner<', 0xee00}}]}})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x4000000000010046)
creat(&(0x7f0000000000)='./bus\x00', 0x41)

23:16:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x2)

[  206.467064][T27987] loop3: detected capacity change from 0 to 16
[  206.479780][T27987] FAULT_INJECTION: forcing a failure.
[  206.479780][T27987] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  206.492955][T27987] CPU: 1 PID: 27987 Comm: syz-executor.3 Not tainted 5.13.0-rc4-syzkaller #0
[  206.501717][T27987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  206.511766][T27987] Call Trace:
23:16:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x2, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:09 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)

[  206.515037][T27987]  dump_stack+0x137/0x19d
[  206.519425][T27987]  should_fail+0x23c/0x250
[  206.523831][T27987]  should_fail_usercopy+0x16/0x20
[  206.528850][T27987]  _copy_to_user+0x1c/0x90
[  206.533286][T27987]  simple_read_from_buffer+0xab/0x120
[  206.538797][T27987]  proc_fail_nth_read+0xf6/0x140
[  206.543813][T27987]  ? rw_verify_area+0x136/0x250
[  206.548662][T27987]  ? proc_fault_inject_write+0x200/0x200
[  206.554295][T27987]  vfs_read+0x154/0x5d0
[  206.558460][T27987]  ? __fget_light+0x21b/0x260
23:16:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x3, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x3)

[  206.563198][T27987]  ? __cond_resched+0x11/0x40
[  206.567872][T27987]  ksys_read+0xce/0x180
[  206.567957][T27987]  __x64_sys_read+0x3e/0x50
[  206.567969][T27987]  do_syscall_64+0x4a/0x90
[  206.567991][T27987]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  206.568012][T27987] RIP: 0033:0x41935c
[  206.568025][T27987] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  206.568041][T27987] RSP: 002b:00007f1c2ed7a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
23:16:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001100)
truncate(0x0, 0xff6)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x4, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 5:
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7ffff000)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x4)

[  206.568058][T27987] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c
[  206.568067][T27987] RDX: 000000000000000f RSI: 00007f1c2ed7a1e0 RDI: 0000000000000006
[  206.568086][T27987] RBP: 00007f1c2ed7a1d0 R08: 0000000000000000 R09: 0000000000000000
23:16:10 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfff)
finit_module(r1, &(0x7f0000000000)='/proc/keys\x00', 0x2)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x5, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  206.568094][T27987] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002
[  206.568103][T27987] R13: 00007ffcaa0c27cf R14: 00007f1c2ed7a300 R15: 0000000000022000
[  206.608522][T28014] loop5: detected capacity change from 0 to 16
[  206.630243][T28020] 9pnet: Insufficient options for proto=fd
[  206.679534][T28029] loop3: detected capacity change from 0 to 16
23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x5)

23:16:10 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80c1, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
recvfrom$inet6(r2, &(0x7f0000000180)=""/202, 0xca, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendfile(r0, r1, 0x0, 0x4000000000010046)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x6, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000002)

[  206.801532][T28055] loop3: detected capacity change from 0 to 16
23:16:10 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x10000, 0xc0)
mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x100)

23:16:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001200)
truncate(0x0, 0xff6)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x6)

23:16:10 executing program 5:
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x7, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
ioctl$CHAR_RAW_ROSET(r2, 0x125d, &(0x7f0000000000)=0xfff)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x7)

[  206.940859][T28086] loop3: detected capacity change from 0 to 16
23:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000003)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x9, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x9)

23:16:10 executing program 0:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:10 executing program 5:
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x300, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001300)
truncate(0x0, 0xff6)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x300)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x500, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 0:
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xdc, 0x1, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x19b8d7d0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc7d2}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8e2a}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, @CTA_ID={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8800}, 0x4001)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
fcntl$setflags(r2, 0x2, 0x0)

[  207.102153][T28134] loop3: detected capacity change from 0 to 16
23:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000004)

23:16:10 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:10 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000180)={0x0, 0xfffffffffffffff7, 0x0, [0x0, 0x8, 0x5, 0x7, 0x80000000], [0x7fff, 0x3, 0x73, 0x5, 0x101, 0x8, 0xd8b, 0x6, 0x0, 0x2, 0x8001, 0x80, 0x40, 0x7ff, 0x40, 0x7, 0x0, 0x2, 0x20, 0x7fffffff, 0x6, 0x9, 0x100000000, 0x4, 0x9, 0x1, 0x9, 0x1, 0x1f, 0x40, 0x4ca6, 0x3, 0x3, 0x4, 0x1000, 0x6, 0x101, 0x2, 0xfff, 0x8, 0x6, 0x1, 0x9, 0x40, 0x800, 0x80000001, 0xffffffffffffffe0, 0x2c, 0x2, 0x3, 0x0, 0x2, 0xffffffffffffb045, 0x80000000, 0x7, 0x3, 0x5, 0x8, 0x1, 0x60be, 0x1, 0x40, 0x5, 0x100000001, 0x783, 0x9, 0x9, 0x4, 0x3f, 0x20, 0x10001, 0x4, 0x100000000, 0x0, 0x4, 0x0, 0x100000001, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0xe3fe, 0x1873, 0x10000, 0xa4, 0xfffffffffffffffd, 0x5, 0x80000000, 0x7, 0xc8b6, 0x1, 0x8, 0xffffffffffffffee, 0x3, 0xdb6, 0xffffffffffffff40, 0x800, 0x2, 0xfffffffffffffff7, 0xfffffffffffff801, 0x7f, 0x3ff, 0x101, 0x10001, 0x4, 0x3, 0x1, 0xcc3d, 0x6, 0x2, 0x6, 0x100, 0x200, 0x3, 0x9, 0x1, 0x0, 0x7f, 0x1, 0x8c0]})

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x3da)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x5f5, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x600, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000005)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x500)

[  207.248669][T28174] loop3: detected capacity change from 0 to 16
[  207.254807][T28172] loop5: detected capacity change from 0 to 16
23:16:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001400)
truncate(0x0, 0xff6)

23:16:10 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
open(&(0x7f0000000300)='./bus\x00', 0x200482, 0x104)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
clone3(&(0x7f0000000280)={0x400, &(0x7f0000000000)=<r3=>0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x2f}, &(0x7f0000000180)=""/126, 0x7e, &(0x7f0000000200)=""/114, &(0x7f0000000100)=[0xffffffffffffffff], 0x1, {r0}}, 0x58)
ioctl$LOOP_SET_FD(r2, 0x4c00, r3)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x700, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x600)

23:16:10 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000006)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x700)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x900, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf505, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  207.389382][T28211] loop3: detected capacity change from 0 to 16
23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x900)

23:16:10 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x161622, 0x140)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
write$P9_RREADLINK(r1, &(0x7f0000000140)={0xe, 0x17, 0x2, {0x0, './bus'}}, 0xe)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
uselib(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000000)='./bus\x00', 0x400000, 0x48)
r2 = syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x8, 0x4, &(0x7f0000000380)=[{&(0x7f0000000200)="18e45af755a9a8d2fe076138605288f1f09875bbc3944bf4fa47720d8921bb7056adc8d50294432e6c44142dcd", 0x2d, 0xffffffffffffffff}, {&(0x7f0000000240)="b585a8379f2b68c5e440bbe9", 0xc, 0x5}, {&(0x7f0000000280)="fb7e780292775b9b9c2db13d98e02a8717592f825ff7d49a94d745cda43e58a0b53a23f51550fbec86f6f4b91629fb9242a35f45b2ab200c8310c5092a0fc8c4811dd8b801337a0bc0f0fb4a1b365f26262135b2c8066035fc4a231b15d2ddb64d41210748e91a767cab846572089b174ab863c30c00eef6f329a6c34f12db76dbc2376c303c33f0f013a5acb696b75aed77c1cdb4a77788007b87a59a8403cac1e2b0c19835f8f66ae0fa", 0xab}, {&(0x7f0000000340)="4be5ced8cc54d301f08e", 0xa, 0x1}], 0x3088805, &(0x7f0000000400)={[{'/proc/timer_list\x00'}, {'$-/#*'}, {'[-.\\*'}, {'/dev/vcsa\x00'}, {'/dev/vcsa\x00'}], [{@audit}, {@audit}, {@func={'func', 0x3d, 'FILE_CHECK'}}]})
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0xa, 0x0, '\x00', [{0x1, 0x7, 0x7fff, 0x8, 0x998, 0x100000001}, {0x400, 0x1f, 0x8, 0x0, 0x3, 0x7}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)
mkdir(&(0x7f0000000100)='./bus\x00', 0x6)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x30000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001500)
truncate(0x0, 0xff6)

23:16:10 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000007)

23:16:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xda03)

23:16:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x34000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  207.511495][T28246] loop3: detected capacity change from 0 to 16
[  207.532436][T28245] loop5: detected capacity change from 0 to 16
[  207.547284][T28253] loop0: detected capacity change from 0 to 16383
23:16:11 executing program 5:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x30000)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00')
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000000c0)={0x8, 0xb, 0x6})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r2, 0x9ba68000)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x111100, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r5, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r5, &(0x7f0000000000)=""/25, 0x19)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$TIOCGISO7816(r6, 0x80285442, &(0x7f0000000200))

[  207.600139][T28267] loop0: detected capacity change from 0 to 16383
23:16:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000008)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x400300, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x43a80, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x34000)

[  207.652557][T28274] loop3: detected capacity change from 0 to 16
23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x400300)

23:16:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001600)
truncate(0x0, 0xff6)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x1000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x1000000)

[  207.762548][T28313] loop5: detected capacity change from 0 to 16
[  207.769958][T28314] loop3: detected capacity change from 0 to 16
23:16:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000009)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x2000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x2000000)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x2000})
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x3000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x3000000)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x4000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001700)
truncate(0x0, 0xff6)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000080)={0x10001, 0x9, 0x0, 'queue1\x00', 0x1})

23:16:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000000a)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x4000000)

[  207.927531][T28354] loop3: detected capacity change from 0 to 16
[  208.036031][T28377] loop3: detected capacity change from 0 to 16
[  208.046444][T28384] loop5: detected capacity change from 0 to 16
23:16:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x5000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0xc0580, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0xfffffeff)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080))
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r5, 0x0, 0x4000000000010046)

23:16:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001800)
truncate(0x0, 0xff6)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x5000000)

23:16:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000000b)

23:16:11 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r0, &(0x7f0000000000)=""/25, 0x19)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000000)={0x2, 0x48, [0xd587, 0x6, 0x80000001, 0x7], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
sendfile(r0, r1, 0x0, 0x1d)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x6000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x6000000)

[  208.228531][T28421] loop5: detected capacity change from 0 to 16
[  208.234891][T28419] loop3: detected capacity change from 0 to 16
[  208.255032][T28419] handle_bad_sector: 122 callbacks suppressed
[  208.255044][T28419] attempt to access beyond end of device
[  208.255044][T28419] loop3: rw=2049, want=122, limit=16
[  208.272608][T28419] attempt to access beyond end of device
23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x7000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x7000000)

[  208.272608][T28419] loop3: rw=2049, want=123, limit=16
[  208.272629][T28419] attempt to access beyond end of device
[  208.272629][T28419] loop3: rw=2049, want=124, limit=16
[  208.272646][T28419] attempt to access beyond end of device
[  208.272646][T28419] loop3: rw=2049, want=125, limit=16
[  208.304954][T28419] buffer_io_error: 124 callbacks suppressed
[  208.305045][T28419] Buffer I/O error on dev loop3, logical block 124, lost async page write
[  208.319690][T28419] attempt to access beyond end of device
23:16:11 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000000c)

[  208.319690][T28419] loop3: rw=2049, want=126, limit=16
[  208.319777][T28419] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  208.319805][T28419] attempt to access beyond end of device
[  208.319805][T28419] loop3: rw=2049, want=127, limit=16
[  208.319819][T28419] Buffer I/O error on dev loop3, logical block 126, lost async page write
[  208.319833][T28419] attempt to access beyond end of device
[  208.319833][T28419] loop3: rw=2049, want=128, limit=16
23:16:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x9000000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000100))
read(r1, &(0x7f0000000000)=""/25, 0x19)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendfile(r1, r3, &(0x7f0000000080)=0xeca, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x4000000000010046)

[  208.319845][T28419] Buffer I/O error on dev loop3, logical block 127, lost async page write
[  208.439622][T28464] loop3: detected capacity change from 0 to 16
[  208.479147][T28464] attempt to access beyond end of device
[  208.479147][T28464] loop3: rw=2049, want=122, limit=16
23:16:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001900)
truncate(0x0, 0xff6)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x9000000)

23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x9effffff, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010046)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
r2 = dup(r0)
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0)
perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x6, 0x0, 0x6, 0x0, 0x5, 0x40c9, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0x101}, 0x8402, 0x0, 0x44, 0x5, 0x9, 0x7ff, 0x20, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r0, 0x1)
read(r1, &(0x7f0000000000)=""/25, 0x19)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x11, r1, 0x72bd4000)
finit_module(r0, &(0x7f0000000000)='/proc/timer_list\x00', 0x2)

[  208.489980][T28464] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  208.490255][T28473] loop5: detected capacity change from 0 to 16
[  208.515468][T28464] attempt to access beyond end of device
[  208.515468][T28464] loop3: rw=2049, want=123, limit=16
[  208.526301][T28464] Buffer I/O error on dev loop3, logical block 122, lost async page write
23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xefffffff, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x9effffff)

[  208.535066][T28464] attempt to access beyond end of device
[  208.535066][T28464] loop3: rw=2049, want=124, limit=16
[  208.545986][T28464] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  208.571221][T28464] Buffer I/O error on dev loop3, logical block 124, lost async page write
23:16:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf0ffffff, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:11 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000000d)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xda030000)

23:16:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xf5050000, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  208.591708][T28464] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  208.614676][T28464] Buffer I/O error on dev loop3, logical block 126, lost async page write
23:16:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001a00)
truncate(0x0, 0xff6)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1e12c2, 0x114)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xefffffff)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xffffff7f, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xf0ffffff)

23:16:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xffffff9e, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/230, 0xe6}, {&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/219, 0xdb}], 0x4, 0x7, 0x6)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
splice(r1, &(0x7f00000000c0)=0xfffffffffffffffd, r0, &(0x7f0000000100)=0x9, 0x8, 0x3)
r2 = openat(r0, &(0x7f0000000580)='./bus\x00', 0x10000, 0x14)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x33c88d4a1d0b7e6a, 0x2b)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
r4 = openat$cgroup_subtree(r2, &(0x7f00000005c0), 0x2, 0x0)
mmap(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x9, 0x40010, r4, 0x6d488000)
sendfile(r0, r3, 0x0, 0x4000000000010046)

23:16:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000000e)

[  208.776671][T28538] loop3: detected capacity change from 0 to 16
23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xffffff7f)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xffffffef, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001b00)
truncate(0x0, 0xff6)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xffffff9e)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x50)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8f3f, 0x101, 0x4, 0x100000001, 0x9]}, &(0x7f0000000100)=0x78)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

23:16:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0xfffffff0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000000f)

[  208.934404][T28587] loop3: detected capacity change from 0 to 16
23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xffffffef)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x402301, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000000000010046)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xfffffff0)

23:16:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000010)

[  209.040740][T28623] loop3: detected capacity change from 0 to 16
23:16:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001c00)
truncate(0x0, 0xff6)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
open(&(0x7f0000000040)='./bus\x00', 0x20000, 0xd)

