apacity change from 0 to 16
[ 3091.709698][T10376] loop5: detected capacity change from 0 to 264192
[ 3091.729368][T10490] loop4: detected capacity change from 0 to 16
[ 3091.747610][T10376] nfs4: Unknown parameter '.}-)'
15:40:58 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000020000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:40:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x70000000, 0xa198)

[ 3091.753244][T10376] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:40:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1200, 0xa198)

[ 3091.792671][T10494] loop2: detected capacity change from 0 to 16
[ 3091.823194][T10497] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:40:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x3f00}, 0x0)

[ 3091.845870][T10376] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3091.859788][T10501] loop1: detected capacity change from 0 to 16
15:40:58 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000030000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:40:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x78000000, 0xa198)

[ 3091.917536][T10507] loop4: detected capacity change from 0 to 16
[ 3091.926453][T10497] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3091.953616][T10508] loop5: detected capacity change from 0 to 16
[ 3091.961348][T10376] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:40:58 executing program 5:
socket$l2tp(0x2, 0x2, 0x73)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:40:58 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000040000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:40:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1800, 0xa198)

[ 3092.025381][T10508] loop5: detected capacity change from 0 to 264192
[ 3092.039532][T10513] loop1: detected capacity change from 0 to 16
[ 3092.041355][T10508] nfs4: Unknown parameter '.}-)'
[ 3092.056865][T10497] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:40:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7f510100, 0xa198)

[ 3092.114455][T10520] loop4: detected capacity change from 0 to 16
15:40:58 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3092.173181][T10503] __nla_validate_parse: 87 callbacks suppressed
[ 3092.173196][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3092.181133][T10523] loop5: detected capacity change from 0 to 16
[ 3092.214300][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3092.216671][T10525] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3092.233550][T10527] loop1: detected capacity change from 0 to 16
[ 3092.390492][T10494] syz-executor.2: attempt to access beyond end of device
[ 3092.390492][T10494] loop2: rw=2049, want=17, limit=16
15:40:58 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c8f000000732e666174000201e0000240008080f801", 0x17, 0x4}, {0x0, 0x0, 0x401000}], 0x100a034, &(0x7f0000000180)=ANY=[])
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000000400)=""/101, 0x65}], 0x3, &(0x7f0000000580)=""/103, 0x67}, 0x60)
chdir(&(0x7f0000000040)='./file0\x00')
setxattr$security_ima(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), &(0x7f0000000d00)=@ng={0x4, 0xd, "ba002befb74816a46082e4082bf268a7efbfc1a8"}, 0x16, 0x2)
r1 = signalfd4(r0, &(0x7f00000008c0)={[0x100000000]}, 0x8, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000c00)={0x0, 0x0, 0xd7, 0x41, @buffer={0x0, 0xdd, &(0x7f0000000900)=""/221}, &(0x7f0000000a00)="27464ccbb60d895200632658ada5456c346996c7d91bd595ecb5874e0a0dd20e0c68fb12c5d0991d8ad850b180b4713e7614fd27844607307cbb3ad35331418b05d2c6b11d6b7ed8a9774546ae00de0aa0339a71e3f97640e14feadd92a30149d73d212b52f17c860941ae5ac15d0be70d85e2ebdc360dfb5a1e7b2c5a40af98fa23593f108064eed7becee48ac7d5f7fb19ed09985cc0beeede75dbeb162a4311c34a6cd9c1e21703b16e2af2d167bba7ffda3cac1c5d077de31ff3cfc7184e03bea52987c0a9931273d35217262f9b548468a35fa586", &(0x7f0000000b00)=""/161, 0x4, 0x0, 0x2, &(0x7f0000000bc0)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
io_uring_enter(r2, 0x1721, 0x26a1, 0x0, &(0x7f0000000d40)={[0x8]}, 0x8)
sendfile(r0, r0, 0x0, 0x8591)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1a8, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0xb4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}]}]}, @CTA_EXPECT_NAT={0x54, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000080))
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

15:40:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2000, 0xa198)

15:40:58 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000060000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:40:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x80010000, 0xa198)

15:40:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

[ 3092.475064][T10633] loop1: detected capacity change from 0 to 16
[ 3092.487239][T10637] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3092.501631][T10636] loop4: detected capacity change from 0 to 16
[ 3092.503475][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:40:58 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x88000000, 0xa198)

15:40:58 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2500, 0xa198)

[ 3092.587260][T10642] loop2: detected capacity change from 0 to 16400
[ 3092.607835][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3092.634887][T10523] syz-executor.5: attempt to access beyond end of device
[ 3092.634887][T10523] loop5: rw=2049, want=17, limit=16
[ 3092.636232][T10645] loop4: detected capacity change from 0 to 16
[ 3092.655370][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3092.656112][T10646] loop1: detected capacity change from 0 to 16
[ 3092.665503][T10642] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 3092.729033][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:40:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2800, 0xa198)

15:40:59 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:40:59 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0, {0x400}}, './file0\x00'})
sendto$unix(r1, &(0x7f0000000500)="def55d842012e44cfb1d178ea6289b66f9794f71fe7b55f2a08480b9f19dcc0464fbafe5d66e4e5352db370ae464e241417aa34976ebdb6d0f530882293791d59e8f346426658ecdeae17b8c96a0321129d33c6d0bd4f68acff14e3eb255ab051bba4328ebe4e86fa2061865169b3c238c198802589c98f353636a12eebf22c52706d4f45d703556237cde388ffe19e34ce2392d2c8379b6e5c7971bf1dca8973157235512d35d90e44aa07abd27477baa8341e8baafda2b379aeb70a8ce07a5d9e54abb789f0ec807408ba88f", 0xcd, 0x4000000, &(0x7f0000000240)=@file={0x801063dd531350d7, './file0\x00'}, 0x6e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

15:40:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x90000000, 0xa198)

15:40:59 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
dup3(r1, r0, 0x80000)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

[ 3092.779636][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3092.798940][T10755] loop2: detected capacity change from 0 to 16
[ 3092.802378][T10754] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3092.830680][T10759] loop1: detected capacity change from 0 to 16
[ 3092.832055][T10758] loop4: detected capacity change from 0 to 16
[ 3092.839998][T10755] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
15:40:59 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:40:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3000, 0xa198)