23:16:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x3000000000000)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x100)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
fsmount(r1, 0x0, 0x78)
read(r2, &(0x7f0000000000)=""/25, 0x19)
readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000200)=""/232, 0xe8}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/171, 0xab}], 0x5)
signalfd(r0, &(0x7f0000000080)={[0x9]}, 0x8)
syncfs(r2)
sendfile(r0, r1, 0x0, 0x4000000000010046)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000e00)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xbc0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf27c}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x765f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r3 = socket(0x1, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
fsmount(0xffffffffffffffff, 0x1, 0x1)
setreuid(0x0, r4)
r5 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000004c0)='./bus\x00', 0xbd1, 0x9, &(0x7f0000000d00)=[{&(0x7f0000000500)="432ad0b07aaa9e24e7db91040105b6012cc53cd2ab6fde97f551270ed300ce656700c0c09da800bd707a94dd3d3c42133ca8b51134345ca64506762b49803364c3b6f59f6c10", 0x46, 0x1}, {&(0x7f0000000580)="4e4b9a5e", 0x4, 0x4}, {&(0x7f00000005c0)="95a58b4402b1da8cd66facf102b07be93c229bc546868becd2784680fe77383acedb98665112f8b9503a1e", 0x2b, 0x1}, {&(0x7f0000000600)="c80146723e485b63d1cc677fce1f6a8d5fc4df61be284a6c01c70636d937d0f70c66530e60a4cc34270417889d97857636349996d5770f7b4e8e75902ac4ffefc72cdef337ef4034a01ff08dd5bfed0d73fd7d460ae348f07de8668cfb6600a481e4d39426af420895719d95e3966a6b73d7f0b5cb4e39d0f2fae0ef8afcb1cb93bb0cb5f780ef3b0249805c6642ab1cf22f7e4877c9f91b252bc3edc145074a8213c5a2b7002f5e199bb1c9788ba2a1e70c8b5f114274169c79754fc99ab9e7b77077403073660a67ab15c5c56ac7b01febdde70584", 0xd6, 0x9d5b}, {&(0x7f0000000700)="8206fb7dc8e651fe7895b9cfdda0a4f80a016170668408259c98bd4ca58a6443a64ca2b1e360620095113503dbe4df4207c097e92fea6c7a73c9b981fc9efae95c80ce6c54e9f78adb8856f35feec5e3526d0ccb499249f846c042623fee15ca133839224d3c46269b07a9b01bfcb4b16b09e46859e31541a6ef0a568f523a1bf08199c0705047c892618731bbee8cdb86bba6a96176669783a85c3d15c882e28a3875a50ad97679d55974ae745d273d91972d1263146acd3444ff3cc293d5b87cf73b9146f76b15518c9758e131f0db3181d97c632df4439ec593997164fb244a4f500cdb1ce0c4710c300e4750", 0xee, 0x2}, {&(0x7f00000009c0)="23bc434b26ddff00499922a5bc80f3f213a84561c0d9be12e039d944870f5f12ecf02b3473e890236285873f27e20b9f89e6c67ee10fc0cc0784ce4286eb679edc493b273bea25e8b44e3891bb8a5e4c78daeaebfdc71cc16a5509526eb88c86094b92204aff79990bff9eeb2a6c289a29bc20ec8936f3f64f7d94b52a5099d59b77ba2bfe1e3e2e6dd0f82466aa8c40e6f246ae05185f3b09d6e9f21705cb68495ad12fde18d6301c9f9fc068a59d846bda9f0306b544a5360e119b8f9e9c", 0xbf, 0x5}, {&(0x7f0000000840)="6fc8b5d5ed0aac4157ceed4a330e68ac50ef90bde86efc3d8983fafe35053464badde03b1e3d092577b93c8142dec4c2d0d4e5770b1059a783cd7351aa1971849ee53646560c3248bb4309cf75a6e417a12a3eec0e5b", 0x56, 0xfffffffffffffffa}, {&(0x7f00000008c0)="4030828a", 0x4, 0x8000}, {&(0x7f0000000c00)="e300ce64a0033fdb30cb3d9acd5a3687f54b1f9ac63c10fb39a0da091da1e72a559730771a6d6e6426091ad52001fd888764043b804207c5247048c34ebbec9aa9aa424a34b9de324c0b37f16131c51a6e372c216c7f3fcfd7549a2a8bcc99dc49b6a5478d95cb40e5dd3e9ea14320d1b6dbc2adc45ad060083861e1cb9496f41d7dc582b8c7562b772ae870d6d7b1bb8fc5659b9bafb5c0513e772ceadffb298519ddb2602d7885e84381cf57fff63636b998d97bf94853661abe9b6c1b87081097e7cd94e66075d2202025aa33bd", 0xcf, 0x8}], 0x31e000, &(0x7f0000000ec0)=ANY=[@ANYBLOB='debug,barrier,block_validity,journal_path=,noacl,debug_want_extra_isize=0x0000000000000e0a,stripe=0x0000000000000401,fsmagic=0x0000000000000004,smackfsfloor=,smackfsfloor=/dev/vcsa\x00,fowner>', @ANYRESDEC=r4, @ANYBLOB="2c6f62895f726f6c653d2f70725f6c697374002c736d61636b6673666c6f6f723d2f70726f632f74696d65725f6c697374002c00e8c336b7516aabf7f08082ba1f9c3b3b37b5dca2"])
fcntl$setstatus(r5, 0x4, 0x40000)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  209.159901][T28652] loop3: detected capacity change from 0 to 16
23:16:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000011)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x40030000000000)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x100000000000000)

23:16:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001d00)
truncate(0x0, 0xff6)

[  209.235120][T28670] FAT-fs (loop5): bogus number of reserved sectors
[  209.241740][T28670] FAT-fs (loop5): Can't find a valid FAT filesystem
[  209.261554][T28673] loop0: detected capacity change from 0 to 16383
23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x6}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x200000000000000)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000))

[  209.302115][T28692] loop0: detected capacity change from 0 to 16383
23:16:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000012)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x300000000000000)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
read(r3, &(0x7f0000000080)=""/17, 0x11)
inotify_add_watch(r2, &(0x7f0000000000)='./bus\x00', 0x720001ba)
pwritev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="734acd632376caae27478287b8f4fe28cc4b6110de38f975cb877a8e90aca0464893f3a8f5eb894da53bc4851f9ffd7446c406cc683337d99260d8173a5c7e2b7fa6bc258b4db8b66f2ffe3cd69a445cd6621ab275", 0x55}, {&(0x7f0000000180)="5a963086b63ffa103f24ce8af37da3dce2303199fdf341ff65800afd4092699a81832d305a36d0", 0x27}, {&(0x7f00000001c0)="690c2513fa082f5072e371cfd00b982947f8cfe002d0ec95fa47cf7aa7ac43371642cb7179619e9a554ce8068e4db162f34bff0f7cdf388ffc50dc754ef3ac62540525cf44a081900be9522849116a74e19cb3fa12c2c35dc82dc35dae2a8d5e0f217d279829c145eeb616c1e6f635eab44fbb29cf1484010b97aff57c3da3026358c8ddd349e9347b1dc71852d80abdf2e8816f29b3fd2d52277a483868b582171c3c62181607e30c5aeaa69a51de9100cb9e63a0e1a5ead64626b383436306c20438bd5d", 0xc5}, {&(0x7f00000002c0)="3d136321fd264fe17641bee6c5f5e0aaddd5031f3374467d60bcae6061b995ff60805170bab2a2e2ec4ed59c7a3428bbb63174ccc7cd5eb9f193fdbab191170a3a42f42f87acee246318ef48281919d71e427b2b06d2fa1c4f78a2f3118d2e5e538ac077f574ec4c262f59770355188dd82fc9653232e52b09788ef9a837ca6b55b0c6f9a741e156ac1dffa66a43960535f264", 0x93}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="d7b037918cf875f32e793c280d8d5aabd4310386191438eb4e96b1f8ecbd69c4988adbd1fe1740c2ac89b07160173c2a3bdb7e674b469f0d26ac0535a62f27210f33f5fecaf167469804c093626764087d22eea04b5050b53fe09fd3d9e5cd2d0527a6180bec20d3a9a57493407dfeca6a8576c81127084348b9c77770711d4599b8", 0x82}, {&(0x7f0000000480)="3c633295c9024700c0a78d3ef5a7d62c40108ef12df2b60345958be13a5fea1f6fed40d6d072410e92648659c7359344f2ef21759f735a0753aa49ef65a7ff97481813f4ddbf87dc3514cfc416e71b6c245ee40acaba883599bad619adfc54e6854927d6220a6598b3ef294a0af8932abaf79bb0e7967e27064b62d131f9ae9a9409e9a7c234a51e6c2bbf51b8b2077d21f2bcc3a920e86c44a39c7646ab6524b36985d35524fea94fb0b4c3a707ba098e14919f21d7a31ec26b414f0a1f1fe8dc5289604ff5169f1b11c4d40a46b8c128b9950af5b3ea20c1768585a4bb1762903e06cc00c79608c4991ce82f", 0xed}, {&(0x7f0000000580)="0df7b8839f22b23643e157934759bfb246a2250a600ca0822e6305c609e13c911b8e8aadde016afd82d8c3caa10dbedd104d6b7898c743959546612944da4090094634678a54b5a4145468be16252ac3d72f0385979c9aaae9caec07d52b9cdf4226ed17141134ce5995d17d2477a0b06c84df357a846d2a188509abb628317ca23c7a9ca3ead8c352a4832705bb89ab35f43a90df6e436d4b6a6351", 0x9c}, {&(0x7f0000000640)="c772b24c64d2c807a03abca46245c94036db", 0x12}, {&(0x7f0000000680)="3b9e95d5b86bd3f6ee4a007db28c984f398857e4d5582943bd503e8574e4c55798c91984746e8941f57563b5ee1145edfad438fa669ee8740c9bd2b0371ce70f461ec0787b6c4bb7892ad42c9b7b8d9c7ef9b454718831a7c400f6d1ddcfa341331182c9726e1c3211aea5065254c9d20f96b3cfaa4f7339bc08ac2e", 0x7c}], 0xa, 0xa1a9, 0x804)

[  209.364976][T28703] loop3: detected capacity change from 0 to 16
23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x8}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x400000000000000)

[  209.431665][T28727] FAT-fs (loop5): bogus number of reserved sectors
[  209.438224][T28727] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = socket(0x1, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r3)
quotactl(0x5, &(0x7f0000000080)='./bus/../file0\x00', r3, &(0x7f0000000180)="ad249238a712570dc8a8cf8b52ebc2ad4b74a2cb89cf842a85488a0b74f9daa17f04385209174a98a506a44cad0af8e2c94c025b97f0d7a76824ef4fbbd3dec2505f3e21c2874384a0be4f4ffe6e11996862128ceed02884fcf5ffca379c16fb2633b6fb968ba02e2af3b24436b803b952213bde6e6b0e41d4c56bce3b4d6f141f09ab6f48c65dafe34b35aaa5ff2d242840d5ef8146dcbf3a4b5abdffa632b4fdf2")
openat(r0, &(0x7f0000000000)='./bus\x00', 0x101000, 0x20)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001e00)
truncate(0x0, 0xff6)

23:16:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  209.503096][T28746] loop3: detected capacity change from 0 to 16
23:16:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000013)

23:16:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x500000000000000)

23:16:12 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x101000)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x1, 0xa, 0x11, 0x4, "6fadc4867f58206d796a8ed0dac8312933a592e3fbd6094385e85961dcab53b7a1d9e7bc08662717805223dc7d5ac3ed715295f072c606f0dbb79d1574a0125f", "eb648f17456632bc392618e6e81e2da564bfe121b3031a5f01d67747133ec62e", [0x475e80a1, 0x20]})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x10)
sendfile(r3, r0, &(0x7f00000000c0)=0xdd, 0x5)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000240)={'ip6gre0', 0x32, 0x34}, 0xa)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x600000000000000)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x700000000000000)

[  209.636291][T28773] FAT-fs (loop5): bogus number of reserved sectors
[  209.642814][T28773] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000014)

23:16:13 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  209.685590][T28790] loop3: detected capacity change from 0 to 16
23:16:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001f00)
truncate(0x0, 0xff6)

23:16:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x900000000000000)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1212c2, 0x138)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x8000000000000000)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0xd}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000015)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x9effffff00000000)

[  209.804220][T28821] loop3: detected capacity change from 0 to 16
[  209.837541][T28836] FAT-fs (loop5): bogus number of reserved sectors
[  209.844115][T28836] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0xe}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
lsetxattr$security_evm(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "0aa2f9d48186c1b9e2273d29e999cfadd389ceec"}, 0x15, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r2)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xda03000000000000)

23:16:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002000)
truncate(0x0, 0xff6)

23:16:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0xf}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  209.949908][T28865] loop3: detected capacity change from 0 to 16
23:16:13 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x2000, 0x144)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xefffffff00000000)

23:16:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000016)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = accept4$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x4000000000010046)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xf0ffffff00000000)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x11}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  210.078336][T28895] FAT-fs (loop5): bogus number of reserved sectors
[  210.084991][T28895] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:13 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x7ffc)

23:16:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002001)
truncate(0x0, 0xff6)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xffffff7f00000000)

23:16:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x12}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  210.183524][T28934] loop3: detected capacity change from 0 to 16
[  210.186424][T28930] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
23:16:13 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000080))

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xffffffff00000000)

23:16:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000017)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x13}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048800)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x124)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0000adbd7000ffdbdf250800000008002b0080000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40881)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000080)=0x3ff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  210.306308][T28955] FAT-fs (loop5): bogus number of reserved sectors
[  210.312884][T28955] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002100)
truncate(0x0, 0xff6)

23:16:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000b9", @ANYRES16, @ANYBLOB="040000000000000000000d0000000400521777db272a1b0180e7ede64636cbe5d3185e53d943790a6160a4be000000000000000013f08f63920c81137f388268db1c8d468ce76ca2195e7f83c09518220ac5a5c0ec05000000000000007de65fa8d55bf5cdb7b078cb6a89e1802caf"], 0x18}}, 0x84000)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)

[  210.369837][T28978] loop3: detected capacity change from 0 to 16
23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000018)

23:16:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:13 executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x10800, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000018000180140002006261748861647618000000000000002a2b878a2aaf0745678c2f49342f374e76000000004b60c970d9abc77f7763360cb34cd56c00000100463d90777e58048b27966499ee911ed0444c227f8f8381071ed420761ae74a1601fb86ab77dc"], 0x2c}}, 0x0)

23:16:13 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r3, 0xc9647caf603edff5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="50f3cf158a22368085f72a3c4d86000000", @ANYRES16=r3, @ANYBLOB="0c072abd7000fcdbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x188, r3, 0x101, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8001}, 0x8000)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x4000000000010046)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x16}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  210.498260][T29002] loop5: detected capacity change from 0 to 16
[  210.524886][T29002] FAT-fs (loop5): bogus number of reserved sectors
[  210.531499][T29002] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002200)
truncate(0x0, 0xff6)

[  210.556828][T29016] loop3: detected capacity change from 0 to 16
23:16:13 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000019)

23:16:14 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = syz_open_dev$rtc(&(0x7f0000000100), 0x5, 0x40000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000080)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000180)="2877e47e5d98cd6f5be0e2c1afeb3f2fa82cc1766ca1febaf25a2abb55459d8045e2520562617c330025c9dc1af14d3f3e13330693e27834cc0406493a88108f5efb2dc1da4bf47e62cd6903b4d21e15bd62deef76dce6fa4c36314d357da90cbf71440cde8cb7db3de689149a3724c229b10a69078a37fc3960f790959954a4d854c341b96a3761d25ef02f7c867582f192720046486353d8dffe0aa5a1", 0x9e}, {&(0x7f0000000240)="950869e35595a0c7048f03ca731b1e12caa718c8958d52ceadaa4aa35586e4f31fdc36992a8e9112563526c81e9452844d156bf4d86a22bb6d9c269a32726646407e841289bd0d11e5a4859c459a3e5adbfaaa9864dd6f9825b115555ee20e08b4cb25ddc137ab6daf52c604c041833d5850d10f118469f60274666683be5a0400f23390ba3ab8508740f051", 0x8c}, {&(0x7f0000000300)="b8585301db302a6cbe354fc3740c95f16edffeb15d6708b2169eeaedd3275649aa416f24378f174edb1414111711defdd27b1d9a1d8716932e9314dee6330d47e4c34ceef1c34a3f39b47d107796e12ce8b561f688b566ba7199752e4dd41326c501e05a19ea1831ac30e182cf0c8668b0f0a0838a9ca38893bb", 0x7a}, {&(0x7f0000000380)="e0f28e88185b54b2c2fb9bc9153ee9b21dbef89c156b4988da876589e5e0e559a5e2687d44da5e68f25a4216d502832e8bf1863cbe59f3e9fe8d1f13fc571f150edbc9d9a06b471330a2fabc47c72db5981eb5817b48cfde0ee324be0bc3c026e0ac7060083f32fc9983c408d9ddd6ee8d8bf768", 0x74}], 0x4, &(0x7f0000000400)=[@rights={{0x2c, 0x1, 0x1, [r1, r2, r0, r3, r0, r0, r0]}}], 0x30, 0x40}, 0x10)

23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x18}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x19}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000edbc)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c060000f0d9c6e04a030000009220fcdca03ef407922b456a3f1bb33abb826b2e88e23e6ccb02f59516", @ANYRESDEC, @ANYBLOB="10002dbd700001dcdf254900000008000300", @ANYRES32=r4, @ANYRESDEC=r2], 0x1c}}, 0x4000840)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x2b4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_IE={0x260, 0x2a, [@dsss={0x3, 0x1, 0x6c}, @chsw_timing={0x68, 0x4, {0x5, 0x800}}, @rann={0x7e, 0x15, {{0x1, 0x6}, 0x91, 0x7f, @device_b, 0x1000, 0x6, 0x5}}, @mesh_chsw={0x76, 0x6, {0x7f, 0xf0, 0x3a, 0x7}}, @random_vendor={0xdd, 0xed, "6fce8b46aec6f363946787cfb6f78351251fc0f1f5b8a3cc057e08acf7afaf046849c167e00c86f443bc58e7f9898f0d140b322ba94a6bf9e15412111f902b2d9f6529eb0fe379c663898125488abb640c2ed4678940c963b34388c71547a766a94ca59501329049aaeb757c32d02f77092c3d5116669cd720a35d6017c42089e4ae0a4e8afa967fc6bee6d5dfb28fcc1f34e4f43ed3c2e817a291092a43b5ba57987849322c8289331124d5f88901137e144d9297f04987e06da200b84e0d7accad02a94935ff0a72ea3f0297b6fc7eba523d6752f4c309a471632b2d53bd1e8dc7480474feaa509241668b62"}, @cf={0x4, 0x6, {0x20, 0x1, 0xd5}}, @challenge={0x10, 0x1, 0x52}, @fast_bss_trans={0x37, 0x132, {0x0, 0x9, "c977a55b766f92821d998b1313a8c2e2", "bfc1663a0ddc2ad755445be64ea0ed7054a6cdbb1384be956fdb2095b2bfaa85", "0763e2e206a956296fbbe312ac5b0506b4326cfefc6bba20f247fb29bf669d39", [{0x1, 0x8, "906bdf950fe69395"}, {0x2, 0xd, "071d0737661cac37dcd28c927f"}, {0x4, 0x3, '|,x'}, {0x4, 0x9, "681468ab829794f921"}, {0x2, 0x1c, "0a9caeeb9eb4e78f72271cd57b794c18fa273dc408d534d06c9f9893"}, {0x4, 0x28, "ddeaa58ef4304e9ca2a5ce1c363399ea9c78a601839946c7cea5278cc89a984ef597128507a55a2d"}, {0x4, 0x25, "6571a3f1bc9820879204cf9126b3a9b961b225ff2497013eb0216c308589dea55c47b461b4"}, {0x3, 0x20, "cfcb214bd7c2e2bd50c65fb9abcfef2737a4f9d7b710162fb13a1825b5b669aa"}, {0x2, 0x24, "4d91dae1e33db3cc8b6c1b41e1781c04959f51dd1220abea84ae9beef6df1c25f2872dd4"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1c, 0x70, 0x4}}]}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0xb5, 0x2c, @device_b, 0x2, @device_a, 0x7, 0x6, @broadcast, 0x4}}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x810}, 0x40)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0100000000003a37e2afe24fe44bb2000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)