15:40:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x98000000, 0xa198)

15:40:59 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x41ad}, 0x0)

[ 3092.873845][T10763] loop5: detected capacity change from 0 to 16
15:40:59 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0x13af417841871a56, &(0x7f0000000140)={0x40002d, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x20)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x7d, 0x3f, @buffer={0x0, 0xd7, &(0x7f0000000300)=""/215}, &(0x7f0000000080)="dc699298c82ebedbd0009ca8f822ab8f4fb8f9a329678136d2fc6342ff83a34f035945064ba5d8d822970a570f817698e5847e4881fef1af8dcd17d3fd4d36433c2559791b4c703de83547c957882e48e44c14c1812c9985799beeebf9b296b5eb1b4965ecb3896b3aaed87218c03ac11b043c3cf0ca80e92bd22b1ec8", &(0x7f0000000180)=""/13, 0x0, 0x10012, 0x2, &(0x7f0000000240)})
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3092.967229][T10851] loop4: detected capacity change from 0 to 16
[ 3092.989197][T10874] loop1: detected capacity change from 0 to 16
15:40:59 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000090000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:40:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa0000000, 0xa198)

15:40:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3800, 0xa198)

[ 3093.113782][T10884] loop1: detected capacity change from 0 to 16
[ 3093.120272][T10882] loop2: detected capacity change from 0 to 16
15:40:59 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000a0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3093.177209][T10888] loop4: detected capacity change from 0 to 16
15:40:59 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x802, 0x0)
fallocate(r0, 0x12, 0x9, 0x9ed)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:40:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa8000000, 0xa198)

15:40:59 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4788}, 0x0)

15:40:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3f00, 0xa198)

15:40:59 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000b0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3093.373358][T10763] syz-executor.5: attempt to access beyond end of device
[ 3093.373358][T10763] loop5: rw=2049, want=17, limit=16
[ 3093.396915][T10882] syz-executor.2: attempt to access beyond end of device
[ 3093.396915][T10882] loop2: rw=2049, want=17, limit=16
[ 3093.409322][T10882] Buffer I/O error on dev loop2, logical block 16, lost async page write
[ 3093.429350][T10900] loop4: detected capacity change from 0 to 16
[ 3093.431148][T10901] loop1: detected capacity change from 0 to 16
15:40:59 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb0000000, 0xa198)

15:40:59 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000c0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3093.490188][T10906] loop5: detected capacity change from 0 to 16
15:40:59 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file0\x00', 0x200, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0xfffffffffffffffd}, {0x0, 0x0, 0x1000}], 0x86b0a8, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
fcntl$notify(r2, 0x402, 0x9)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:40:59 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x4000, 0xa198)

[ 3093.546635][T11011] loop1: detected capacity change from 0 to 16
15:40:59 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000d0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3093.598989][T11014] loop4: detected capacity change from 0 to 16
[ 3093.632566][T11018] loop2: detected capacity change from 0 to 16383
15:41:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb7e2e302, 0xa198)

15:41:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x4800, 0xa198)

[ 3093.709346][T11018] loop2: detected capacity change from 0 to 16383
[ 3093.752788][T11059] loop1: detected capacity change from 0 to 16
[ 3093.766904][T11077] loop4: detected capacity change from 0 to 16
15:41:00 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x2, 0x82080)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=<r2=>0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4f418, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@afid={'afid', 0x3d, 0x7f}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@measure}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '/{.+{&.,%$&'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r3 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r3, r3, &(0x7f00000001c0), 0xa198)

15:41:00 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000e0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:00 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

15:41:00 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x15)
creat(&(0x7f00000000c0)='./file0\x00', 0x100)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x30)
getrlimit(0xb, 0xfffffffffffffffc)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5000, 0xa198)

15:41:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb8000000, 0xa198)

[ 3093.933745][T10906] syz-executor.5: attempt to access beyond end of device
[ 3093.933745][T10906] loop5: rw=2049, want=17, limit=16
[ 3093.984629][T11133] loop2: detected capacity change from 0 to 16
[ 3093.989153][T11137] loop4: detected capacity change from 0 to 16
[ 3093.993616][T11138] loop1: detected capacity change from 0 to 16
15:41:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb80f1504, 0xa198)

15:41:00 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000f0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5800, 0xa198)

15:41:00 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000110000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3094.054632][T11169] loop5: detected capacity change from 0 to 16
15:41:00 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x1)
dup3(r0, r0, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

[ 3094.135935][T11250] loop1: detected capacity change from 0 to 16
[ 3094.136921][T11251] loop4: detected capacity change from 0 to 16
15:41:00 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000120000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3094.207286][T11258] loop2: detected capacity change from 0 to 16
15:41:00 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x6000, 0xa198)

15:41:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb83c4605, 0xa198)

15:41:00 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000140000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3094.533525][T11169] syz-executor.5: attempt to access beyond end of device
[ 3094.533525][T11169] loop5: rw=2049, want=17, limit=16
15:41:00 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4888}, 0x0)

[ 3094.586741][T11265] loop1: detected capacity change from 0 to 16
[ 3094.615840][T11271] loop4: detected capacity change from 0 to 16
15:41:00 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000160000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:00 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc0000000, 0xa198)

15:41:01 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$chown(0x4, r5, r3, r4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
r9 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$chown(0x4, r9, r7, r8)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f00000016c0)='xen_mc_callback\x00', r1}, 0x10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000015100000000000000000000000a200000000028919f26b20ff288d93c5ff195f5970a05000000bc02dce900000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572"], 0xb0}}, 0x0)
r12 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001740)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000188b1000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="5665dde3183c327284c679248cddf4d3bc83a734de30796f29add88d0184285ef476fa", 0x23}, {&(0x7f0000000300)="784dcae54e1b529023404fc27ce43335d0df7c9debbc02bd0c7af3d06e9185c04ed75e2a68a2dc86ab1d5638ea4738acfa6f6c851928fb97db7138f673238ef2785a3723756cc1a9ca4770fb7c6dd0c2cd9065e13942114f1c784ca4547580266ed419915701461eb2fde1b7c3e235f0199a325d6a067bcbe200b845287acd899c03e9f90a5fd44ceae42f0f827015422559d67d343ef3b3217e32d74f2af19d12b7e4ff867ed88d91aa47011bd2ff5b2f9bda101212940abd5b41e07535cfd75d11a4cc67c8b9294f09cd5c4c268ddc2d7517", 0xd3}], 0x2, &(0x7f0000000240), 0x0, 0x4000040}}, {{&(0x7f0000000400)=@file={0x26170bbc2ab71646, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000280)}, {&(0x7f0000000480)="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", 0x1000}], 0x2, &(0x7f0000001500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000004f9035e183e5a92678ab9bc3a968f24d262f4e015783d6f9058b82570421faba6536000000fd201b7abc6839000000001ba395477ab4ee68e92ad804558cd069a44e7f5ffbff4b98ca83b4f229e570"], 0xe0, 0x2000c004}}], 0x2, 0x800)
write$binfmt_elf64(r1, &(0x7f00000014c0)=ANY=[@ANYRES64, @ANYRES16=r0], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x6800, 0xa198)