23:16:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002300)
truncate(0x0, 0xff6)

23:16:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000001a)

[  210.747576][T29059] loop3: detected capacity change from 0 to 16
23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  210.809647][T29069] loop5: detected capacity change from 0 to 16
[  210.817143][T29069] FAT-fs (loop5): bogus number of reserved sectors
[  210.823693][T29069] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x68}}, 0x0)

[  210.920500][T29085] loop3: detected capacity change from 0 to 16
23:16:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002400)
truncate(0x0, 0xff6)

23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x2}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000001b)

23:16:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000841)

[  211.076110][T29108] loop5: detected capacity change from 0 to 16
[  211.115583][T29108] FAT-fs (loop5): bogus number of reserved sectors
[  211.122198][T29108] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x3}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002500)
truncate(0x0, 0xff6)

[  211.184384][T29123] loop3: detected capacity change from 0 to 16
23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x4}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x6, 0x5, &(0x7f0000000640)=[{&(0x7f0000000200)="d1271021b7f302cf68212febfc7b13d2836e4d296e4428b20afd036d5b38d3db0ef623cb07ba394fc46718aa9411fd76dab2785ca80a221f297c184f33347f63a7c6ea7b0ffef88907710f9eb7a6e773149aaa8e9bba97", 0x57, 0x1}, {&(0x7f0000000280)="75fb9cfd0a3262959005df8a167e9f122a3201c24e37afd89b7a237b81cdc13b5b53762f600cd17af610c272def5cc53832c617215d8e367269a31eb8aae6804dd9ec7d0d4418864464cc8ee34764db1ab5d198652e8f331c884d7dbfd66b5d8c8c9b1da275ca4e37e7f6a60de76b0f3a32415374db4683345e220357ba7de92362e", 0x82, 0x2}, {&(0x7f00000003c0)="7216ea2384141282135c7ed5d80b2b2f465c84121c9a4858a82e9bc7ec51ccafefd5eb6601d2f0f69953f1", 0x2b}, {&(0x7f0000000480)="5649d911ea3140a31dc1cc6ff9fcb71da62ce8252dbe8e0873c2bfa5a9fea30476840851963e8169c7f5d3d66800bd304e691c29bf0be1764b44c889c102035fb899f21b31d03d4b4dfd27a59bd48972fc19573dc0ca1598dfa2352c5ef2f4ac250e6b7dd24d0c0c3a2a66dd35e7d311282cb5131d40c5773c722c79afff37e7cf85878ed2dae0952a594aa44ea98190dba906084e22deea37a9982a0698696e592fd14715c25247cf6a9929ba32068b24e1fb9ddf6f4355a70bd1ae47abc7c70b026bc926a91d7cd7f6f419ab207760dc004161", 0xd4, 0x3}, {&(0x7f0000000580)="4c4ea96d8ad80d77a5ef26f7bce907b86a9f0c0752d116ce996599acae005d3654c6533780f94abaab5767849b302d6684ff095b255ddd36d4e180d96126d873027ecf57cc5718c870720f67c0cff390445ed3c70a00fcb4708490becfa9f30f08985c027439b240dbc916dc08876cfcbb8c906b248fa3956d2e0354ac99766b6bce4ddf877569758f119cd80cbbaba9f066aeb75bc5cfa37d7b4827be8496d3700054104f297760", 0xa8, 0x100}], 0x200000, &(0x7f00000006c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xffffffffffffffff}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x34, 0x61, 0x34, 0x32, 0x36, 0x35], 0x2d, [0x32, 0x32, 0x0, 0x62], 0x2d, [0x36, 0x64, 0x31, 0x66], 0x2d, [0x61, 0x37, 0x63, 0x62], 0x2d, [0x61, 0xc93f74501d0b239f, 0x31, 0x33, 0x38, 0x6, 0x4, 0x34]}}}, {@fsname}, {@smackfstransmute={'smackfstransmute', 0x3d, '&+'}}, {@appraise_type}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '/-'}}]})
openat(r3, &(0x7f0000000400)='./file0\x00', 0x10000, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000100010000000018000180140002006261746100"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x5)

23:16:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000001c)

23:16:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x5}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000001d)

[  211.298617][T29152] loop3: detected capacity change from 0 to 16
[  211.317695][T29149] loop1: detected capacity change from 0 to 1
[  211.329996][T29149] FAT-fs (loop1): Unrecognized mount option "fsuuid=ed4a4265-22" or missing value
23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x6}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  211.367313][T29163] loop5: detected capacity change from 0 to 16
[  211.375013][T29163] FAT-fs (loop5): bogus number of reserved sectors
[  211.381528][T29163] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000252d)
truncate(0x0, 0xff6)

23:16:14 executing program 1:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000391c008a6dfe000018000180140002d8e128f374caf96e000000000000"], 0x2c}}, 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24004044)
r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x6, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x281040}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x184, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x20}, {0x6, 0x16, 0x9a13}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0xb2da}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x16, 0x6}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x20004080)

[  211.429197][T29149] loop1: detected capacity change from 0 to 1
[  211.441097][T29181] loop3: detected capacity change from 0 to 16
23:16:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x7}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:14 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000001e)

23:16:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002600)
truncate(0x0, 0xff6)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x9}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  211.606642][T29204] loop5: detected capacity change from 0 to 16
[  211.617505][T29204] FAT-fs (loop5): bogus number of reserved sectors
[  211.624043][T29204] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x34}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', <r5=>0x0, 0x2f, 0x2, 0x9, 0xc371, 0x72, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8, 0x7800, 0x2, 0x170000}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r13, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc4000800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x120, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000021)

[  211.668194][T29217] loop3: detected capacity change from 0 to 16
23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x40)

[  211.822800][T29243] loop3: detected capacity change from 0 to 16
23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x2}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002700)
truncate(0x0, 0xff6)

23:16:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000022)

23:16:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000001800019b1400020062617461640300008e5cdf95673c77271fa57945ea2e6b7d0000000000000000"], 0x2c}}, 0x0)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x3}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  211.893486][T29254] loop5: detected capacity change from 0 to 16
[  211.905953][T29254] FAT-fs (loop5): bogus number of reserved sectors
[  211.912534][T29254] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x4}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0xc4)

23:16:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x5}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002800)
truncate(0x0, 0xff6)

[  212.058646][T29288] loop3: detected capacity change from 0 to 16
23:16:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000023)

23:16:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000000c0))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x6}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  212.148852][T29306] loop5: detected capacity change from 0 to 16
[  212.186924][T29306] FAT-fs (loop5): bogus number of reserved sectors
[  212.193486][T29306] FAT-fs (loop5): Can't find a valid FAT filesystem
[  212.234892][T29323] loop3: detected capacity change from 0 to 16
23:16:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000024)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x7}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002900)
truncate(0x0, 0xff6)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x9}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  212.387477][T29346] loop5: detected capacity change from 0 to 16
[  212.395067][T29346] FAT-fs (loop5): bogus number of reserved sectors
[  212.401581][T29346] FAT-fs (loop5): Can't find a valid FAT filesystem
[  212.425297][T29354] loop3: detected capacity change from 0 to 16
23:16:15 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000025)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x300}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002a00)
truncate(0x0, 0xff6)

23:16:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x500}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  212.586336][T29378] loop3: detected capacity change from 0 to 16
[  212.637756][T29391] loop5: detected capacity change from 0 to 16
23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x5f5}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000026)

[  212.690893][T29391] FAT-fs (loop5): bogus number of reserved sectors
[  212.697449][T29391] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x600}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002b00)
truncate(0x0, 0xff6)

23:16:16 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r2 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0})
sendfile(0xffffffffffffffff, r3, 0x0, 0x4000000000edbc)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r5, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r5, &(0x7f0000000000)=""/25, 0x19)
accept$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c060000f0d9c6e04a030000009220fcdca03ef407922b456a3f1bb33abb826b2e88e23e6ccb02f59516", @ANYRESDEC, @ANYBLOB="10002dbd700001dcdf254900000008000300", @ANYRES32=r4, @ANYRESDEC=r2], 0x1c}}, 0x4000840)
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000ca432d1deafa8de49200d2b6beb09cbf404a3a4f7dc39b333f1dad3b29633ea37dffadac36a04147", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf25130000000c009900200000007700000005007400040000000600ab000000000008001400", @ANYRES32=r4, @ANYBLOB="0600120004000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="f2ffffff0000000000041c0000000800cb01127a"], 0x1c}}, 0x0)

23:16:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x700}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  212.820330][T29411] loop3: detected capacity change from 0 to 16
23:16:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000027)

23:16:16 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r0, &(0x7f0000000000)=""/25, 0x19)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x4000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0x900}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  212.933987][T29437] loop5: detected capacity change from 0 to 16
23:16:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002c00)
truncate(0x0, 0xff6)

[  212.994537][T29437] FAT-fs (loop5): bogus number of reserved sectors
[  213.001090][T29437] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:16 executing program 1:
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x244, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x59bc, 0x8, 0x2, 0x4f}, {0x3a6f, 0x1, 0x8, 0x1}, {0xff, 0x1, 0xfa, 0x20}, {0x0, 0xff, 0x25, 0x24}, {0x1f, 0x3, 0x5, 0x40}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0800000000000000f2c597ca0082b50537a5bab6a2adfd1493ce0eff8bb667c2161ae253000000002200000105000000000000000300875dc6a2b5236618997841f47d83ec699c7c1bbd13c6942c5e2e383ade01d7fb404b066da9a26e02a1f6dea344d1f6ce7c26"], 0x2c}}, 0x0)
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xdd)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000000000)=0x7fff)

23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b, 0x0, 0xf505}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  213.035490][T29445] loop3: detected capacity change from 0 to 16
23:16:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000028)

23:16:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000fe31b945dbd4dd3b1d0ad0080d6ce193610ca8ba1cb44ec205307f14605ac7e541bd29bf51277a9080732e32a606d3060000001223d9cd44e4c50df7913e4d04ceb75b806e267c0e0e30ef80f4c83c7b4663813294dfbfd7df158c683116280e8961fe5a2776a5b479b6b8a704d30699c300751d1f428b067e03481923d432f1b5ec0ff34b19ed07f912d4451bb648677ecb7f1c47a1a3e2fca08f6f2c8e9b97bf3d31ba21838ffe7ba3c977", @ANYRES16=r2, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x0)

23:16:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002d00)
truncate(0x0, 0xff6)

[  213.208107][T29486] loop3: detected capacity change from 0 to 16
[  213.241573][T29487] loop5: detected capacity change from 0 to 16
23:16:16 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000029)

[  213.260678][T29487] FAT-fs (loop5): bogus number of reserved sectors
[  213.267199][T29487] FAT-fs (loop5): Can't find a valid FAT filesystem
[  213.278015][T29498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
23:16:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fffffff, 0x3a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x56}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x71b}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x57}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x80c4)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  213.318723][T29505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r3=>0x0, 0x4, 0x81, 0x6, 0x1d2, 0x76, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x1ff, 0x4cd1}})
recvmmsg(r0, &(0x7f0000001140)=[{{&(0x7f0000000180)=@un=@abs, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/171, 0xab}, {&(0x7f0000000300)=""/52, 0x34}], 0x3, &(0x7f0000000480)=""/115, 0x73}, 0x9}, {{&(0x7f0000000500)=@ipx, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/106, 0x6a}], 0x1, &(0x7f0000000600)=""/195, 0xc3}, 0x7}, {{&(0x7f0000000700)=@can={0x1d, <r4=>0x0}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/30, 0x1e}, {&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/58, 0x3a}, {&(0x7f0000000880)=""/240, 0xf0}, {&(0x7f0000000980)=""/108, 0x6c}], 0x5, &(0x7f0000000a80)=""/116, 0x74}, 0x1}, {{&(0x7f0000000b00)=@sco, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b80)=""/59, 0x3b}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/234, 0xea}, {&(0x7f0000000d00)=""/155, 0x9b}, {&(0x7f0000000dc0)=""/145, 0x91}, {&(0x7f0000000e80)=""/162, 0xa2}, {&(0x7f0000000f40)=""/185, 0xb9}], 0x7, &(0x7f0000001080)=""/184, 0xb8}, 0x3}], 0x4, 0x20, &(0x7f0000001240)={0x0, 0x989680})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001300)={'ip6tnl0\x00', &(0x7f0000001280)={'ip6gre0\x00', <r9=>0x0, 0x4, 0x1, 0x9, 0x400, 0x7c, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x858da17c1c255539, 0x6, 0xdfc3}})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001340)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001440)=0xe8)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001480)={0x1f0, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc090eaa9a1129ce6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x1f0}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002e00)
truncate(0x0, 0xff6)

23:16:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  213.414179][T29518] loop3: detected capacity change from 0 to 16
[  213.440295][T29518] handle_bad_sector: 186 callbacks suppressed
[  213.440309][T29518] attempt to access beyond end of device
[  213.440309][T29518] loop3: rw=2049, want=122, limit=16
[  213.457258][T29518] buffer_io_error: 183 callbacks suppressed
[  213.457268][T29518] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  213.475618][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  213.518588][T29544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  213.536754][T29545] loop5: detected capacity change from 0 to 16
[  213.545084][T29518] attempt to access beyond end of device
[  213.545084][T29518] loop3: rw=2049, want=123, limit=16
[  213.555928][T29518] Buffer I/O error on dev loop3, logical block 122, lost async page write
23:16:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x1b, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  213.569006][T29545] FAT-fs (loop5): bogus number of reserved sectors
[  213.575575][T29545] FAT-fs (loop5): Can't find a valid FAT filesystem
[  213.590642][T29518] attempt to access beyond end of device
[  213.590642][T29518] loop3: rw=2049, want=124, limit=16
[  213.601475][T29518] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  213.610601][T29518] attempt to access beyond end of device
23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x240680c4)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000f4e3f47200001c0004001800018014000200626174616476300600000000000000006b74c460320e28e2fe1d886c27ddea5f702caffdb8541a5bcda33fca4b6da028a3d9147f76c02ad5ff3bfcd0deb14163e107ca6e56df0a7d67853355fabdec21f9067400a383ace7f373a1893986139f48d257926b4cd73d0cd706800ec466aba2817fcb0f8d64baf4aa1c50c402b16393103d0db319d241f9aa00005d"], 0x2c}}, 0x0)

[  213.610601][T29518] loop3: rw=2049, want=125, limit=16
[  213.621396][T29518] Buffer I/O error on dev loop3, logical block 124, lost async page write
[  213.630237][T29518] attempt to access beyond end of device
[  213.630237][T29518] loop3: rw=2049, want=126, limit=16
[  213.631688][T29554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  213.641040][T29518] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  213.663422][T29518] attempt to access beyond end of device
23:16:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80002f00)
truncate(0x0, 0xff6)

[  213.663422][T29518] loop3: rw=2049, want=127, limit=16
[  213.674438][T29518] Buffer I/O error on dev loop3, logical block 126, lost async page write
[  213.709303][T29518] attempt to access beyond end of device
23:16:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000002a)

23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="6b794b0000000203e5093b325f54c4e75dd990e350ae5f640f01e91c8456754489e957529ca3ad6353cfb9db893651d2485570221c1fafc30179301c217431b20078c75fcb96dcd47991edd0c2fa34e89f1f5ea9fec67bfd51677e85f1e871ce346fc75a4b936e083013175b82a17bde2498bbe0584f64a62eb88aabb2b175bd46462efbe0e9436485cb026a31ea0e12e9c33793587c1fe89fa87a1574f0b748ce0859a306c06fab03995e4132a08cc88189b894778d347ef79ab5607470f768d682164c8f723c5e24e94e1d2da0a45b9721e12722", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)

[  213.709303][T29518] loop3: rw=2049, want=128, limit=16
[  213.720125][T29518] Buffer I/O error on dev loop3, logical block 127, lost async page write
[  213.741471][T29567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_OURS={0x1a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "4d5c6c480b01d9b4516600a91b625000bb0dac23b067cc89e4b6b0fc487368d3efb500264aa9d4e11a0c126149aae0f8c84c23182052b2e8a339f525bf7602578f003ebe6c68cbc97ec60a4c7ba87c0497d618d6f3fedb2a3bf470fa40e6452000c5d5004bb478e5e78c3f97bd5d72ba6248a06098f672aac176929c6df98ae05b5246462a384454bb292411e2d17e7060261529ae7e5d0ad04af04e62"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_MASK={0xea, 0x5, "cbc5646286b15245d380cb7851e12d3fb120a9a4d373acc2d94944377379da02466f93ed867ef9101e1d72526215cb680f88b68aee93a0082570ebfc20564e70ec77bff9417bc8bce4cdab9b1e9a7d282426068c8ad4b92e60f2c2bd25ab1a01c8c3fe81009c92c201d16c1caf212dcda9f6236ecd657faa47dc3293b7e96d95132dce6797f82f8aafd4c951a0aff91d2f95fde325e03abe751c3d5f592e7dc81f8cda1c19faaf3a669fe95de01436abe7adc25341ce0d20e3a8286c47dd88913ed4f113b1c5c3586a93109eb6f363ada416181ca9f279fd20f6f177da24775563581225b524"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x44804}, 0x4000)

23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x8, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003000)
truncate(0x0, 0xff6)

[  213.822586][T29584] loop5: detected capacity change from 0 to 16
[  213.844259][T29584] FAT-fs (loop5): invalid media value (0x00)
[  213.850279][T29584] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x9, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  213.913289][T29593] loop3: detected capacity change from 0 to 16
23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="20000000000000000600000000000000130002e6ff017262984fb0329c376722337740b4e7d1009fa440edc3d1d317fa3a830e58d3b72dcaf35c7765b860566db10625b573bdf56051ebd3463a16"], 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x4000044)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', <r10=>r4, 0x2f, 0x6, 0x92, 0x5, 0x2, @local, @empty, 0x80, 0x80, 0x7, 0x8}})
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000005c0)={@private0, <r12=>0x0}, &(0x7f0000000600)=0x14)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r5, @ANYBLOB="20002abd7000fedbdf25070000000c00018008000100", @ANYRES32=r8, @ANYBLOB="24000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000300010000004c00018008000100", @ANYRES32=r4, @ANYBLOB="08000300010000000800030001000000140002006261746164765f736c6176655f3000001400020076657468315f6d61637674617000000008000300030000004c0001801400020076657468305f746f5f626f6e64000000080003000200000008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="3c00018014000200776731000000000000000000000000000800030002000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r11, @ANYBLOB="4c00c1c6081b4269154eaeff000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="140002006261746164765f736c6176655f30000008000300010000001400020076657468315f746f5f62726964676500"], 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000bf5894f2777820c04c6453c12f63994000000001c00402db022fa9b793a88b8df5708", @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x8000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xfc, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)={0x54, 0x5, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010)

23:16:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:17 executing program 1:
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x44ca68c48ea86c, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  213.969175][T29593] attempt to access beyond end of device
[  213.969175][T29593] loop3: rw=2049, want=122, limit=16
[  213.980005][T29593] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  213.988764][T29593] attempt to access beyond end of device
[  213.988764][T29593] loop3: rw=2049, want=123, limit=16
[  213.999586][T29593] Buffer I/O error on dev loop3, logical block 122, lost async page write
[  214.008493][T29593] attempt to access beyond end of device
[  214.008493][T29593] loop3: rw=2049, want=124, limit=16
23:16:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000002b)

23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1b, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003100)
truncate(0x0, 0xff6)

[  214.019348][T29593] Buffer I/O error on dev loop3, logical block 123, lost async page write
23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x300, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="72140780e160f399f2d76a5824ea9b47fa1f4a5d9e3a291788ac856cd11a25d4cbf78cfd3e711064c2c60a6ab989adabcfbe", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

[  214.077011][T29627] loop5: detected capacity change from 0 to 16
[  214.101037][T29627] FAT-fs (loop5): invalid media value (0x00)
[  214.107052][T29627] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  214.171785][T29647] loop3: detected capacity change from 0 to 16
23:16:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003200)
truncate(0x0, 0xff6)

23:16:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000002c)

23:16:17 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x34}}, 0x6000083)

23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x0, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  214.313245][T29667] loop5: detected capacity change from 0 to 16
[  214.329465][T29667] FAT-fs (loop5): invalid media value (0x00)
[  214.335489][T29667] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="d887b216000000000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x9041)

23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x3, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  214.410744][T29679] loop3: detected capacity change from 0 to 16
23:16:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:17 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000002d)

23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fb43000000000000000001000000080003"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x8844)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000040001c00000018000180140002006261746164763000000000000000000072223e1ee2b22380a003e326bc64f999b76a1eb93a3795e43af6e1f285f2f097d430faab83b902ccf9ab11c16bafa047a754994a7a00349dcbb77767f0fc79d32d4d"], 0x2c}}, 0x0)

23:16:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003300)
truncate(0x0, 0xff6)

[  214.511043][T29698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
23:16:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x4, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  214.582025][T29701] loop5: detected capacity change from 0 to 16
[  214.590590][T29707] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
23:16:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fb43000000000000000001000000080003"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x80}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x44050}, 0x40080)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
sendmsg$nl_generic(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4804}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x850)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="fb43000000000000000001000000080003"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb0a4cb061d252cc4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x95}, 0x20000400)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x18, r2, 0x1, 0x9000, 0x2, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}}, 0x8000)

23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x5, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000002e)

[  214.627901][T29711] loop3: detected capacity change from 0 to 16
[  214.645439][T29701] FAT-fs (loop5): invalid media value (0x00)
[  214.651480][T29701] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003400)
truncate(0x0, 0xff6)

23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x1b, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  214.796651][T29737] loop3: detected capacity change from 0 to 16
23:16:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000002f)

[  214.863102][T29744] loop5: detected capacity change from 0 to 16
[  214.896927][T29750] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  214.910722][T29744] FAT-fs (loop5): invalid media value (0x00)
[  214.916808][T29744] FAT-fs (loop5): Can't find a valid FAT filesystem
[  214.968507][T29759] loop3: detected capacity change from 0 to 16
[  214.971823][T29760] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
23:16:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000030)

23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x2c, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003500)
truncate(0x0, 0xff6)

23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x3, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  215.157322][T29785] loop5: detected capacity change from 0 to 16
[  215.163614][T29786] loop3: detected capacity change from 0 to 16
[  215.170971][T29785] FAT-fs (loop5): invalid media value (0x00)
[  215.177025][T29785] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000031)

[  215.205308][T29797] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  215.240150][T29801] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
23:16:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003600)
truncate(0x0, 0xff6)

23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x1b, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  215.311907][T29808] loop3: detected capacity change from 0 to 16
23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xf}}, 0x0)

23:16:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000032)

23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x10}}, 0x0)

23:16:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003700)
truncate(0x0, 0xff6)

[  215.406221][T29829] loop5: detected capacity change from 0 to 16
[  215.426257][T29829] FAT-fs (loop5): bogus number of FAT sectors
[  215.432463][T29829] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:18 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000033)

[  215.499330][T29842] loop3: detected capacity change from 0 to 16
23:16:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x14}}, 0x0)

23:16:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  215.604532][T29861] loop3: detected capacity change from 0 to 16
23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x22}}, 0x0)

23:16:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000034)

23:16:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003800)
truncate(0x0, 0xff6)

23:16:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000001800018014000200626100000000000f0000000000000000"], 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="fb43000000000000000001000000080003"], 0x30}}, 0x0)
r5 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendfile(0xffffffffffffffff, r6, 0x0, 0x4000000000edbc)
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c060000f0d9c6e04a030000009220fcdca03ef407922b456a3f1bb33abb826b2e88e23e6ccb02f59516", @ANYRESDEC, @ANYBLOB="10002dbd700001dcdf254900000008000300", @ANYRES32=r7, @ANYRESDEC=r5], 0x1c}}, 0x4000840)
sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x428, r8, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6gretap0\x00'}]}]}, 0xfffffffffffffdcf}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000140)={'sit0\x00', <r9=>r4, 0x29, 0x4, 0x80, 0x6, 0x0, @remote, @mcast2, 0x40, 0x7, 0x8, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', <r10=>r4, 0x2f, 0x2, 0x2, 0x0, 0x56, @private2, @empty, 0x40, 0x10, 0x7, 0x1f}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x2b4, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7f0000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r4}, {0x88, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x8e, 0x0, 0x1}, {0x0, 0xe0, 0x40, 0x2}, {0x5, 0x3f, 0x7f, 0x3}, {0x7ff, 0x48, 0x1f, 0x5bd7}, {0x9, 0x2, 0x20, 0x3}, {0x5, 0x1, 0x3, 0x1}, {0x9, 0x1c, 0xa5, 0x1ff}, {0x20, 0x3f, 0x2, 0x2}, {0xf3, 0x7, 0x8, 0x4}, {0x2, 0x40, 0x0, 0x40}]}}}]}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4008055}, 0x1)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000400)=0x800)

[  215.657393][T29872] loop5: detected capacity change from 0 to 16
[  215.667876][T29872] FAT-fs (loop5): bogus number of FAT sectors
[  215.673985][T29872] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004081)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x25}}, 0x0)

23:16:19 executing program 1:
pipe(&(0x7f0000000080))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xc0}}, 0x0)

23:16:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003900)
truncate(0x0, 0xff6)

[  215.808261][T29896] loop3: detected capacity change from 0 to 16
[  215.841818][T29905] loop5: detected capacity change from 0 to 16
23:16:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000035)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xec0}}, 0x0)

[  215.860001][T29905] FAT-fs (loop5): bogus number of FAT sectors
[  215.866100][T29905] FAT-fs (loop5): Can't find a valid FAT filesystem
23:16:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xffffffff, 0x4, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fced65e812374c987d46da537a0e00daf35aee30cdf0c1867254ceb2bf4cd30cd3663e650838d91b684850e36bbc1295cae00215cb9cd8bb05b2de6f9bf25b2b3b383c14c3caf409322d78806811bddc5a2a3201da47f9b77ef1dbf58f836a59515a3fb673cb8199a2dc391e743b2898bf9db47dcf9178768769897d43360cf93da91b41148d3a9eb3e29f2ea4499a7ba9f98624bcc54ec2a4d2e8ac39660bd9fb84fa2c003af9de9496c22ee94cf36b941ba720cc1ad85e8be8c30855b5f7fbaf0c9fbf14088bf00a97bd9405b68e3e02095d0a35816b1a7957d38c685a66caa4cd6181b8e82c313c07ac1020", 0xed, 0x8}, {&(0x7f00000003c0)="753853b2f7812505257ddc4872616d94cdb07ddf06f88d03c38ea92a0d9a3d72c80f333e35d0d93f6ed378c5edba90b5db822b1464ddf8f3e603d1aa5d98cd81bd70f0b8f8eb43cde49174cafe2eaec7344a4d981c8627cd2cbba270b215d22c84521f3ef503be0166398986a89808e6ad7b82125916e3bd3f83925d9754d1b24d180927cf6dcc21d86f96f26fb40be3c415727bbd71c4d20222b821dfad7dc47e0de958bfc8ec4dd887346a320230da69ce6c1ec8fdf58ce9fcbd95bba94e28a80ae4853f3e506a29240dc5c380302c8c4d3824396220fe15a0fd981dda37e8aff75c79662aa0765024865db201aaa9a888726364dc4699", 0xf8, 0x3}, {&(0x7f00000004c0)="3e3f40bc6450f067bfbd78a219b32078a304deae66680c4ae4509f72d6a556ff7f7f24fa69e87cff68d3cc84c27d27b6fe40f2bc1e5fd44b9a0c4a3214828c3cd025cf3d85414ae252e3bb12e20bcfd422e32b3c4b533fae664b08a6d9bc4b1783ef08ff1921c25274423ba89e5d17fde464d1ea9d85cf56391067147ce096c8d5d66f02f56728c9a309129066c3d5bad9eb273471701f5038ddea0561d271cad6809dd1772d9ce15fc55e4ef35a1cc1408f73171b853849545e95648e9464030a226386eb0fa4", 0xc7, 0x2}, {&(0x7f00000005c0)="fa60c1f329a48662785dc4a552bdcd6277fe00bd04c4c08dc3e06335229a3a41381c4b76ea950f5b065944bfeb9f30573825676ff74b17354d898000bca13195b924c779381e50fa121e510bb0e337355b4144bedd3d3a4f2c159f9a479b22e2441513870b140501a611051f620a87cbdb31eb7fab0d36753360b4f47215d7e2e40ef5b951007a8cee5a02c952f630fe35c7495b37de33cc7945d3e32850193b2adfe5346ce80512afc61502eb65b6399b8ac6f4970f206e5e0ec50d882c0136704ca458018466d2601bb0a6dabcedfe9157774adce02d5cb4ed35c951b5038f8139ff20cd36edfe556a0d1b67ce00", 0xef, 0x8}], 0x2001, &(0x7f00000006c0)={[{@fat=@gid={'gid', 0x3d, 0xee00}}, {@dots}, {@fat=@nocase}, {@dots}], [{@appraise}]})
ioctl(r2, 0x5, &(0x7f0000000700)="2f9a35343c452c826d5bc216308081315295e386ed447ae8bffd9b595f4255d8485332cbf455d13387138f35db1514152bda727dbe515ddae3e1ccd15dbe5e8f4b7d48761975a7b76687cd92f701779c6f2b2b3f98e0b8fd192dc50ae4847b30a11c6129a6c0bc887684da74f20f7112bccd117c2a83d4d0a9224d3575b6506af4ae187b6c6baa5177d9cb28099e4740165e957356fff56f3aa95f0a2ed6d18211189ae287aee3ddef9acbb8b0b66ff4b9f91b10409caf8e734171739687c5b1b5b2ff6bb9bdc8bcd3b33ba38627336c0a1a383d702b714fa704280820e757b051c9ac48c4062c180611ad187d4c36dc757d4a17")
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000018000180140062617461647645c620cf0659233000000000000000000000ffffffffe71a817900a7fb3ac1d158eb14846b811e4bdad6373a0d4b48a1212a2a48f0e253ed761f08b9bc1ed0ce74ffa14b9e53f1f74a62efc6255fdbaaf353f9dcbd87d3371eb35f12ad582baa78025d7a0c6975131f21c8bf4b7af5f95ce39d11eb564aec087606dbcf09f618531a1bc0cd2aadea219e7ac0cddb5f9bbd9e82406ff3ba5a2c"], 0x2c}}, 0x0)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x33fe0}}, 0x0)

23:16:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003a00)
truncate(0x0, 0xff6)

23:16:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  215.979245][T29937] loop3: detected capacity change from 0 to 16
[  215.986633][T29942] loop1: detected capacity change from 0 to 264192
23:16:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000036)

23:16:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="80981d71d5e09e97a9008d0e717ac78e219db2c72f83e936379235f2bbc725b909b0eac6d2ce41573ba4d5f675e421d7ec10229a33e7d81fb56645d256b78f3a7dd3604dd9d321f11965a3afa0f3e08189e6dc4dc8d717f5aeddf3d1bf0a44bf9b3dcdce1d5c188df4709c8654c6b1638945bac95fa3a10692bb97a86543ed7355b6f8dd0e78e13a844d316b1f34d777931637fcec0e79bf0fda1977c6e62ba3546eed8e25177e", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2000046c}}, 0x0)

[  216.063267][T29964] loop1: detected capacity change from 0 to 264192
[  216.097465][T29971] loop5: detected capacity change from 0 to 16
23:16:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000037)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x7ffff000}}, 0x0)

[  216.111582][T29976] loop3: detected capacity change from 0 to 16
23:16:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003c00)
truncate(0x0, 0xff6)

23:16:19 executing program 1:
shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffffff, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0xfffffdef}}, 0x0)

[  216.224533][T29999] loop3: detected capacity change from 0 to 16
23:16:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000038)

23:16:19 executing program 1:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x30)
write$cgroup_int(r0, &(0x7f0000000080)=0x8, 0x12)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x2}, 0x0)

23:16:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80003f00)
truncate(0x0, 0xff6)

[  216.342854][T30029] loop5: detected capacity change from 0 to 16
23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x3}, 0x0)

23:16:19 executing program 1:
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1302080}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8911}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x29e}]}]}, 0x58}}, 0x4040000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x280000e, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x55, 0xd9f, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x80086601, 0x0)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000005000000000000000000000000000000000000bd4d523250000000000000000000"], 0x2c}}, 0x0)

[  216.406226][T30037] loop3: detected capacity change from 0 to 16
23:16:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000039)

23:16:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x8}, 0x0)

23:16:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="07cab909", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

23:16:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80009000)
truncate(0x0, 0xff6)

23:16:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x101800, 0xc)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0x341f000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x9}, 0x0)

[  216.573435][T30071] loop5: detected capacity change from 0 to 16
[  216.583246][T30075] loop3: detected capacity change from 0 to 16
23:16:19 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000003a)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0}, &(0x7f00000000c0)=0x14)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_WOL_SOPASS={0xf3, 0x3, "36c556f562c7ab8d6ff09102aa642334223ecd56bbaf069cab869360dc5d47cde01b455ca287475db1d1994dcdb69943958626ac13efce18e4ffab7726bd0f431d1c3d683317944baf64f95021869c0d18f6171f7eb492addcfdd135808cdb64a3fd7728f7c3f30652b54228726b12987ea81853f17c713c6df0843bbca3524f27dcc57caa50c7653f4107d58ce93b52c6053b711cf8a0bbe8db5be2c71321fb976497368aec11df041e543b27257a7bb7a6e3ffd9563d3a6d30b996e2c9df14eda9fe0ecc007fae19fea52ac74851a488cf29d3bec52d2c04f3ca2e1f51fda5e68049d5702e04d6937b28593c1a1a"}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_MODES={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\%^:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x12, 0x3, "b0fb2c27f6c43918acfef2f2bff8"}, @ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x1ec}}, 0x8800)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1b}, 0x0)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)

23:16:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x300}, 0x0)

23:16:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80009c00)
truncate(0x0, 0xff6)

[  216.745198][T30104] loop3: detected capacity change from 0 to 16
23:16:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000003b)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x2}, 0x0)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

[  216.877309][T30126] loop5: detected capacity change from 0 to 16
[  216.921475][T30135] loop3: detected capacity change from 0 to 16
23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x3}, 0x0)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50080001}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x270, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x120, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x454429a397845da}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xfef5e7b2b8f9f48d}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x270}, 0x1, 0x0, 0x0, 0x64089}, 0x8000)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000a000)
truncate(0x0, 0xff6)