[ 3094.651255][T11258] syz-executor.2: attempt to access beyond end of device
[ 3094.651255][T11258] loop2: rw=2049, want=17, limit=16
15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000180000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3094.707478][T11279] loop5: detected capacity change from 0 to 16
[ 3094.741783][T11283] loop1: detected capacity change from 0 to 16
15:41:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc3ffffff, 0xa198)

[ 3094.781661][T11334] loop4: detected capacity change from 0 to 16
15:41:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000000240)='./file1\x00', 0x220000, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
open(&(0x7f0000000300)='./file1\x00', 0x10001, 0x1)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x2, 0x9, 0x5})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
inotify_rm_watch(r0, r1)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='dctcp-reno\x00', 0xb)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200000, 0x1)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
write$UHID_INPUT2(r2, &(0x7f0000000580)={0xc, {0x1000, "5ff904d0f99ed49e24e4fa7fcb8db66670712fb6c688fb340231ab81f5abbee96fa84039c39218c0165e14d28d64b0b0e78d9a007888324d0771c41090905f1b82942b5b395ac1b3a2920d62cb9826b0e92b8cdd3d4e0cddb74dbbd560d91d3acb7a3c6204c05d1887603018982b7b0bdb6ed9b8cd496002e807742966dc81a3be5056ae6a708c29e018953055a9292d2c01ea88fafaa991394d72207e08007fa95517c30da9b6cbd9661af00b30cfd2f1d02502d0c85ec511a8f057e039fa4b58b23266d6465f9f69ac9adae356a797a4f72382bc197b614b302a4bb8d5c209d352e9bf88fc1faa802d0bf22e19058ef48ba997cfc19c4b74e6d5ec928a0659d36c3bcc8addc320f61108fc9cf363486e5622b9753a833b68e7451fbe4e91d0ec725a09c90a2174d582cccd77e8ab857f076041ea9bbf6bf325a2f6fdaca346a48aeb1d576977ccf70b62a97bd410f85ee881d70a8b918ea407b539af06ae1cfba6c3e4b922a5236fe015b6442314d429d98a95ee0e47b440a078c07affe96e9d9bb47e2f9e68a04dec44d1e5abc7520ad6a1ca93eeaedcfce300c1d14a39827b4fda28fe7b7f9c4300139520c53eb12bb485b0ab95d2c3eb028d20779c02e9e274ca283f73f6839ccf44a465f734e468ebe9404e64cac6d7f290cba094593a3d63d6428804076b9371daef761afe8b4b1d6fa947a3c9ee9b91d072fff0b14415c0860d5c085b9542a7f6fa5316d4489d6d071ebc0eccf2002819f14c126d57afc7e02e3ed5e56e859d51154c1b1c3ff4faa9f0f0f4e6a6073e403ae1bfaabb5fabed97b0f0c1af063820b40ed92967f5c389c056b184c96098a6cbac303270f262b97b75df2ab6739e8681c6666d1e8e2a5c8a6cb556a7551b610b61030d837c69124d2706ce5d13557305252bb0d1fc389b2d0662eb701112fdd56144c64ae63532da2554a2506e0a45cc5af8fb23ad082c18760b5936eafed5746e3e000a2c67178a7108ae59241b1b254cf3a7de57bb2d98729f76de8b10f8aa81e69bf234bf9954b1da8eaade6c23e574c9c2853b28ecd13d329640b8059259f7779aa8e062e17d53fd6ea354b582dba2cec2a2153bc356d6bace6d3e32ffd6334d612dfad0d4de651bae359e9b02fc47f4a9124ed34a9c47ba36309fafe909ea0e24ef91deba31ed109e67d412306f53e64e9e470942bc584d3b3695dc25b33e1433fdd3318f149d19d17adb689542bf1078a1c7141b2eb5f81b929db8be44cf58365991e83425948e292b2922e8d8f40d898d8bddabfce8e771c283b64c70b2c871545be755f3977d2ee27c74bc78aa723d2532680c3d66b7e247582443f5d20815f6c971ece63a1b2fc816ffb4199883132ae4b6fd0598b8bdeffa9cdc9525356145790c395d36db40c4cbd0e1de554938a5c9d5892c435fb78a8ddf2ef530ae4c3dd51651ea4dbccfd941cc9ab31e3629c55c66138c1225c059a5e1d6f977a5b7a517df6402cacd3e6a3c83d764ce6731ca19e41122422fe285282e67a291a02ee7762515d3a14e26c9a27a9f5f24e999700d018701d4b7fe3af9a484305f042b645ecd169fc5b4e37dde8cd678c9135dd06adb4f4b236a0cd2a3f459e2552d672868a7425a039b67a02fefcd0a60ec972b543ad9251a7b3530696a5cca989ec8e83878755beda99678fba36a5a49dc306718e4a7aca41b478e7b223f68a8dde32f87ebe3811c906d55e6dea50a5c4027a32126fc599c91c384e4770b161da5079093f603250c6615d0446da201c0d6075d7d153940bf214b52d6c8a543231c931fdafbb0af80e5b02694d3ab88ee2bd2fa45022fc7f5a6f2b9d8164109f21f41552d74f08495c07fe475c10722ec1f830f604577d6a140abc97a352d594b695a6689b339c2fcd0dac1f14c14db6b53266a0f62f65206388fdfcf35d397d7be917ad3ee7edafe435a52f07b7f27ff22a740a02224ed5a932121b0dd620ac62b4157a03fb9b467d19faa6da5f1a1d6ff3fb5fbb34489153acc075018f8b81984db29090e6cc635b9e209439ad9afb1e73d10f17b35cda929e02c542057a86f7cd90498a7f945c5769622f61065ff79217eaa44a31a987a37230b0ea4237563929ab88c554c90e7c6bceda6cc50ff23a633936d3ff3eb0d7e29988690de54ca312b6245d308d0beed04c7c6924150b66142c687e7381766632c084ad8c97e9003229b6b31e86ae3256f09b98d30d98d0549250b2a79893c52af798151562c584e65fd1b99a2aeb1e20477995c1383a3830f233c13df7c22b45b67a02041448ab790fb81604c430fd512d0ac69e9f2ce0084eee1e67b9000bf9dff34c675f7cdb7c7bf1f0424eeba98fd5da588423171f8f65a3cb161fbe44956c8d9d447824205e7b6db1187e6d73c046e81f0781da2b3f5e92a910f417d34f3dcadc8ca39b4dc4b9cde081bfb828ca7beb82b9821bccc4d44dfe7f31cafd248391750f3bb2ce049e75286fe1d33e1d852fadcae8361fabeeef3657a670c1cf726570396e89dec8e6c0ce29be095a4f6243cf0eb2830fa984347ec7fadec057c7fea06fbea2e9991cab26b6955a8d4b912e7f0e225beb8a743c2688b84fba6a95380c4a44d7f9495dd1c0f5086f05122f4e72452170260ace21255da61d0fd34da403fa036a037a3e91fedc36061d2daf03b4ca82f705cb1d6fdb12842ea018eeae6ee73db110f56b162d26a10517fa412c13be9621651c6270497dac62e66627892d2e28d9bcb5e7f0d75735eccbe0a4814eeb0b3d66870f618d1648d1f661bd3a4548750dc342ec8d8a86c0e84d786e3572df0ca5b5c1cecbe02f5758fa3ae579b1b355f4cfd24ed83989c5aed4f7cb6de09f1c9ba6c96449b970f1357ffe8296bf395c7083d23c8fd5f2cb020ef263ac031b347d0dafc80e842b0440a75d04b4493995ba40aff31ea40314524822872904f06750bac44d56dcd03e38dcbdfc8b60b6645b7597033980ef9724bb8945020d1c3c7f4b328031d10fa5d0419eaa985c5791c492dc2f1b61b26984ed4c4fb6d81905697e2fe2bd0570529c48ddb25c804cb393392f81d08e61b0c67590a477817c800e05b3562dcdc5ba66201f82563176742b07b4ee2c1a6458ca833ddfcd5a6568510aaef9b93edf196122825ab6856323a6a6664f157651573633137c83d8d46555160230fae53396ccd22d7bba9cc24bd81221b3cf0e2f1b00e8c0153e0dd4ca7574258609fe59480a44417568a258b34cea1227155227de74f5c6e6a19e411377bfd274e590ca0aae413cbd4038b6a67241c76da88033d32d0b1338977ddb45528f24ede19dd5ce1176cbb3fc3830b33555594965b6bea37c5661edaa4658fc840764764991375058f42deeb53b7ba61b4831f34e5b8f19001fb3d279a71eeaa17e17009de36c8129ecb54af02696cbef029acb09639adadfd7ea0c316ab2989f1dad5ba86936b17b211ac8b0c1c644795763951712c634bf885f6e04ab62f6aa25d5e60389c071589dd0e1d3b75dcf6bcb4940e88564e5368ed1960f71186a3971c3d61a380a7ff75f11c1db6b0685865a71286e119638aeb713499f6932e3b0e474a1fd4cba8201670059325c26ae872b6c265d61343613eaf8c2c443bd9629c3f983b43b9b09d4e6b2f12bfa034ed6ca9c6fff6c51b25826bf62201f355c5c4400834dd7e79ccd67e08cfa5ad3c01534ddfd277b5384a3094239948b54cc5a0ec99302d6b7f4236ae8f8ace392d9806643e44c3c6c395f4b67c9f1d06ff8a3bb003077696fdfb06d24782ba33cd93b417125b4a107bec94c63de4ff09de786b34fe1a7d991d3a79dd4656ce7cf1e1e2620e6ec97f06b6cf4761cc5dcfe359fabd7956616c896865e32e7ba6c3d37897644f147b5e3456ea4ed97b9fcccc74d8badf65668d8012e14412e165c34ab9358f3a4648be8c0f59803995347fb049b49a0aef633dbfc68be49798b15dd6dfb65d2a0cc619575053f36cda397b477b9262515653c7a9568a645af582777544c90131f0a0592d13ce85346ca005f6854e8fb874532f32e8475a26a0ef26b1d6e8df7df917cf2e8759d7d1e9adf2549344abae7fb70c36dc8e48eaadbfd4e91b67c25def52ab53cf9ea418a86edf71a8962db298516470a8a9bf8a802a876e23a6b28b8c0ab4c9cdac3a5bbe5f6f89f58503f52c38a6f193594f0601680a3c34cd00ca5a8668d0e2a098b8ebbc5e4432572ac7a8813e8496f8ae33b583173197dc1af25e0e53fc8a63a30ac8ed946eea5a086e2e4b4471d3213efddbe50b8abc9d856b759e133b7e918107288d8e4c3c940b49c0d9b3d53f20050c46b199c646bfedec7b1bc689b84b81c5e14ee0c7783d15bd62a8ce2fe12e6111a8501672042f2670d9aca11a1243a3c55206091a0d600662d4704759a205eba3ea1c095e5b2d60169a8db7ba1d597cf31c341d61c01e33ff51c4bfef44f85e6bf7ab17dac74906118492fb6e758c1b742fe89836865a00fea1a90248a13aceb7d749a2ccde515c2da95e6c8af3139fe28b74804d3264afe7690a83809f4cb509016b9c70dc4365d66de171f121287ce94fb7b5d0dc206730f8c605ab079030228624e9f64a96966f8a6e44d4794c754d50bb82a26c48e02168f50b4e025caa25c5fcba2722016d63b83ec631059a5f23fce5c384f6f09c9fe90fbc4eb45bd7d8d6a57f702f9fa3791240e069a58682d2691595f3c10338434ee7a52eee9b7afd6ba521585fdd8c2939c1dd24192f07ddb1741c8b4bbe0f8bd6672cb4fb5656852a1651c3509c9b4caa92fd57b2223f80d769cd5213f5375079d84d7d4501f114a47a0afd181d493fc66b1c1042386438a573f2936d299b5c644c3c51f8dae710f7a65edcff878cf09efad61517276e3a58dd3f281b6d0ad081d89055d24d3a40d1b125563612e1a8fe38380bda761e9eb6f3c030b587f1e48d7a184d8069122aa824a0d0389f7e5682a319d54aaca9d8916696918c78492fc1efdfec7d38d6f577d82aa6491fd46c2c1dbed9fa3db869853486b0ac26f7999c5f2f5a8a55a0618b0721f751f6bbf62652e09eef4d14c29434eab1c75a664bfa51c4766253b9375680462dd0dcf59752a1e42f9291a642ea00130cb3674bbb757e32b046582ce3c2bdffd828d029852aeaa2aa457d5d7f12b9638d575be65c265e683c78b82e85317130131100e2b36b406106c8c7c6d3628442823a2ddbabe8949bfe3ea4490d89bbe5f6c39399740905674e959c9f3a1700c06b3d06ea6061e653781a02ca5957613c9b567c84a45e3892aeaf4e405774ef13e5756a12336dbd277c0338e21549cece8779bb99767789e88dda9bde4113415b272b389d1f0084ebbb1018638121333374e2e8a5f28d2e7ad2001d1b6169f7265d0af8063d76b09e5d25af46bad521a562f311fc657a0d505182073ef01841d8fd17b826b3bc2cfde72f1f6f9ae77d2b34475ecaf1ba3e263dc2d7a009f3d923b376b0fd5e8c5eefe78c3db76b3fa428360e20cb04f93caf384aa67b29c88541f5c9c5701394e63957061d5533249129922cfbd4f89d06c80dc3fa8a979ac764f2164944309a106e4fa242c5327884dda15fc757156cc5b9b42d4581fa82a54631b5d31f70db36ba63a4ec21ca5068c31008d95395f25f3d059b5983a2c324b34f918dccfd7dacb5d8b0a063e5d17eed2b03beaad89f8ace6ab5687187893c623bb11418fdc3b3dbe168c1acd6e8711d5bafb7293b19d69a03e27e53bc5e615c4ee2ecb926ca1e834c203a5ded138e4e5d6feba00576"}}, 0x1006)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000190000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7000, 0xa198)