23:16:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000003c)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x18, r1, 0x300, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x4}]}, 0x18}}, 0x0)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x4}, 0x0)

23:16:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000003d)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)

[  217.090202][T30170] loop3: detected capacity change from 0 to 16
[  217.115367][T30173] loop5: detected capacity change from 0 to 16
23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x5}, 0x0)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fb43000000000000000001000000080003"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, r3, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff7}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfff7}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x636}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xde}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x20}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x2, 0xffff, 0x7ff]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48001}, 0x8084)
openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x50800, 0xa8)
r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c, 0x80000)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=<r6=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000480)={{r5}, r6, 0x14, @inherit={0x90, &(0x7f0000001480)={0x0, 0x9, 0x7, 0xc1, {0x8, 0x3, 0x1f, 0x10001, 0x8}, [0x7, 0x2, 0x6, 0x0, 0x3340, 0x1ff, 0x100000001, 0x1, 0x5]}}, @devid})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000b000)
truncate(0x0, 0xff6)

23:16:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000003e)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x6}, 0x0)

23:16:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  217.183885][T30184] loop3: detected capacity change from 0 to 16
23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x7}, 0x0)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x40a4, 0x78}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9}, 0x0)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = signalfd(r0, &(0x7f0000000240)={[0xffffffff]}, 0x8)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, r7, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', <r8=>0x0, 0x80, 0x1, 0x101, 0x10000, {{0x12, 0x4, 0x0, 0x29, 0x48, 0x66, 0xfffe, 0x98, 0x29, 0x0, @multicast1, @remote, {[@rr={0x7, 0x13, 0x6a, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}, @end, @noop, @end, @rr={0x7, 0xf, 0xd5, [@private=0xa010100, @empty, @rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0x14, 0x0, 0x5, [0xa0, 0x0]}]}}}}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000014)

[  217.333113][T30226] loop5: detected capacity change from 0 to 16
[  217.356508][T30234] loop3: detected capacity change from 0 to 16
23:16:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000c000)
truncate(0x0, 0xff6)

23:16:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000041)

23:16:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(0x0, 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x300}, 0x0)

23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x10a, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_PE_NAME]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa015}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x21, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8c0}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x36}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x4c, 0x6, 0xd78}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

23:16:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x500}, 0x0)

[  217.493235][T30262] loop3: detected capacity change from 0 to 16
23:16:20 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000042)

[  217.543325][T30273] loop5: detected capacity change from 0 to 16
23:16:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000000000000001c00000008001400ffff000008000200000100000800130001010000"], 0x2c}}, 0x0)

23:16:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(0x0, 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000c300)
truncate(0x0, 0xff6)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x5f5}, 0x0)

[  217.697030][T30289] loop3: detected capacity change from 0 to 16
23:16:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'sit0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r11, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x34}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={<r12=>0x0, @multicast2, @initdev}, &(0x7f0000000140)=0xc)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x1e4, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "9edc9bed4118fa229ac4d602483ae69cb5cefa610cf3e5233ac8290262f5c3f945469e820f9b391960188fb720bd7a2d23621198e7c99f6a"}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000043)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x600}, 0x0)

[  217.775324][T30301] loop5: detected capacity change from 0 to 16
23:16:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(0x0, 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x700}, 0x0)

23:16:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000c600)
truncate(0x0, 0xff6)

[  217.905073][T30326] loop3: detected capacity change from 0 to 16
23:16:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000480)={'syztnl0\x00', <r6=>0x0, 0x8, 0x1, 0x5, 0x8, {{0x29, 0x4, 0x1, 0x8, 0xa4, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x2d}, {[@timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x9, [{@multicast2, 0x200}, {@empty, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010100, 0x7}, {@remote, 0x6}]}, @timestamp_addr={0x44, 0x1c, 0x2f, 0x1, 0x2, [{@private=0xa010101, 0x8d}, {@rand_addr=0x64010101, 0x3}, {@private=0xa010101, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x16, 0x1, 0x1, [{@multicast1, 0x7}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@multicast2, 0x7f}]}, @timestamp={0x44, 0x24, 0xa4, 0x0, 0x3, [0x100, 0x7fff, 0x1, 0x7, 0x9, 0xfffffffc, 0x55fd, 0xc2]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@rand_addr, <r7=>0x0}, &(0x7f00000003c0)=0x14)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x128, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x40080}, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001c0000001800013198656ccfd07ed6616476300000fa000000000000"], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, r8, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "aa32aabf41e9a20bf37767b6026391de3c271d841c4ed145159f2955ccc3c84a987f11005fe130d7b9fbff66b5b769d0d514d90d61c8bfbace2e2b5c9c742510413e7e4d83a4cd74dad9156f1ecfa11bbadc44dbcdda46fe7a48158c6a70156974af76b77d175b540293bd9e1630e5acbe463b7632dcbf7412d31f85225a2b61624d6763980c99cc9527737837b801b3950ac6fae0cde7367743cdaef093db0b2234ee62e4bc9e4fcbae6b74d55b4b9dc278070e49f75c7a5513"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000)

23:16:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000044)

23:16:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x900}, 0x0)

[  217.997986][T30335] loop5: detected capacity change from 0 to 16
23:16:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x6c}}, 0x24000010)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r8, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r8, &(0x7f0000000000)=""/25, 0x19)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000017c0)={0x1318, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x12e4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[^)(*(%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0x69, 0x5, "dca993541e8529c83a2308c8a3266e3fa5341ef6e7f9b07b802b9b39a183ba6ed08e0ada10593ca32e584882ba19c3716105c8b26ab0d31f5054c9e3cf29d1b7684e7ac2ea910f53434f5c2d2c081a7f2e8d615b0d5b64ca300ab28fbaa2144fb707d89055"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[^)(*(%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^\'&%(*\x00'}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\'^#:$\'}-\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xd9, 0x5, "e9c1a09ee3c714dacd587570b91f53c339ad7b74bc15ba90d731f8a7e6ae03a50b3fbe3abeb9413e008819403b3392e15e6818747043b4f3c206a122b4f72310c3cb5721067add1472ae3770c59588b0f4524a73d9da42d096a4b78f66ed31fa4bd0cad00d45faad2fbc214058c9e8431e395192c4ad5a62ecb4dfec7425139bdb863ff7a4f2e6c5dd4ac5ba8275d5d273cd371f0ba80a035f965b0576b98de4bb43485b557f9c0ad76c5f9268f7ec7a48d3254195dc91ae34737ad00fdb9cba0564d4f292280bdcec8752140ea961cc4331b0458c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1318}, 0x1, 0x0, 0x0, 0x4048085}, 0x24004000)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x20, r7, 0x300, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xf505}, 0x0)

23:16:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000c900)
truncate(0x0, 0xff6)

23:16:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000045)

[  218.072974][T30355] loop3: detected capacity change from 0 to 16
[  218.102653][T30360] loop5: detected capacity change from 0 to 16
23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x30000}, 0x0)

23:16:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fb43000000000000000001000000080003"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff01, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004800)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  218.202012][T30386] loop5: detected capacity change from 0 to 16
23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x34000}, 0x0)

23:16:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000548ef644d51066b2d64d0909ba24a501be9610449d", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

23:16:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000cc00)
truncate(0x0, 0xff6)

[  218.278984][T30398] loop3: detected capacity change from 0 to 16
23:16:21 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000046)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x400300}, 0x0)

23:16:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  218.333544][T30414] loop5: detected capacity change from 0 to 16
23:16:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.&![\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'x\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x391}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x81}, 0x40005)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x1000000}, 0x0)

[  218.454708][T30444] loop5: detected capacity change from 0 to 16
[  218.479601][T30450] loop3: detected capacity change from 0 to 16
[  218.495140][T30450] handle_bad_sector: 179 callbacks suppressed
23:16:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:21 executing program 1:
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'sit0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x657bfc037a87e32c}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x894, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x51, 0x4, "770fc700ba003418bf240f144a2b091348c8524107a011907b14d365d32a2d4c21166109f970df4fc22f56109bbfe621149a8aad5e8516566621905c85e5aec91b1479114e5f37aabe33316491"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe61e}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+7(#\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd53d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-.$+.&/{-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nr0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xba, 0x5, "ae1efea8e3bc894df57a99a7689b18997b85740b872869ee168719a6ec891559eb1033bc88280c1fdecba2f350a8393f24bdab445a9248d2b62cf2eccb6512853cd618a9c7648023c9f02e58711c0ce9d2efeebb1eb5faa1dbe964e35952a7d4d0ba722db47bd2e9fc4016ef658c33a84b3f0732ec28ddd1df3d99925a76586bf686badda6f8210259aec55dd44f33b8c90747999ef626d6a505a58408bc3c6ad6e83a1534300c536c7e336a16bf59f32e93cb0a415a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "35dbe64dc994a38a2b3f82163221f9dfcfe3d8880c0c4240c4c6002a4769475ba604232dc6a4269cdeeffefd766b478e6cb992f4f01983b302561329af60b314491a7b6c913a31a837123182adab302ddd430eb1a2ee1b242b05289bfa6bd9c98d984931feecf85cad1970d6a2d05298263c881bcc616da8cdd8ed3f79a3f2190e6ac6fbcee82e8a2b0c4f66bf369802c051e439861c3c8459bd36ac66a3cf8099f3cfe918f337c8ec5f7ceaed3314f1deca4f5027e236999f445b98c9f22e808ce4446256f9df9005e3a680f7eaf932d7c5540383884c4ddfdd05fedf65a449caca7081715ebb79e26fb78f21fcd9b322b2"}, @ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "b61973a01ae28d364b268c5465e81b58eaae30a3a47e485f5f4ec1baa42a8148f22d2ddeca21b84922bed7b0e549b0e9747f2f419fe38f9373cd9ba947c7694e8f8046f60c4fe53b71dd13ffbe1a1c069664455d2a778b7ab2ce91ce097b54e0af3871eda8624dc7e54fed12fa72d3926325f68146952bbcd720d440f815b591f38aff7e984b8e420f07b48f4f202c19fdc356e960dc1e253be8154631a2b31363d7ae0515dd3441e67cdb312e00b5e4ecf5d5cf28eb18da08c15dbdff9f0cdeb57674d6d5fe67d07906d76f2ef2852aea477e9abc879d73da1f2d161882eccb5b6af62cbcce"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x414, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc2, 0x4, "fceaeed0cf535f677fc5115d5ac39ed235168b60dc6e06689e8476f0f8a7854b434d1cec5aeabf2373045e34a282aeb260079c992b3825065870c31453efde1c4161e5a8d26952e718e5ad55ebef35f230bc9a18881da5c8a3daef16c6fad4654fd93a249f1aef7ccb5e356c424453a138eb44bc766ac156991c5a63ac067f1f324ea30ea1411cabbed7fa1e3db39858644f3eea8df1d2c1fb4d9ae41eb29480f18876e9dfdafafba1fba4a8d3d42e7010ec064913f06740b755a680624a"}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "450b1184f52e7d1f4a25e0e91490d03b02b4a57251f25baaf8fbbaf7254c16a628968d0d0121a3d09b9b5202d786f83eaea1acdea11afbfe470c18d7abd1b66255d0c4f4de76cc9409f81162f5a950919f4fed533769dd059523affd4f1f04be75cd4dd1b7eeab58269246caa6db170e1bda76a467d65a581332879259e1fe86935e10ea5a5cf34c61a0cfbb223f404b4c1b341d579a560c1065d1a4a9c0de96f13b405754979280acacb0edd9f0f31cb2"}, @ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "1d889a2e02d2db90c304d5c90f1754c084e5f4f8ac4c1119c5c7eb64da826ebd43cf27271788a6ee227a2164a05ca495614e6d4214c6e794c5cf1b4bd80fa1babfc4da6a93b66d177dd58ea236d1865e22d543fa23988202bdfe0df061720729f0f3dc8906e096d76567be8cc54791eb715f89ef45f6a4e562356aa694c19171c3fcb5981659c0e7d45dd3dc94f3e74b9eb15a6fef85b1e6939796b741cf0fa5cc4aede50738c5d23ca97a57aeb0f4687d1273d8257225f50226454754a8261c9ede51"}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "ac8eb595d27eefdc45de8ef289859ecc8a35574d30d2296704055fcca5100f0f9eac83b3e269f7b1cfaf3707bb3421ba05f8a3dedcca878a2731f8f33bf5dc4e0672f9da1a6754659f374c8f096e75bbfc2adb2180db691474c3113a0d31baeb2f19d27dc02fc4a932051958d422bf773f1fe9087a4bbb5b5c22d391ed000c33e0bf971736440efc03187ba37ffa2a8de896e43c522bea0a2854622d723c"}, @ETHTOOL_A_BITSET_VALUE={0xb2, 0x4, "396d2666a38b35ed551f8165573a7f8712e1750924f309e1cd6c8ec43c30664790663a45972b25a802600afac4c41494ea9a68aee99c800449e1622c9ea91bac704d2feff22bd6fa980800d4f14eeda8a10b9e6179cd6afe7289cc1d99b35349754cf7b83a315454154180463f586d57b0ce7d36e95db63ac33fe7f39d4f2a35c3fc67326016685476f6a2af5e8c00ba1cc06f8cd47ead8626bff3968853ca5bcc8823ae1d6efc9fcf5203f8287d"}, @ETHTOOL_A_BITSET_VALUE={0x6c, 0x4, "9827caa57008f508190c15367d7327cab4447f337a4e7c070763372a17163bd40e04a9c218b2b9b1b280763e9f0ccb68080c10ac82e11dbf0946d5a038f9619697311a4d7e0fbe2e63b1a6fb9012b0cfff2101af3f8c01588f63f63b1df7b0f58dcaa3bd934441fb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x894}}, 0x800)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2e000000e51a48bc3df1e4bf19864c9e613a8f0a8eb3993d22cb7b31b7906f6e68927d1434398c7dfdea681261a357eb02883f4814dae710f46dd247ae14fc15dd1a1cec603efc6d2e90584d3cebaad37e8a5490f94568c9b21f461da01948324c29", @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000ff7f00000000000000626174616b7630000000000000000000"], 0x2c}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="fb43000000000000000001000000080003"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000e00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x8c, r8, 0x1b40c96db149f7e1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44824}, 0x44041)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004090}, 0x20000000)

[  218.495154][T30450] attempt to access beyond end of device
[  218.495154][T30450] loop3: rw=2049, want=122, limit=16
[  218.512136][T30450] buffer_io_error: 179 callbacks suppressed
[  218.512144][T30450] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  218.527502][T30450] attempt to access beyond end of device
[  218.527502][T30450] loop3: rw=2049, want=123, limit=16
[  218.538335][T30450] Buffer I/O error on dev loop3, logical block 122, lost async page write
[  218.547724][T30450] attempt to access beyond end of device
23:16:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000cf00)
truncate(0x0, 0xff6)

23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x2000000}, 0x0)

[  218.547724][T30450] loop3: rw=2049, want=124, limit=16
[  218.558542][T30450] Buffer I/O error on dev loop3, logical block 123, lost async page write
[  218.567487][T30450] attempt to access beyond end of device
[  218.567487][T30450] loop3: rw=2049, want=125, limit=16
[  218.578312][T30450] Buffer I/O error on dev loop3, logical block 124, lost async page write
[  218.588580][T30450] attempt to access beyond end of device
[  218.588580][T30450] loop3: rw=2049, want=126, limit=16
23:16:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x3000000}, 0x0)

23:16:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000047)

[  218.599362][T30450] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  218.607948][T30450] attempt to access beyond end of device
[  218.607948][T30450] loop3: rw=2049, want=127, limit=16
[  218.618883][T30450] Buffer I/O error on dev loop3, logical block 126, lost async page write
[  218.624644][T30450] attempt to access beyond end of device
[  218.624644][T30450] loop3: rw=2049, want=128, limit=16
[  218.638572][T30450] Buffer I/O error on dev loop3, logical block 127, lost async page write
[  218.648316][T30472] loop5: detected capacity change from 0 to 16
23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x4000000}, 0x0)

23:16:22 executing program 1:
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe, 0x30, r1, 0xa773000)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)
r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20000, 0x1a2)
write(r3, &(0x7f0000000180)="0a48c2efa965cff0fce777bb40fcda1b81efae8ab1ab9f0f622200b0f8f9f936d1919c9a4e8a622626e25ed8d10e1409ccdf4c430e448209cbe41d6791b8b1db92d2a82d711c39e19362a7cf42ce4aad908581cf82c1c8c276d3633fc3b8b613c7b1ee8a5f5340a7e00a1710147245bb268fd847b2b8c52a17c77826812ba6799be2e281c8d75ede1161e5f7746a9914d9275114d2d79081c2fd0a37e07abdf7e02450e04cc4c2d55fdff5ade5b149f7ee0cac80296b85dfd96269a0c8e703b48e5987a60d2768dd9d62", 0xca)

23:16:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000d000)
truncate(0x0, 0xff6)

23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x5000000}, 0x0)

[  218.793859][T30501] loop3: detected capacity change from 0 to 16
[  218.821217][T30501] attempt to access beyond end of device
[  218.821217][T30501] loop3: rw=2049, want=122, limit=16
[  218.832007][T30501] Buffer I/O error on dev loop3, logical block 121, lost async page write
23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x6000000}, 0x0)