[ 3094.894403][T11392] loop1: detected capacity change from 0 to 16
[ 3094.899065][T11394] loop2: detected capacity change from 0 to 16
15:41:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4c00}, 0x0)

15:41:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc8000000, 0xa198)

15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000250000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3094.954242][T11400] loop4: detected capacity change from 0 to 16
15:41:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7800, 0xa198)

15:41:01 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0xa4740432f97e123b, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r2, &(0x7f0000000080)=0x3, 0x5)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)
inotify_rm_watch(r2, r1)

[ 3095.050272][T11506] loop1: detected capacity change from 0 to 16
[ 3095.107660][T11513] loop4: detected capacity change from 0 to 16
[ 3095.112055][T11514] loop2: detected capacity change from 0 to 16
15:41:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd0000000, 0xa198)

15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000600000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x8800, 0xa198)

15:41:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x5865}, 0x0)

15:41:01 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
dup(r0)
chdir(&(0x7f0000000080)='./file0\x00')
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000020)
open(&(0x7f0000000180)='./file0\x00', 0x10100, 0x20)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x0, 0x144)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x1, 0x49, 0x0, 0xc567, 0x5500, 0x1, 0xffff, 0xd3, 0x8}, 0x0)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:01 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
open(&(0x7f0000000440)='./file0\x00', 0x400500, 0x41)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYBLOB="48de86e6675bbf836b828278853776e5bfaf87da551bc38c85c7d01d33a9d16677b6b5d102107fd91e35b221304ce845ff173b78052d1a7ef47a009f40af1c3c46643949e4fe74027f91db749acaf28b5e9b4c7a14775bb955c4300f940ba1502e3589f2e75de486de3adcd655ecb95390371bf17595dcb3dba57fb0751a1fb89763cb298a5f5b9991e8fb61b66d817539a3a67f3410addf80c2b03dca69664bc8e8def089efc12be81b95a9c426f94111bb1c6f1ec89941b3aa8c133594c5219796e2a64446afb8a179dde61938b822edeb849a3ea808984c", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES64=r3, @ANYRESOCT, @ANYRESHEX=r0], 0x8)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x9, 0x1, 0x7, 0x0, 0x720f5c61})
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000004440)={{0x14}, [@NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x616c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60f0, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x85, 0x1, "fad1b213768995c92013b2d2c3235cffe33d76fa121c8e41320aa30d6b40e6b6e5c3239399a5e0a9903ef6a949c61e4f104844b01b02e8ecc64590dcaa9ae9e98bd15c603f0de7147ea369762cf430bedcd25e026b7f50c91698a92979541f4b86a8e3f4a45e803af25ea9bb8346aced1348115ac0dba0df9987dedabc39cbda21"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc2e1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0xd0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x25fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x1254, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "633fe697b172629ee4950613593c35ad3acaf3b8b9982bb8a353efb404871a7c9b82ea931fa7262ad3ace9899c53a7468a20a8bf5be59a"}, @NFTA_DATA_VALUE={0xa1, 0x1, "da4f8ff7fefb257efed2a51e90e50bb0e7b60ce529174db699b2457e26fd63e021b3aa7f6920f286d4ae6042f1b4d520094030f08094dd3592511148d39adc7f66d2e24ced8b5a905bfda377b89c5aad3703a76f068ff65fe12b6f00f28ecaf10a75157a4a7abd3f1d7fda705ee0ce5948777aa7e5116a1d85852423211df549a803c0bc98730e035c041b5afc3daafe014c4d41d85af0dd6285bb9e88"}, @NFTA_DATA_VALUE={0x63, 0x1, "c04ff01e647046cc9d14ef475608b826491582c9ce35e47d315b052813ff352b2b262c2eac7ca42a323bd273e2c27f992c089e67d1a4d00c5968dbb3006c844707faa59397521f09935f8cba8f250a51116647101dfa0f684b4fe40ad58332"}, @NFTA_DATA_VALUE={0x39, 0x1, "075672f35383f037697b23687801ba2a0d86255cf25a12c8918766562936929738f36d8c95541455d00408497ae121e8b121b32a5c"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x60, 0x1, "5bfe43a4247f763d1be6808ae9099bc861cd7a189cb6e9e2cad15d7ba48a2035dd37e4e1719b3a67cc290a4601064a045669d3dc532334bb9d8e78bd82b4de2e6a1cea1a79dcc7e8b4447f90065d1a5037bc84166b12987349bac6f6"}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x368, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xeb, 0x1, "9073ff1a17d04fb4c199bb067344963139c3823a82ac71dc3d8cab8ce224ddc9fb4d2be8ed2982b6edbada5391f6c125da7faa3b705fb40911d925e3877630e515be7792db3fd3b4c419656df6c6df6b23b2a4f96968b799528aaf714407d466a4960c63b832bcef9a38b5229a1b681da208d4caf38b37d27a91bcb2a6731aeb47fabb6a02110e5047af4ca0845eb7a2c1eb3e809cba5a722128096c4a0510e89f95a33e69253981425d33e70203b61e28f70b02371620f3b2bab315f3b0ecd015373159caeeab3c5a9fa4e873b426755e4bb2085edd8e4eb0fe88371f42626f6b23ca74812c2d"}, @NFTA_DATA_VALUE={0x15, 0x1, "0d8c6026df2c84b86bf43be9999293bb7a"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "34107c45277575532c1b86d413c776028aaed9799f35057e343aed9c09c9a2b473f6fbf6f75e9368cb2aae781ac8dcabc4a5306ffc3581d082e0be5562ac0604cc9356f95b2cb723d9d091749e656dc7e20a420b2f015a810c9ee3d14cd42778089b7ec7da44b3ccac09806b3c9bb9f722f1acad0dcc0a682cfe1b1daf32503f415db0f05941d5ec1866aff1ab9e8728b07dd7c5bc2ee056e98eaaba06bbebddd99a45fc9866482511e32a9856f4dd81d90c811f6abf252796f74b1c49d932b9a6052fed7e1c79913cd1bd18d977ef5ea6095ec624bb42fa70802672c4d0"}, @NFTA_DATA_VALUE={0x85, 0x1, "9298756ac2a88e51328391f1d37c5d6419f6eda6e82b1d410f2016e2a9492731adfa904a8ac91f93dae6258e12f0ad0abde5f72a325b85a2be2d4053c973621ef92f3b63988571a9202035b44de740b6bded1f7dfba1bc878c69d90f507d86760ee4c5f5cf9cf78fa4166e9fc0d2079b8f8d657ba514523ee57ba2fa726fed67e8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x1004, 0x6, 0x1, 0x0, "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"}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x102c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x1008, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x108, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0xce, 