23:16:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  218.834506][T30508] loop5: detected capacity change from 0 to 16
[  218.854665][T30501] attempt to access beyond end of device
[  218.854665][T30501] loop3: rw=2049, want=123, limit=16
[  218.865469][T30501] Buffer I/O error on dev loop3, logical block 122, lost async page write
23:16:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', <r1=>0x0, 0x2f, 0x40, 0x0, 0x0, 0x6a, @loopback, @mcast2, 0x10, 0x80, 0x40, 0x8000}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42008080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x0, 0x518, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x0, 0x1, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "18e59890a9bd68b945f88ca999319f223106a4c9cdbcc437ba41221c0556b31730ccc9d8675dc610c264397af104a69d2721c738f80bdc554f858accc77da9ea85c1b2d57bfbe727a77f7e33c29166d742b7337606418dda912feeed047b0299ea5790a7ad53"}, 0x6a)

23:16:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000048)

23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x7000000}, 0x0)

[  218.897870][T30501] attempt to access beyond end of device
[  218.897870][T30501] loop3: rw=2049, want=124, limit=16
[  218.908689][T30501] Buffer I/O error on dev loop3, logical block 123, lost async page write
23:16:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000d200)
truncate(0x0, 0xff6)

23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9000000}, 0x0)

23:16:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x2, &(0x7f0000000000)=[{0x4d, 0x0, 0x1}, {}]})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r1, 0x100, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x180, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x148, 0x22, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x464}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x65e}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfe}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf59}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa359ab86}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x85}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffc0}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x65}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf7}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}]}, 0x180}, 0x1, 0x0, 0x0, 0xa3bdf0f5673835d6}, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x40081, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
accept(r4, &(0x7f00000002c0)=@xdp={0x2c, 0x0, <r6=>0x0}, &(0x7f0000000340)=0x80)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0xffffffffffffff73, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9e}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x0, 0x32, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x8080)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x2000800)
read(r2, &(0x7f0000000000)=""/25, 0x19)
write(r2, &(0x7f00000004c0)="95ff55e4f7dac2971e776205053e37e2b860b8590f9e5d46e6089cf09cdcdbf0b419680d44175a163102cbbc247ef285345c90e45c09621b95f73a3cb5252e125bbe112aad04a1d475d377c068d28340d4ebbbaf4e6c6e331c45acd5f3602dd890a8a79b889b3c00936e62c66eae2956c4f3e40f2d7baf6a5ed2f10da82f674e3158813b5921b61f334989eabd791ef2dd4047d29455b65cf3ba012d43d5a6145c25ee1f97e834b6cf5b6ac1a8efbac0f774ee30b7e09e6572cd4762514421de28beb56223e3722ce101f7fe14f34f6cfff5f916e4884256269299e93e73f2ea99833b2918aa244cf01b", 0xea)

23:16:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  219.018837][T30543] loop5: detected capacity change from 0 to 16
23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9effffff}, 0x0)

[  219.067259][T30558] loop3: detected capacity change from 0 to 16
23:16:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000049)

23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xefffffff}, 0x0)

23:16:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
syz_open_dev$vcsn(&(0x7f0000001d00), 0xa8da, 0x101000)
socketpair(0x6, 0x80000, 0x20, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r4, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  219.146714][T30574] loop5: detected capacity change from 0 to 16
23:16:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000d500)
truncate(0x0, 0xff6)

23:16:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xf0ffffff}, 0x0)

[  219.231712][T30597] loop5: detected capacity change from 0 to 16
[  219.254776][T30593] loop3: detected capacity change from 0 to 16
23:16:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x40, 0x190, 0x2}, 0x18)
sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0), 0x5)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000004a)

23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xf5050000}, 0x0)

23:16:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000d700)
truncate(0x0, 0xff6)

[  219.305041][T30607] loop5: detected capacity change from 0 to 16
23:16:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2a000000ea7f11bd52574a98e5de8960a017202110", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

23:16:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000001800018014000200626174616476300000000000000000006fb0feaf00e37b2b255cceff7f2567d3cc4f76b2c2e5d3d3b2986e04fe4a518aa8c0b915309a9f5ca8d4016b089867820289156c431e06f277edd2018cad3fc26c867fab51dc95912f79e782eb1d3f4ba2482405dca2118fc15803ce1f419e0ca2b992239c4c8b6a0eecef4155deded38728d684bbfeafc63120d1e52ddb77787bce2e5ef2f2f0a0d31c71fc9e62b5"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0)

23:16:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  219.463771][T30642] loop5: detected capacity change from 0 to 16
[  219.495298][T30643] loop3: detected capacity change from 0 to 16
23:16:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffff9e}, 0x0)

23:16:22 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000004b)

23:16:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000d800)
truncate(0x0, 0xff6)

[  219.632662][T30671] loop5: detected capacity change from 0 to 16
23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffffef}, 0x0)

23:16:23 executing program 1:
ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x4)
r0 = syz_io_uring_complete(0x0)
ioctl$FIOCLEX(r0, 0x5451)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c0000001800018014080202626174616476300000ddff0000000000"], 0x2c}}, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}]}, 0x1c}}, 0x4015)

[  219.680242][T30683] loop3: detected capacity change from 0 to 16
23:16:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000004c)

23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xfffffff0}, 0x0)

[  219.793721][T30698] __nla_validate_parse: 2 callbacks suppressed
[  219.793734][T30698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
23:16:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff2, 0x51}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x4008800)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x3000000000000}, 0x0)

23:16:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000db00)
truncate(0x0, 0xff6)

[  219.842987][T30698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  219.857448][T30710] loop5: detected capacity change from 0 to 16
[  219.872660][T30713] loop3: detected capacity change from 0 to 16
23:16:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000004d)

23:16:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x2dc, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x22}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_TX_RATES={0x290, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x18, 0x3, 0x60, 0x30, 0x60, 0x5, 0x5, 0xc, 0x36, 0x6c, 0xc, 0x30, 0x1b, 0x1, 0x6c, 0x6, 0x1, 0x3, 0xb, 0x60, 0x1b, 0x36, 0xb, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x200, 0x0, 0x20, 0x400, 0xffff]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x9}, {0x3, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x2}, {0x1, 0x4}, {0x5, 0x1}, {0x4, 0x9}, {0x4}, {0x4}, {0x1, 0x2}, {0x5}, {0x3, 0x3}, {0x1}, {}, {0x5, 0x5}, {0x3, 0x5}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x8}, {0x2, 0x3}, {0x6}, {0x5, 0x3}, {0x6, 0x3}, {0x5, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x4}, {0x2, 0x1}, {0x1, 0x6}, {0x3, 0x3}, {0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x2, 0x1, 0x60, 0x0, 0x71, 0x18, 0x3, 0x6, 0xc, 0x24, 0x6c, 0x60, 0x1, 0x60, 0x16, 0x4, 0x48, 0x3, 0x48, 0x18, 0x6, 0x24, 0x1b, 0x16, 0x1b, 0x60, 0x16, 0x36, 0x48, 0xe47ba565723639cf]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0x60, 0xb, 0x36, 0x1, 0x1, 0xb, 0x30, 0x5, 0x6, 0x0, 0x48, 0x6c, 0x1b, 0x1, 0x12, 0x6c, 0xb, 0x3, 0x6, 0x78, 0x30, 0x48, 0x6, 0x24]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x710a, 0x6, 0x7ff, 0x998, 0x6, 0x2, 0x20, 0x21]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x1}, {0x7, 0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x8}, {0x4, 0x5}, {0x2, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x4, 0xa}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x2}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x13}, {0x1, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x9}, {0x1, 0x8}, {}, {0x6, 0x1}, {0x1, 0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x5, 0x9}, {0x4, 0x9}, {0x4, 0x1}, {0x5, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0xa}, {0x7, 0x7}, {0x5, 0x8}, {0x5}, {0x5, 0x9}, {}, {0x1, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x9, 0x12, 0xb, 0x36, 0x6b, 0x36, 0x2, 0x48, 0x16, 0x2, 0x2, 0x24, 0x18, 0x6, 0x16, 0xb, 0x3, 0x48, 0x18, 0x60, 0x18, 0x12, 0x9, 0x5, 0x30, 0x6c, 0x48, 0x24, 0x9, 0x24, 0x5]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfd1, 0x0, 0x6, 0x9, 0x3, 0x80, 0x9, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x4}, {0x5, 0x9}, {0x7, 0x9}, {0x7}, {0x6, 0x8}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x8}, {0x0, 0x2}, {0x2, 0x8}, {0x6, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x5}, {0x5}, {0x0, 0x7}, {0x3, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x2}, {0x1, 0x7}, {0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x5}, {0x4, 0x5}, {0x6, 0x9}, {0x2, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x7}, {}, {0x5, 0x3}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x4, 0x4}, {0x2, 0x6}, {0x3, 0x4}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x3, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x6, 0x3}, {0x3, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x9}, {0x3, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x2}, {0x0, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x5, 0x4}, {0x3, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x5}, {0x5, 0x6}, {0x2, 0x5}, {0x6, 0x5}, {0x7, 0x5}, {0x6}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x6}, {0x5}, {0x7, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x800, 0x5, 0x7, 0xfff7, 0x7, 0xc17, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0xa}, {0x7, 0x9}, {0x7, 0x3}, {0x2}, {0x2, 0x6}, {0x2, 0x5}, {0x4, 0x2}, {0x2}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x2, 0x9}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x4, 0x8}, {0x1, 0xa}, {0x2}, {0x2, 0xa}, {0x4, 0x8}, {0x3, 0x3}, {}, {0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x3, 0x2}, {0x5, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x3, 0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {}, {0x7, 0x4}, {0x3, 0x4}, {0x3, 0xa}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x6, 0x1}, {0x6, 0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x3}, {0x7, 0x6}, {0x3, 0x7}, {0x2, 0x3}, {0x4, 0x1}, {0x6, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x4}, {0x4}, {0x5, 0xa}, {0x1, 0x1}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x8}, {0x3, 0x3}, {0x3}, {0x7, 0x8}, {0x7, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x1}, {0x3, 0x1}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x6}, {0x1}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x2}, {0x7}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x6, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x2}, {0x3, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x81, 0x100, 0x1, 0xf9, 0x0, 0x2]}}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40004}, 0x4040)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000007136650e64c29a4bb5b393073011e222a203c64b2500551cd60286feaf8be976ef49fb7be25a0817c8adff98285aeb6952cb862a3aff2cd9367ba091d2b7056334b00435b872e8352f9a8005f775507a2f0a205127ccc10c68ef9c11d1836e0c4f701047dc81d04da821d97c730ffa03e41fb529ecb5e5066062c1bbc0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="34050000", @ANYRES16=r1, @ANYBLOB="000427bd7000fcdbdf250e00000094000180140002006261746164765f736c6176655f30000008000300010000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002007866726d3000000000000000000000001400020076657468315f746f5f7465616d0000001400020076657468305f746f5f626f6e640000001400020077673200000000000000000000000000f8000280a0000380440001800c000200626174616476300008000100020000000800010000800000080001000400000004000300080001007f0000000c000200657468746f6f6c0004000300240001800800010008000000040003000400030008000100080000000800010008000000200001800d0002005c232524d52829f9000000000c0002006261746164763000140001800400030004000300080001000000000038000380340001800800010001000000090002005c24265e00000000040003000800010009000000080001001f00000004000300040003001c00038018000180040003000800010004000000080001003f00000084000180140002006272696467655f736c6176655f310000080003000200000008000300030000000800030001000000140002007866726d30000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007665746830000000000000000000000008000300010000008400018008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="14000200626f6e643000000000000000000000000c000180080003000000000018000180140002006272696467485f736c6176655f9e0000"], 0x534}, 0x1, 0x0, 0x0, 0x20000000}, 0x18c0)

23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0)

23:16:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  219.991868][T30730] loop5: detected capacity change from 0 to 16
23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x100000000000000}, 0x0)

23:16:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c8, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xe4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x20000010)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0)

23:16:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000004e)

[  220.067523][T30743] loop3: detected capacity change from 0 to 16
23:16:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000df00)
truncate(0x0, 0xff6)

23:16:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(0x0, 0x201)

[  220.135980][T30767] loop5: detected capacity change from 0 to 16
23:16:23 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r0, &(0x7f0000000000)=""/25, 0x19)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xad46}]}, 0x1c}}, 0x0)
r3 = open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x9a7d5f624b7a083d)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x3b4, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x811}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x95e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x220}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff8d1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97f7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_BEARER={0x1fc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @empty, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x33c}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1ff, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private0, 0x8000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010101}}}}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x10}, 0x80)

23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x300000000000000}, 0x0)

23:16:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(0x0, 0x201)

23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x400000000000000}, 0x0)

[  220.262103][T30789] loop3: detected capacity change from 0 to 16
[  220.270250][T30792] loop5: detected capacity change from 0 to 16
23:16:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000004f)

23:16:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000e000)
truncate(0x0, 0xff6)

23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x500000000000000}, 0x0)

23:16:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(0x0, 0x201)

[  220.404180][T30818] loop5: detected capacity change from 0 to 16
[  220.462670][T30830] loop3: detected capacity change from 0 to 16
23:16:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x600000000000000}, 0x0)

23:16:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x0)

23:16:23 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000050)

[  220.547083][T30843] loop5: detected capacity change from 0 to 16
23:16:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000e400)
truncate(0x0, 0xff6)

23:16:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x700000000000000}, 0x0)

23:16:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x0)

[  220.664324][T30862] loop5: detected capacity change from 0 to 16
[  220.672205][T30863] loop3: detected capacity change from 0 to 16
23:16:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000051)

[  220.783325][T30881] loop5: detected capacity change from 0 to 16
[  220.806497][T30859] ==================================================================
[  220.814684][T30859] BUG: KCSAN: data-race in copy_page_to_iter / fat12_ent_put
[  220.822055][T30859] 
[  220.824373][T30859] write to 0xffff888130d06206 of 1 bytes by task 30881 on cpu 1:
[  220.832083][T30859]  fat12_ent_put+0x76/0x1b0
[  220.836598][T30859]  fat_alloc_clusters+0x430/0xa50
[  220.841624][T30859]  fat_get_block+0x213/0x5a0
[  220.846215][T30859]  __block_write_begin_int+0x4a2/0x1060
[  220.851765][T30859]  cont_write_begin+0x522/0x850
[  220.856622][T30859]  fat_write_begin+0x61/0xf0
[  220.861218][T30859]  generic_perform_write+0x196/0x3a0
[  220.866500][T30859]  __generic_file_write_iter+0x202/0x300
[  220.872136][T30859]  generic_file_write_iter+0x75/0x130
[  220.877507][T30859]  do_iter_readv_writev+0x2cb/0x360
[  220.882715][T30859]  do_iter_write+0x112/0x4c0
[  220.887305][T30859]  vfs_iter_write+0x4c/0x70
[  220.891806][T30859]  iter_file_splice_write+0x40a/0x750
[  220.897182][T30859]  direct_splice_actor+0x80/0xa0
[  220.902120][T30859]  splice_direct_to_actor+0x345/0x650
[  220.907491][T30859]  do_splice_direct+0xf5/0x170
[  220.912253][T30859]  do_sendfile+0x773/0xda0
[  220.916679][T30859]  __x64_sys_sendfile64+0xf2/0x130
[  220.921789][T30859]  do_syscall_64+0x4a/0x90
[  220.926214][T30859]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  220.932123][T30859] 
[  220.934447][T30859] read to 0xffff888130d06000 of 1024 bytes by task 30859 on cpu 0:
[  220.942332][T30859]  copy_page_to_iter+0x320/0x860
[  220.947270][T30859]  filemap_read+0xf06/0x1230
[  220.951862][T30859]  generic_file_read_iter+0x75/0x2c0
[  220.957145][T30859]  blkdev_read_iter+0xb9/0xf0
[  220.961844][T30859]  vfs_read+0x565/0x5d0
[  220.966086][T30859]  ksys_read+0xce/0x180
[  220.970246][T30859]  __x64_sys_read+0x3e/0x50
[  220.974748][T30859]  do_syscall_64+0x4a/0x90
23:16:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x900000000000000}, 0x0)

23:16:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000e900)
truncate(0x0, 0xff6)

23:16:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x0)

[  220.979169][T30859]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  220.985069][T30859] 
[  220.987387][T30859] Reported by Kernel Concurrency Sanitizer on:
[  220.993529][T30859] CPU: 0 PID: 30859 Comm: systemd-udevd Not tainted 5.13.0-rc4-syzkaller #0
[  221.002199][T30859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  221.012253][T30859] ==================================================================
[  221.028552][T30886] loop3: detected capacity change from 0 to 16
23:16:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x8000000000000000}, 0x0)

23:16:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000052)

[  221.086188][T30886] loop3: detected capacity change from 0 to 16
[  221.105152][T30900] loop5: detected capacity change from 0 to 16
23:16:24 executing program 5:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
read(r3, &(0x7f0000000080)=""/17, 0x11)
inotify_add_watch(r2, &(0x7f0000000000)='./bus\x00', 0x720001ba)
pwritev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="734acd632376caae27478287b8f4fe28cc4b6110de38f975cb877a8e90aca0464893f3a8f5eb894da53bc4851f9ffd7446c406cc683337d99260d8173a5c7e2b7fa6bc258b4db8b66f2ffe3cd69a445cd6621ab275", 0x55}, {&(0x7f0000000180)="5a963086b63ffa103f24ce8af37da3dce2303199fdf341ff65800afd4092699a81832d305a36d0", 0x27}, {&(0x7f00000001c0)="690c2513fa082f5072e371cfd00b982947f8cfe002d0ec95fa47cf7aa7ac43371642cb7179619e9a554ce8068e4db162f34bff0f7cdf388ffc50dc754ef3ac62540525cf44a081900be9522849116a74e19cb3fa12c2c35dc82dc35dae2a8d5e0f217d279829c145eeb616c1e6f635eab44fbb29cf1484010b97aff57c3da3026358c8ddd349e9347b1dc71852d80abdf2e8816f29b3fd2d52277a483868b582171c3c62181607e30c5aeaa69a51de9100cb9e63a0e1a5ead64626b383436306c20438bd5d", 0xc5}, {&(0x7f00000002c0)="3d136321fd264fe17641bee6c5f5e0aaddd5031f3374467d60bcae6061b995ff60805170bab2a2e2ec4ed59c7a3428bbb63174ccc7cd5eb9f193fdbab191170a3a42f42f87acee246318ef48281919d71e427b2b06d2fa1c4f78a2f3118d2e5e538ac077f574ec4c262f59770355188dd82fc9653232e52b09788ef9a837ca6b55b0c6f9a741e156ac1dffa66a43960535f264", 0x93}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="d7b037918cf875f32e793c280d8d5aabd4310386191438eb4e96b1f8ecbd69c4988adbd1fe1740c2ac89b07160173c2a3bdb7e674b469f0d26ac0535a62f27210f33f5fecaf167469804c093626764087d22eea04b5050b53fe09fd3d9e5cd2d0527a6180bec20d3a9a57493407dfeca6a8576c81127084348b9c77770711d4599b8", 0x82}, {&(0x7f0000000480)="3c633295c9024700c0a78d3ef5a7d62c40108ef12df2b60345958be13a5fea1f6fed40d6d072410e92648659c7359344f2ef21759f735a0753aa49ef65a7ff97481813f4ddbf87dc3514cfc416e71b6c245ee40acaba883599bad619adfc54e6854927d6220a6598b3ef294a0af8932abaf79bb0e7967e27064b62d131f9ae9a9409e9a7c234a51e6c2bbf51b8b2077d21f2bcc3a920e86c44a39c7646ab6524b36985d35524fea94fb0b4c3a707ba098e14919f21d7a31ec26b414f0a1f1fe8dc5289604ff5169f1b11c4d40a46b8c128b9950af5b3ea20c1768585a4bb1762903e06cc00c79608c4991ce82f", 0xed}, {&(0x7f0000000580)="0df7b8839f22b23643e157934759bfb246a2250a600ca0822e6305c609e13c911b8e8aadde016afd82d8c3caa10dbedd104d6b7898c743959546612944da4090094634678a54b5a4145468be16252ac3d72f0385979c9aaae9caec07d52b9cdf4226ed17141134ce5995d17d2477a0b06c84df357a846d2a188509abb628317ca23c7a9ca3ead8c352a4832705bb89ab35f43a90df6e436d4b6a6351", 0x9c}, {&(0x7f0000000640)="c772b24c64d2c807a03abca46245c94036db", 0x12}, {&(0x7f0000000680)="3b9e95d5b86bd3f6ee4a007db28c984f398857e4d5582943bd503e8574e4c55798c91984746e8941f57563b5ee1145edfad438fa669ee8740c9bd2b0371ce70f461ec0787b6c4bb7892ad42c9b7b8d9c7ef9b454718831a7c400f6d1ddcfa341331182c9726e1c3211aea5065254c9d20f96b3cfaa4f7339bc08ac2e", 0x7c}], 0xa, 0xa1a9, 0x804)

23:16:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x9effffff00000000}, 0x0)

23:16:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000ee00)
truncate(0x0, 0xff6)

[  221.211492][T30919] loop3: detected capacity change from 0 to 16
23:16:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000053)

23:16:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001b00)
truncate(0x0, 0xff6)

23:16:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xefffffff00000000}, 0x0)

[  221.358885][T30942] loop5: detected capacity change from 0 to 16
[  221.399521][T30946] loop3: detected capacity change from 0 to 16
23:16:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001b00)
truncate(0x0, 0xff6)

23:16:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xf0ffffff00000000}, 0x0)

23:16:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f000)
truncate(0x0, 0xff6)

23:16:24 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000054)

23:16:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80001b00)
truncate(0x0, 0xff6)

[  221.526464][T30965] loop5: detected capacity change from 0 to 16
23:16:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xf505000000000000}, 0x0)

[  221.603185][T30975] loop3: detected capacity change from 0 to 16
23:16:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000055)

23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffff7f00000000}, 0x0)

23:16:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f100)
truncate(0x0, 0xff6)

[  221.679134][T30991] loop5: detected capacity change from 0 to 16
23:16:25 executing program 5:
rmdir(&(0x7f0000000080)='./bus\x00')
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/126, 0x7e}], 0x1, 0x8, 0x80000000)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000000200)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
sendfile(r1, r2, &(0x7f0000001200)=0x8, 0x2)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
dup(r3)
dup3(r2, r0, 0x0)

23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0xffffffff00000000}, 0x0)

[  221.785730][T31006] loop3: detected capacity change from 0 to 16
23:16:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000056)

23:16:25 executing program 5 (fault-call:5 fault-nth:0):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x2}, 0x0)

23:16:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f200)
truncate(0x0, 0xff6)

23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3}, 0x0)

[  221.943447][T31026] loop3: detected capacity change from 0 to 16
[  221.985044][T31029] loop5: detected capacity change from 0 to 16
23:16:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000057)

[  222.034114][T31029] FAULT_INJECTION: forcing a failure.
[  222.034114][T31029] name failslab, interval 1, probability 0, space 0, times 0
[  222.046861][T31029] CPU: 1 PID: 31029 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0
[  222.055701][T31029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  222.065862][T31029] Call Trace:
[  222.069145][T31029]  dump_stack+0x137/0x19d
[  222.073475][T31029]  should_fail+0x23c/0x250
[  222.077886][T31029]  ? getname_flags+0x84/0x3d0
23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x4}, 0x0)

[  222.082560][T31029]  __should_failslab+0x81/0x90
[  222.087389][T31029]  should_failslab+0x5/0x20
[  222.091895][T31029]  kmem_cache_alloc+0x46/0x2f0
[  222.096722][T31029]  getname_flags+0x84/0x3d0
[  222.101230][T31029]  ? __cond_resched+0x11/0x40
[  222.105914][T31029]  user_path_at_empty+0x28/0x50
[  222.110869][T31029]  __x64_sys_truncate+0x75/0x120
[  222.115815][T31029]  do_syscall_64+0x4a/0x90
[  222.120236][T31029]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  222.126139][T31029] RIP: 0033:0x4665d9
23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x5}, 0x0)

[  222.130075][T31029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  222.149687][T31029] RSP: 002b:00007fdc98550188 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  222.158098][T31029] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  222.166081][T31029] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000020003800
[  222.174082][T31029] RBP: 00007fdc985501d0 R08: 0000000000000000 R09: 0000000000000000
[  222.182063][T31029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.190033][T31029] R13: 00007fff3aa2504f R14: 00007fdc98550300 R15: 0000000000022000
23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x6}, 0x0)

23:16:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f300)
truncate(0x0, 0xff6)

23:16:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000058)

[  222.258353][T31062] loop3: detected capacity change from 0 to 16
23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x7}, 0x0)

23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9}, 0x0)

[  222.397560][T31086] loop3: detected capacity change from 0 to 16
23:16:25 executing program 5 (fault-call:5 fault-nth:1):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:25 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000059)

23:16:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f400)
truncate(0x0, 0xff6)

23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x300}, 0x0)

23:16:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x500}, 0x0)

[  222.593135][T31103] loop3: detected capacity change from 0 to 16
23:16:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000005a)

[  222.646484][T31110] loop5: detected capacity change from 0 to 16
[  222.692286][T31110] FAULT_INJECTION: forcing a failure.
[  222.692286][T31110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.705632][T31110] CPU: 0 PID: 31110 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0
[  222.714431][T31110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  222.724495][T31110] Call Trace:
[  222.727781][T31110]  dump_stack+0x137/0x19d
[  222.732178][T31110]  should_fail+0x23c/0x250
[  222.736599][T31110]  should_fail_usercopy+0x16/0x20
[  222.741629][T31110]  strncpy_from_user+0x21/0x250
[  222.746543][T31110]  getname_flags+0xb8/0x3d0
[  222.751047][T31110]  user_path_at_empty+0x28/0x50
[  222.755946][T31110]  __x64_sys_truncate+0x75/0x120
[  222.760886][T31110]  do_syscall_64+0x4a/0x90
[  222.765347][T31110]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  222.771257][T31110] RIP: 0033:0x4665d9
[  222.775149][T31110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  222.794764][T31110] RSP: 002b:00007fdc98550188 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  222.803184][T31110] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  222.811179][T31110] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000020003800
[  222.819159][T31110] RBP: 00007fdc985501d0 R08: 0000000000000000 R09: 0000000000000000
[  222.827129][T31110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.835101][T31110] R13: 00007fff3aa2504f R14: 00007fdc98550300 R15: 0000000000022000
23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x5f5}, 0x0)

[  222.894622][T31131] loop3: detected capacity change from 0 to 16
23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x600}, 0x0)

23:16:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f500)
truncate(0x0, 0xff6)

23:16:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000005b)

23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x700}, 0x0)

23:16:26 executing program 5 (fault-call:5 fault-nth:2):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  223.083215][T31156] loop3: detected capacity change from 0 to 16
23:16:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000005c)

23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x900}, 0x0)

23:16:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f600)
truncate(0x0, 0xff6)

23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf505}, 0x0)

[  223.239188][T31181] loop5: detected capacity change from 0 to 16
[  223.246680][T31179] loop3: detected capacity change from 0 to 16
23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x30000}, 0x0)

[  223.283630][T31181] FAULT_INJECTION: forcing a failure.
[  223.283630][T31181] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  223.296883][T31181] CPU: 1 PID: 31181 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0
[  223.305649][T31181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  223.315892][T31181] Call Trace:
[  223.319260][T31181]  dump_stack+0x137/0x19d
[  223.323619][T31181]  should_fail+0x23c/0x250
[  223.328041][T31181]  __alloc_pages+0x102/0x320
23:16:26 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000005d)

[  223.332635][T31181]  alloc_pages+0x21d/0x310
[  223.337053][T31181]  __page_cache_alloc+0x4d/0xf0
[  223.341971][T31181]  pagecache_get_page+0x5f4/0x900
[  223.347174][T31181]  block_truncate_page+0xa2/0x6d0
[  223.352222][T31181]  ? fat_block_truncate_page+0x30/0x30
[  223.357710][T31181]  fat_block_truncate_page+0x2a/0x30
[  223.363045][T31181]  fat_setattr+0x65c/0x7d0
[  223.367462][T31181]  ? fat_getattr+0xf0/0xf0
[  223.371916][T31181]  notify_change+0x8a3/0xa80
[  223.376509][T31181]  vfs_truncate+0x2ff/0x470
[  223.381017][T31181]  __x64_sys_truncate+0xa0/0x120
[  223.385999][T31181]  do_syscall_64+0x4a/0x90
[  223.390437][T31181]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  223.396335][T31181] RIP: 0033:0x4665d9
[  223.400229][T31181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  223.419840][T31181] RSP: 002b:00007fdc98550188 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
23:16:26 executing program 5 (fault-call:5 fault-nth:3):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x34000}, 0x0)

[  223.428254][T31181] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  223.436350][T31181] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000020003800
[  223.444406][T31181] RBP: 00007fdc985501d0 R08: 0000000000000000 R09: 0000000000000000
[  223.452383][T31181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.460373][T31181] R13: 00007fff3aa2504f R14: 00007fdc98550300 R15: 0000000000022000
23:16:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x400300}, 0x0)

23:16:26 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f700)
truncate(0x0, 0xff6)

[  223.548798][T31219] loop5: detected capacity change from 0 to 16
[  223.587515][T31221] loop3: detected capacity change from 0 to 16
[  223.606530][T31221] handle_bad_sector: 165 callbacks suppressed
[  223.606544][T31221] attempt to access beyond end of device
[  223.606544][T31221] loop3: rw=2049, want=122, limit=16
[  223.623417][T31221] buffer_io_error: 165 callbacks suppressed
[  223.623437][T31221] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  223.647683][T31229] FAULT_INJECTION: forcing a failure.
[  223.647683][T31229] name failslab, interval 1, probability 0, space 0, times 0
[  223.660455][T31229] CPU: 1 PID: 31229 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0
[  223.669250][T31229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  223.679311][T31229] Call Trace:
[  223.682662][T31229]  dump_stack+0x137/0x19d
[  223.687005][T31229]  should_fail+0x23c/0x250
[  223.691514][T31229]  ? mempool_alloc_slab+0x16/0x20
[  223.696540][T31229]  __should_failslab+0x81/0x90
[  223.701356][T31229]  should_failslab+0x5/0x20
[  223.705858][T31229]  kmem_cache_alloc+0x46/0x2f0
[  223.710638][T31229]  mempool_alloc_slab+0x16/0x20
[  223.715515][T31229]  ? mempool_free+0x130/0x130
[  223.720196][T31229]  mempool_alloc+0x8c/0x300
[  223.724704][T31229]  ? fat_bmap+0x258/0x290
[  223.729063][T31229]  bio_alloc_bioset+0xcc/0x480
[  223.733829][T31229]  submit_bh_wbc+0x130/0x330
[  223.738417][T31229]  block_truncate_page+0x3b0/0x6d0
[  223.743594][T31229]  ? fat_block_truncate_page+0x30/0x30
[  223.749057][T31229]  fat_block_truncate_page+0x2a/0x30
[  223.754384][T31229]  fat_setattr+0x65c/0x7d0
[  223.758806][T31229]  ? fat_getattr+0xf0/0xf0
[  223.763247][T31229]  notify_change+0x8a3/0xa80
[  223.767842][T31229]  vfs_truncate+0x2ff/0x470
[  223.772391][T31229]  __x64_sys_truncate+0xa0/0x120
[  223.777341][T31229]  do_syscall_64+0x4a/0x90
[  223.781762][T31229]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  223.787799][T31229] RIP: 0033:0x4665d9
[  223.791693][T31229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  223.811342][T31229] RSP: 002b:00007fdc9852f188 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  223.819808][T31229] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9
[  223.827779][T31229] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000020003800
[  223.835752][T31229] RBP: 00007fdc9852f1d0 R08: 0000000000000000 R09: 0000000000000000
[  223.843720][T31229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x1000000}, 0x0)

[  223.851688][T31229] R13: 00007fff3aa2504f R14: 00007fdc9852f300 R15: 0000000000022000
[  223.914608][T31221] attempt to access beyond end of device
[  223.914608][T31221] loop3: rw=2049, want=123, limit=16
[  223.925547][T31221] Buffer I/O error on dev loop3, logical block 122, lost async page write
23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x2000000}, 0x0)

23:16:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f800)
truncate(0x0, 0xff6)

[  223.965803][T31221] attempt to access beyond end of device
[  223.965803][T31221] loop3: rw=2049, want=124, limit=16
[  223.976642][T31221] Buffer I/O error on dev loop3, logical block 123, lost async page write
23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3000000}, 0x0)

[  224.033817][T31221] attempt to access beyond end of device
[  224.033817][T31221] loop3: rw=2049, want=125, limit=16
[  224.044733][T31221] Buffer I/O error on dev loop3, logical block 124, lost async page write
[  224.065179][T31221] attempt to access beyond end of device
[  224.065179][T31221] loop3: rw=2049, want=126, limit=16
[  224.076103][T31221] Buffer I/O error on dev loop3, logical block 125, lost async page write
[  224.101753][T31221] attempt to access beyond end of device
[  224.101753][T31221] loop3: rw=2049, want=127, limit=16
[  224.112565][T31221] Buffer I/O error on dev loop3, logical block 126, lost async page write
[  224.122288][T31221] attempt to access beyond end of device
[  224.122288][T31221] loop3: rw=2049, want=128, limit=16
23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x4000000}, 0x0)

23:16:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000005e)

[  224.133120][T31221] Buffer I/O error on dev loop3, logical block 127, lost async page write
23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x5000000}, 0x0)

23:16:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000f900)
truncate(0x0, 0xff6)

[  224.265358][T31282] loop3: detected capacity change from 0 to 16
[  224.300399][T31282] attempt to access beyond end of device
[  224.300399][T31282] loop3: rw=2049, want=122, limit=16
23:16:27 executing program 5 (fault-call:5 fault-nth:4):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x6000000}, 0x0)

23:16:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000005f)

[  224.311234][T31282] Buffer I/O error on dev loop3, logical block 121, lost async page write
[  224.320513][T31282] attempt to access beyond end of device
[  224.320513][T31282] loop3: rw=2049, want=123, limit=16
[  224.331316][T31282] Buffer I/O error on dev loop3, logical block 122, lost async page write
[  224.339957][T31282] attempt to access beyond end of device
[  224.339957][T31282] loop3: rw=2049, want=124, limit=16
[  224.350757][T31282] Buffer I/O error on dev loop3, logical block 123, lost async page write
23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x7000000}, 0x0)

[  224.461179][T31308] loop5: detected capacity change from 0 to 16
[  224.478376][T31313] loop3: detected capacity change from 0 to 16
23:16:27 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fa00)
truncate(0x0, 0xff6)

[  224.518375][T31308] FAULT_INJECTION: forcing a failure.
[  224.518375][T31308] name failslab, interval 1, probability 0, space 0, times 0
[  224.531031][T31308] CPU: 1 PID: 31308 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0
[  224.539798][T31308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  224.549848][T31308] Call Trace:
[  224.553134][T31308]  dump_stack+0x137/0x19d
[  224.557506][T31308]  should_fail+0x23c/0x250
[  224.561989][T31308]  ? fat_cache_add+0x219/0x570
23:16:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9000000}, 0x0)