0x6, 0x1, 0x0, "d4634b113d80480678ad7ea9a0d3c524f91a92d48778a1abdb11da5e68a1f74fcbab8a2b5afb24909c3103ac8d5404b96f83288d0ba77dc757ac904e0cca86f055ae4298445bb20c6f31b6aa1ae1a1d035640955a684803dc47fc638c055a59b5a7643a690e40f6f5019bb60dec769a2806370a75a6418b59a9c426da1dba3c0e9d4eb50911bdcebde21d09b35149bebb48492c0a82800d54369594bb23838bd05c2636cc92be524ae0c6008c63da6e5bf7fb45900aa5a977655c02dd092d942dee49b959fb63c46dd94"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x2544, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0xd5, 0x6, 0x1, 0x0, "7e86ee5c65326177d2583c5372edac8e90e3e1e4ab2989c9f650216b431d213e5d200f3aee35ba2c43b5c16ad8d537ceacb6d7dc216bfb35725bda7a9cada0bccab9e0db5d20770790c03c2d029f1797697730de40c1cb17b5c6d126d72557a9a6ed60171dce0f3db9b148f06e24724407724c9f2efee6f308459096ad9193c9a795da0b8df21f78af4191f56a99f62d6056d8fc3c617694be7bca185f32105028a28fa4d3b9724b1179b123b8695bb1dd96e351e4cbd770ff7412c8c4d261ac20c3289486f1b40d81e061464fb1ddb527"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "49048ad62b6d1c5d2c60fc77de1dbf93f1b0ddec4e23ad83f91ca62733e1a3706ba5f4a8d7574796e4d1ec76c76f28545a"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x8, 0x1, "953c8191"}]}, @NFTA_SET_ELEM_KEY_END={0x11cc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8b, 0x1, "400bceaa4e1110ad096fbabfc091152409d09a195cf8e08f390c4fddec9c2ee57a445a191e3d68528d1fe09cab804bcf137a3b27744896550d010dc8eb1a7b1c84f5428a5ed351bbcf8a4712cdf8ab1615967597ff3ba8afec28a1c54f54bd892a3b0f453f71f69fb65a407fbb28c78638445998150d226a158fb25174b571298a0b0bb5e1f88d"}, @NFTA_DATA_VALUE={0x9d, 0x1, "084ad21582a83184f23ab40c51fcdc9309ba2725853015e773e64cd853e9801e3c2dd2fff7317c7bf2fb56953daa968620921618758cef4410be386c0ac90398bce154ab0f87c696ec721fc2a9e1a2cba4393f5dffb182e98ea54647465c31f767396c5dc7a2dbbcc34ff078bf2875a728c84c9aecfe4085a334ab8021356713499b94b40e986c5cc06cc2848a05182f678c09e993d1dc3cd8"}]}, @NFTA_SET_ELEM_KEY_END={0x11e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x97, 0x1, "d11d091a2afcfc2b589542b1f5dccb39cea16a1883ed7728920b3a60224cc446c82c95cd529222f91e3920825ba8c1818e59da87163618febecedfc7051abad64af7beda778b1c9ad2d99e3e87f5ef4f6580100474aed07d750ab8d0ae7b31eea1b2faf1ba9296a3886a6f308ef14160c5563d5b8a2da0eb5310f634fa032bd0f6771c870c6538a30d62785d7d6f779016d477"}, @NFTA_DATA_VALUE={0x4c, 0x1, "608a9d415ba31a6ab57a7dcf7ee2143a662a79bb2a171bfdbbf7342cde919a8d1328b7062d545cf83df16a876e676edda51fe568e30fa33ac48ed7107c15cd7b1260898a0d0120b1"}, @NFTA_DATA_VALUE={0xd6, 0x1, "6877f03bd0f4a4495b30e31ec4e7057caee1d335fa57826ecfbfb6347eea63ad3ffcf1a4ca430e039c549dab43523940c8aad26490b73b0bf5f9de1d7ea6d310a56efd3624c4d00191296d4e4609fd6e059d199a67ae73cc66aa18e8315d118037aeb31d907f6de2857911af25c778b568d6383ee4609226b1ea17937475f1ab86cf6c32e2b8bba0a7ca10192199cc1b440a2776982d4e0e9aebd301a6e96fc683fcc070ddbfbe25a3a5c7ad877f16416ee54d808b792bff1bfe4f5d1e0149fbc907997e32f9135be686150a36e60d0b6879"}]}]}, {0x29c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY_END={0xa4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "781d8a15327887927d0d995710d022586157a35844f6b84a82802b348d523dacbe507a9e208a319f2854c42cd0c6ed2a884bfb48bf74143a70f017f99d4af96763baee423ec6c4d4289d2846f7835668c0c2ebc1260d339f77642867bd9dd2c0b69c50a047a7a748fdbb675e94f4092571607d611a048c1b991f5a559f5f55e1b76be9dac54e0cac916401b3a3822cda21c3a40dfd18ea33c02b"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x1e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd8, 0x1, "60de6cb4bcc53a7e2aa9d241efcf9cf3c55a17dc026d8452db8775f77a946f9a63a224129cb11347838c0781697b649c0e53d2cdd1c671d3bf692cad2a02fd998107c4c87cb193d3e8dfa9cee9bdb06f5d4c6aca362768d764ac1d7edded7c667626d300b0c09877aad60402f59daf2c889b9810ae63ebb9cf94f9a6259a95ea08d00d2ba065b4044b03ecc9406fc2e8c7fa190919e5895be82c1a67c54c0f368fb581d5ca28cbe75eac2cb83840620a865a66e4d58f67d48796bead7985d95c415eed5d8904c79082789bec46179742b3b9f02a"}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@flow_offload={{0x11}, @void}, @hash={{0x9}, @void}, @exthdr={{0xb}, @void}, @ct={{0x7}, @void}]}, {0x14, 0x1, 0x0, 0x1, [@immediate={{0xe}, @void}]}, {0x10, 0x1, 0x0, 0x1, [@bitwise={{0xc}, @void}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x2b0, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x234, 0x4, 0x0, 0x1, [{0x1e8, 0x1, 0x0, 0x1, [@meta={{0x9}, @void}, @cmp={{0x8}, @val={0x144, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CMP_DATA={0x118, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8c, 0x1, "100b23ff8f4859bcf67a2d47e67e330e9c5cd166f73af3d1af998b70901fc0948d137803a35ba97dfd726424d056d9d072065646b82d65c3d13267bb70c8b64a0215cff903698395d9936c3addf2562d390cb990b56548d828f53a2a72dc8e8433594767f1b3d03b8001ae168ecad3d5887a1eba735877bc62cf51412f536696b13d72634e7d6cb8"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x49, 0x1, "524aebf58786264750bfd419afe739f0360bbf81a1affffa1b76863bb8ac2d1b7ab96cfd06de4f3b6ba4f6307301457f6da8fbe28df81ea57f927a4af91a8c5ab4c351c681"}]}]}}, @flow_offload={{0x11}, @void}, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x12}]}}, @xfrm={{0x9}, @void}, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_DREG={0x8}]}}]}, {0x48, 0x1, 0x0, 0x1, [@bitwise={{0xc}, @void}, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @hash={{0x9}, @void}]}]}, @NFTA_RULE_USERDATA={0x5b, 0x7, 0x1, 0x0, "ae92642cbd53c164305150f324515dde1e53a2f4dc51792cb8e6825438a17aef9bcc4561e88f1ca24734149196ff0404db275642b01b8bf32d5faafc99c34903e447037026876943835f722da3cd4ac5584ad84c5bee98"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x65a0}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000680000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3095.341770][T11625] loop2: detected capacity change from 0 to 16
[ 3095.341997][T11623] loop1: detected capacity change from 0 to 16
[ 3095.358562][T11624] loop4: detected capacity change from 0 to 16
15:41:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd8000000, 0xa198)