[  224.566861][T31308]  __should_failslab+0x81/0x90
[  224.571660][T31308]  should_failslab+0x5/0x20
[  224.576163][T31308]  kmem_cache_alloc+0x46/0x2f0
[  224.580938][T31308]  fat_cache_add+0x219/0x570
[  224.585598][T31308]  fat_get_cluster+0x58e/0x870
[  224.590431][T31308]  fat_truncate_blocks+0x277/0x550
[  224.595549][T31308]  ? unmap_mapping_range+0x46/0x50
[  224.600666][T31308]  fat_setattr+0x6ae/0x7d0
[  224.605136][T31308]  ? fat_getattr+0xf0/0xf0
[  224.609588][T31308]  notify_change+0x8a3/0xa80
[  224.614193][T31308]  vfs_truncate+0x2ff/0x470
[  224.618800][T31308]  __x64_sys_truncate+0xa0/0x120
[  224.623745][T31308]  do_syscall_64+0x4a/0x90
[  224.628168][T31308]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  224.634065][T31308] RIP: 0033:0x4665d9
[  224.638036][T31308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  224.657638][T31308] RSP: 002b:00007fdc98550188 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
23:16:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000060)

23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9effffff}, 0x0)

[  224.666040][T31308] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9
[  224.674000][T31308] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000020003800
[  224.682092][T31308] RBP: 00007fdc985501d0 R08: 0000000000000000 R09: 0000000000000000
[  224.690092][T31308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  224.698109][T31308] R13: 00007fff3aa2504f R14: 00007fdc98550300 R15: 0000000000022000
23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xefffffff}, 0x0)

23:16:28 executing program 5 (fault-call:5 fault-nth:5):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

[  224.799877][T31344] loop3: detected capacity change from 0 to 16
23:16:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fb00)
truncate(0x0, 0xff6)

23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff}, 0x0)

23:16:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000061)

[  224.928467][T31368] loop5: detected capacity change from 0 to 16
[  224.983081][T31368] FAULT_INJECTION: forcing a failure.
[  224.983081][T31368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  224.996261][T31368] CPU: 1 PID: 31368 Comm: syz-executor.5 Not tainted 5.13.0-rc4-syzkaller #0
[  225.005030][T31368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  225.015091][T31368] Call Trace:
[  225.018373][T31368]  dump_stack+0x137/0x19d
[  225.022712][T31368]  should_fail+0x23c/0x250
[  225.027131][T31368]  should_fail_usercopy+0x16/0x20
[  225.032182][T31368]  _copy_to_user+0x1c/0x90
[  225.036604][T31368]  simple_read_from_buffer+0xab/0x120
[  225.041998][T31368]  proc_fail_nth_read+0xf6/0x140
[  225.046942][T31368]  ? rw_verify_area+0x136/0x250
[  225.051894][T31368]  ? proc_fault_inject_write+0x200/0x200
[  225.057603][T31368]  vfs_read+0x154/0x5d0
[  225.061869][T31368]  ? mnt_drop_write+0x58/0xa0
[  225.066550][T31368]  ? __fget_light+0x21b/0x260
[  225.071299][T31368]  ? __cond_resched+0x11/0x40
[  225.075975][T31368]  ksys_read+0xce/0x180
[  225.080126][T31368]  __x64_sys_read+0x3e/0x50
[  225.084626][T31368]  do_syscall_64+0x4a/0x90
[  225.089047][T31368]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  225.095003][T31368] RIP: 0033:0x41935c
[  225.098895][T31368] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  225.118595][T31368] RSP: 002b:00007fdc98550170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  225.127014][T31368] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c
[  225.134984][T31368] RDX: 000000000000000f RSI: 00007fdc985501e0 RDI: 0000000000000006
[  225.142958][T31368] RBP: 00007fdc985501d0 R08: 0000000000000000 R09: 0000000000000000
[  225.143202][T31377] loop3: detected capacity change from 0 to 16
[  225.150931][T31368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  225.150946][T31368] R13: 00007fff3aa2504f R14: 00007fdc98550300 R15: 0000000000022000
23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf5050000}, 0x0)

23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff7f}, 0x0)

23:16:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fc00)
truncate(0x0, 0xff6)

[  225.276418][T31377] loop3: detected capacity change from 0 to 16
23:16:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x201)

23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff9e}, 0x0)

23:16:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000062)

[  225.413190][T31423] loop5: detected capacity change from 0 to 16
[  225.434368][T31427] loop3: detected capacity change from 0 to 16
23:16:28 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fd00)
truncate(0x0, 0xff6)

23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffffef}, 0x0)

23:16:28 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000063)

23:16:28 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x202)

23:16:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xfffffff0}, 0x0)

23:16:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000fe00)
truncate(0x0, 0xff6)

[  225.608847][T31450] loop5: detected capacity change from 0 to 16
[  225.612324][T31455] loop3: detected capacity change from 0 to 16
23:16:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000064)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x3000000000000}, 0x0)

23:16:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x203)

23:16:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000001840aa0180610000000000000000000000000000000000000000006fd2a207e55e463da90ec2cf3641a5ce23f70627f001a9635460cdbb02f90b30803f6ec81d2299ae6ec7e192026ff20c7a2e7aa2035b850394dfa29c2108479bda0f45717e8ca4a413e515733ae43ac7d7a8ec814bba9d0676114328082701506506169df96516d9c9dd98e76fabf428034a247525667d8e5e03b029331e89232f811f2b6bb41d1fa9316af76446e8394ab246febdaa0100f1849a58"], 0x2c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x90, r3, 0x40c, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8008}, 0x1)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x40030000000000}, 0x0)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x100000000000000}, 0x0)

23:16:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000065)

[  225.768392][T31489] loop3: detected capacity change from 0 to 16
[  225.774889][T31488] loop5: detected capacity change from 0 to 16
23:16:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x204)

23:16:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000ff00)
truncate(0x0, 0xff6)

23:16:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c080}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
syz_genetlink_get_family_id$smc(&(0x7f0000000200), r3)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x200000000000000}, 0x0)

[  225.929771][T31519] loop3: detected capacity change from 0 to 16
23:16:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000066)

23:16:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xffff, @loopback, 0x80000001}}}, 0x80)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x300000000000000}, 0x0)

[  225.970851][T31526] loop5: detected capacity change from 0 to 16
23:16:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x206)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x400000000000000}, 0x0)

23:16:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x500000000000000}, 0x0)

23:16:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x8000ff7f)
truncate(0x0, 0xff6)

[  226.105851][T31551] loop3: detected capacity change from 0 to 16
23:16:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000067)

23:16:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRES16=r1, @ANYBLOB="01000000fbfffaffffff1b00000018dd00a0147461647630000000000000000000"], 0x2c}}, 0x0)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x600000000000000}, 0x0)

[  226.203010][T31573] loop5: detected capacity change from 0 to 16
23:16:29 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c00000018746164763010000000000600000000000000918c77d3a7c83bae74e9a0b86ced1bbe88a1d3b84942bbfb08f3f8efebba4578adf5d7de65a86762cd3778f5b8d195255f9426450435cf553e45c6e47ef242d87d78272a683b75f4e7e5f2c7b4018214b9cf5e38997adefe36a8edee6a3c7f17af590b660478fb78695739371e6154bbdaebbd93c23c1eff9500000000"], 0x2c}}, 0x0)

23:16:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x207)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x700000000000000}, 0x0)

23:16:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0xffffffffffffffff)
truncate(0x0, 0xff6)

[  226.318566][T31596] loop3: detected capacity change from 0 to 16
[  226.325873][T31600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
23:16:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000068)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x900000000000000}, 0x0)

[  226.405583][T31615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  226.453619][T31619] loop5: detected capacity change from 0 to 16
23:16:29 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x208)

23:16:29 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r1, &(0x7f0000000000)=""/25, 0x19)
openat(r1, &(0x7f00000000c0)='./bus\x00', 0x141000, 0x100)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r3, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:16:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x8000000000000000}, 0x0)

[  226.518706][T31628] loop3: detected capacity change from 0 to 16
23:16:29 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000069)

23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x9effffff00000000}, 0x0)

23:16:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x210)

[  226.611739][T31643] loop5: detected capacity change from 0 to 16
23:16:30 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004db80)={<r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002640)={0x0, [{r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x0, "8bebeb894f74c3"})
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f000004db80)={<r5=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0x0, "8bebeb894f74c3"})
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5, 0x800, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, <r8=>0x0, <r9=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000000400)={{}, r9, 0x14, @inherit={0x88, &(0x7f0000001580)=ANY=[@ANYRES16=r10]}, @devid})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000002240)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r11=>0x0}})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ')
sendmsg$NLBL_CIPSOV4_C_REMOVE(r12, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYRESOCT, @ANYRES32=r8, @ANYRES32, @ANYRES64, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053500)={0xb426, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {r5}, {0x0, r8}], 0xd1, "d728f60a8695ba"})

23:16:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)
r3 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000180)='./bus\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="f6c1de3d4cb450c4d89c187acbb91c57f6b8a62609c9325589dc243515af47d92add8a6e26b6d60552c61d8b63d4c4cc706db3ebf7b08d1df3a0e628d42d84f3fc2b68461f616f0003b1eca143e422747a11bb54aad0b8af080b28c26679e5f9f1bfa5cc2d6a799a45b12b9cdef0e863426bd2cb5e1353232360fd4b6d0e0e15c94e38e84e6043b479e8e7c4124a63ac5ed652632bb7662ea18cd1bb5577a0d232f51ef1ed3962e6341435f03340fe3150047f7948fb9e354fff5d3c41c8d681b1ab7bc4f49bcf607c38d13d92459c2b5a0177a20eaf4788b54cee831a1a37981930532a247f8f52bacc5a3583a4", 0xee, 0x5}, {&(0x7f0000000240)="3cee3b43709ccb048b1a91331d6480eeb880ae5aed29110ff66fd6b241f801ad0c420932abe211867f5217ea44e736c5bd5e79e15b1138dc14e2fe8257a7c07b46f804fffb31169cca01708cfd879b646cf4f8ce9ca7fd771cdfcb218e3f7d5664ca4c23", 0x64, 0xc60d}, {&(0x7f0000000400)="4226e78b71d78e5ebf3ea973630ba7415b6718eadceddfe0a5a4b454b98739e8b8d994dbedef1ade5cdb9a0c09134b4ff30a902959fc4f63ad624df34ec074e6259877fc3b679cc41387b2e5011df7c3c3d16190caa9863599cc1839cd3e91acb92cfa3e7b8f554f7276c6069061710fcd4973a9c809fa4934193ebdbe57422f82f4", 0x82, 0x8}], 0x9, &(0x7f00000005c0)={[{@nocompress}], [{@obj_user={'obj_user', 0x3d, '\x00\x00\x00\x00\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_role={'subj_role', 0x3d, '\x00\x00\x00\x00\x00\x00\x00\x00\xc2\xe6b\x10_\xa3\v\xd6\x8c\x00\xcc\x8b2\xa6)\xa3\xe8<W\x98\xa1\xe3\x16\x84\xc6f\xd8qKt\x96\f\xa3\r\x06\x17\xd4P\xeey\xcd\xf71l'}}]})
openat(r3, &(0x7f00000001c0)='./file0\x00', 0x218000, 0x95)
chdir(&(0x7f0000000540)='./bus\x00')

[  226.706067][T31657] loop3: detected capacity change from 0 to 16
23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xefffffff00000000}, 0x0)

[  226.767463][T31669] loop5: detected capacity change from 0 to 16
23:16:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000006a)

23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

23:16:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x277)

23:16:30 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x160ec2, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
semget$private(0x0, 0x1, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

[  226.894019][T31693] loop3: detected capacity change from 0 to 16
23:16:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000006b)

23:16:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180))
sendfile(r0, r2, 0x0, 0x80000001)
truncate(0x0, 0xff6)

23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xf505000000000000}, 0x0)

23:16:30 executing program 0:
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4040001)
r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r3, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r3, &(0x7f0000000000)=""/25, 0x19)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000012c0)={0x10c, @tick=0x9, 0x38, {0x1f, 0x80}, 0x81, 0x2, 0x3})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000240)={{r1}, 0x0, 0x4, @unused=[0x2, 0x2, 0xfffffffffffff061, 0x2], @name="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"})
read$ptp(r2, &(0x7f0000000140)=""/235, 0xeb)
creat(&(0x7f0000000000)='./bus/file0\x00', 0x119)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x278)

[  226.990102][T31707] loop5: detected capacity change from 0 to 16
23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

[  227.089357][T31724] loop3: detected capacity change from 0 to 16
23:16:30 executing program 1:
uname(&(0x7f00000000c0)=""/183)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf251c00192c180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r4, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r4, &(0x7f0000000000)=""/25, 0x19)
r5 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffff7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r4, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendfile(0xffffffffffffffff, r6, 0x0, 0x4000000000edbc)
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c060000f0d9c6e04a030000009220fcdca03ef407922b456a3f1bb33abb826b2e88e23e6ccb02f59516", @ANYRESDEC, @ANYBLOB="10002dbd700001dcdf254900000008000300", @ANYRES32=r7, @ANYRESDEC=r5], 0x1c}}, 0x4000840)
r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r8, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r8, &(0x7f0000000000)=""/25, 0x19)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2b}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x894}, 0x20000004)

23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0xffffffff00000000}, 0x0)

23:16:30 executing program 0:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)

23:16:30 executing program 4:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0\x00', 0x16082, 0x0)
mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x10a)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000002dc0)=""/4096, 0x1000)
read(0xffffffffffffffff, &(0x7f0000000000)=""/25, 0x19)
r3 = socket(0x1, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r4)
fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', r4, 0xffffffffffffffff, 0x800)
sendfile(r0, r2, 0x0, 0x80000001)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=<r5=>0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x9, 0x5, 0x20, 0x6, 0x0, 0xaf3, 0x800, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x953, 0x5, @perf_bp={&(0x7f0000000280), 0x5}, 0x14482, 0x9, 0xfffffffb, 0x70f9fa5066db4ee, 0x321a, 0x6, 0x59, 0x0, 0x1, 0x0, 0x486884f7}, r5, 0x7, r2, 0xa)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x81)
setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22, 0x0)
truncate(0x0, 0xff6)

23:16:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000006c)

23:16:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x2fe)

[  227.150307][T31734] loop5: detected capacity change from 0 to 16
23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}}, 0x0)

23:16:30 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8800, 0xe7)
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000180)=""/151, 0x97}], 0x2, 0x3ff, 0x20)
mount$bind(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x40000, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000300)={0x0, 0x800})

23:16:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r1, 0x20, 0xfffffffd, 0x0, {0x1c}}, 0x14}}, 0x0)

23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)

23:16:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

[  227.304412][T31766] loop3: detected capacity change from 0 to 16
[  227.310661][T31767] loop5: detected capacity change from 0 to 16
23:16:30 executing program 0:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0xd6b, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read(r2, &(0x7f0000002dc0)=""/4096, 0x1000)
read(r2, &(0x7f0000000000)=""/25, 0x19)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
splice(r2, &(0x7f0000000080)=0x5, r3, &(0x7f0000000340)=0x7fffffff, 0xfffffffffffffff7, 0x0)

23:16:30 executing program 5:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x80000001)
truncate(&(0x7f0000003800)='./bus\x00', 0x600)

23:16:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000006d)

[  227.371544][   T25] audit: type=1400 audit(1622934990.686:20): avc:  denied  { relabelto } for  pid=31754 comm="syz-executor.4" name="bus" dev="sda1" ino=14681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=file permissive=1
23:16:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c005eea", @ANYRES16=r1, @ANYBLOB="010000000000000000001c000000180001801400020062617461647630000000000000000000"], 0x2c}}, 0x0)

[  227.405036][   T25] audit: type=1400 audit(1622934990.716:21): avc:  denied  { write } for  pid=31754 comm="syz-executor.4" path="/root/syzkaller-testdir929669278/syzkaller.Ubna4T/535/bus" dev="sda1" ino=14681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=file permissive=1
[  227.449363][   T25] audit: type=1400 audit(1622934990.756:22): avc:  denied  { read } for  pid=31754 comm="syz-executor.4" name="bus" dev="sda1" ino=14681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=file permissive=1
[  227.482940][   T25] audit: type=1400 audit(1622934990.756:23): avc:  denied  { open } for  pid=31754 comm="syz-executor.4" path="/root/syzkaller-testdir929669278/syzkaller.Ubna4T/535/bus" dev="sda1" ino=14681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=file permissive=1
[  227.521011][   T25] audit: type=1400 audit(1622934990.816:24): avc:  denied  { ioctl } for  pid=31754 comm="syz-executor.4" path="/root/syzkaller-testdir929669278/syzkaller.Ubna4T/535/bus" dev="sda1" ino=14681 ioctlcmd=0x700e scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=file permissive=1
[  227.563056][T31818] loop3: detected capacity change from 0 to 16
23:16:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x0)

23:16:30 executing program 0 (fault-call:9 fault-nth:0):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0)
preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r0, r2, 0x0, 0x80000001)
truncate(&(0x7f00000001c0)='./bus\x00', 0xff6)

23:16:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x8001)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r5=>0x0, @ANYBLOB="8000800000000000000007ff4b2600ac0068000003299078ac1414aae0000002890bf60a010102ac1414aa83072aac1414bb864a00000000070adc5cf216a520e9a7010333000b7a9462b5dc19640773070e0d0f6bfb8d1e0916947d1d6e050ca406f27a548f60d5666a060362010f36a10f9175f829daf90e31eefb830bb9e00000020a01010144247f71ac14141800010000e000000100001000ffff2392205d1fc95e1a000000000003440c5031ac14141a0000001c00"]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, r13, 0x1, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14