15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100007c0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3095.407611][T11634] loop5: detected capacity change from 0 to 16
15:41:01 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x9000, 0xa198)

15:41:01 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00')
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100009c0000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3095.510376][T11742] loop1: detected capacity change from 0 to 16
15:41:01 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:01 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe0000000, 0xa198)

15:41:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

[ 3095.558926][T11750] loop4: detected capacity change from 0 to 16
[ 3095.583639][T11752] loop5: detected capacity change from 0 to 16
15:41:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x9001, 0xa198)

[ 3095.665887][T11757] loop1: detected capacity change from 0 to 16
15:41:02 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe8000000, 0xa198)

15:41:02 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000600000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3095.748028][T11763] loop4: detected capacity change from 0 to 16
15:41:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x9800, 0xa198)

[ 3095.855844][T11770] loop1: detected capacity change from 0 to 16
15:41:02 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf0000000, 0xa198)

[ 3095.914735][T11776] loop4: detected capacity change from 0 to 16
[ 3096.006265][T11781] loop1: detected capacity change from 0 to 16
15:41:02 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x4001000}], 0x1800, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x5dd001, 0x10)
setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)={'U-', 0x2}, 0x16, 0x0)
inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:02 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:02 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x6558}, 0x0)

15:41:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa000, 0xa198)

15:41:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf4ffffff, 0xa198)

[ 3096.091496][T11752] handle_bad_sector: 1 callbacks suppressed
[ 3096.091513][T11752] syz-executor.5: attempt to access beyond end of device
[ 3096.091513][T11752] loop5: rw=2049, want=17, limit=16
[ 3096.153838][T11790] loop4: detected capacity change from 0 to 16
[ 3096.161187][T11792] loop1: detected capacity change from 0 to 16
15:41:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa800, 0xa198)

15:41:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf8000000, 0xa198)

[ 3096.227229][T11797] loop5: detected capacity change from 0 to 262160
15:41:02 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000a00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3096.330721][T11803] loop1: detected capacity change from 0 to 16
[ 3096.333380][T11805] loop4: detected capacity change from 0 to 16
15:41:02 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000b00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:02 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb000, 0xa198)

15:41:02 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfbffffff, 0xa198)

15:41:02 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000c00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3096.517766][T11814] loop1: detected capacity change from 0 to 16
[ 3096.537236][T11819] loop4: detected capacity change from 0 to 16
15:41:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x6800}, 0x0)

15:41:03 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
recvfrom$unix(r0, &(0x7f0000000080)=""/35, 0x23, 0x142, 0x0, 0x0)

15:41:03 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000d00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3096.949504][T11797] loop5: detected capacity change from 0 to 262160
15:41:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb800, 0xa198)

15:41:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfeffffff, 0xa198)

[ 3097.024690][T11828] loop4: detected capacity change from 0 to 16
[ 3097.032078][T11830] loop1: detected capacity change from 0 to 16
15:41:03 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000e00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3097.081319][T11834] loop5: detected capacity change from 0 to 16
15:41:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffdffff, 0xa198)

15:41:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc000, 0xa198)

15:41:03 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3097.184753][T11836] __nla_validate_parse: 81 callbacks suppressed
[ 3097.184767][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3097.233044][T11843] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3097.240382][T11845] loop1: detected capacity change from 0 to 16
[ 3097.250974][T11846] loop4: detected capacity change from 0 to 16
15:41:03 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc800, 0xa198)

15:41:03 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:03 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffdff, 0xa198)

[ 3097.399942][T11833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3097.408685][T11854] loop1: detected capacity change from 0 to 16
[ 3097.415820][T11850] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3097.426362][T11853] loop4: detected capacity change from 0 to 16
[ 3097.551577][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3097.586172][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
15:41:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x6c00}, 0x0)

15:41:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x5}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd000, 0xa198)

15:41:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xffffffc3, 0xa198)

15:41:04 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001200000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3097.655387][T11834] syz-executor.5: attempt to access beyond end of device
[ 3097.655387][T11834] loop5: rw=2049, want=17, limit=16
[ 3097.673745][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:41:04 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001400000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3097.724716][T11862] loop1: detected capacity change from 0 to 16
[ 3097.731269][T11865] loop4: detected capacity change from 0 to 16
[ 3097.737021][T11866] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3097.754323][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
15:41:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd800, 0xa198)

15:41:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffff4, 0xa198)

[ 3097.822149][T11871] loop5: detected capacity change from 0 to 264192
[ 3097.828690][T11873] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
15:41:04 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001600000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3097.890186][T11878] loop1: detected capacity change from 0 to 16
[ 3097.897909][T11879] loop4: detected capacity change from 0 to 16
15:41:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe000, 0xa198)

15:41:04 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001800000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffffb, 0xa198)

15:41:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x7400}, 0x0)

[ 3098.063852][T11889] loop4: detected capacity change from 0 to 16
[ 3098.100573][T11891] loop1: detected capacity change from 0 to 16
15:41:04 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe800, 0xa198)

15:41:04 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001900000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:04 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:04 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffffe, 0xa198)

15:41:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x7a00}, 0x0)

15:41:05 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
inotify_add_watch(r2, 0x0, 0x0)
r3 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {r6, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x1, "2156816c73038c"})
r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={<r10=>0x0, ""/256, <r11=>0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}], 0x0, "2156816c73038c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049c00)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0x1, "0b45b5eaff4c12"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ac00)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}], 0x7f, "15512e3e1c12dc"})
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r3, r3, &(0x7f00000001c0), 0xa198)

15:41:05 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000002500000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3098.694793][T11911] loop2: detected capacity change from 0 to 16
[ 3098.701539][T11910] loop1: detected capacity change from 0 to 16
[ 3098.703367][T11912] loop4: detected capacity change from 0 to 16
15:41:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf000, 0xa198)

[ 3098.760758][    C0] sd 0:0:1:0: tag#693 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[ 3098.770544][    C0] sd 0:0:1:0: tag#693 CDB: opcode=0xe5 (vendor)
[ 3098.776840][    C0] sd 0:0:1:0: tag#693 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c
[ 3098.785845][    C0] sd 0:0:1:0: tag#693 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d
[ 3098.794783][    C0] sd 0:0:1:0: tag#693 CDB[20]: ba
15:41:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x10000000000, 0xa198)

15:41:05 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000c45800000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3098.805076][T11916] loop5: detected capacity change from 0 to 16
[ 3098.846357][T11922] loop4: detected capacity change from 0 to 16
15:41:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf800, 0xa198)

[ 3098.893446][T11925] loop1: detected capacity change from 0 to 16
15:41:05 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000006000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x80000000000, 0xa198)

[ 3098.949028][T11931] loop4: detected capacity change from 0 to 16
15:41:05 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000006800000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3099.028213][T11937] loop1: detected capacity change from 0 to 16
15:41:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1517f, 0xa198)

15:41:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x0)

15:41:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1000000000000, 0xa198)

[ 3099.276874][T11916] syz-executor.5: attempt to access beyond end of device
[ 3099.276874][T11916] loop5: rw=2049, want=17, limit=16
[ 3099.278533][T11911] syz-executor.2: attempt to access beyond end of device
[ 3099.278533][T11911] loop2: rw=2049, want=17, limit=16
[ 3099.301432][T11911] Buffer I/O error on dev loop2, logical block 16, lost async page write
[ 3099.324578][T11944] loop4: detected capacity change from 0 to 16
[ 3099.327373][T11947] loop1: detected capacity change from 0 to 16
15:41:05 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:05 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:05 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000007c00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2000000000000, 0xa198)

15:41:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1d5ab, 0xa198)

[ 3099.427350][T12053] loop5: detected capacity change from 0 to 16
[ 3099.443426][T12057] loop4: detected capacity change from 0 to 16
[ 3099.456174][T12059] loop1: detected capacity change from 0 to 16
15:41:05 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000009c00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:05 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1d5ac, 0xa198)

[ 3099.497168][T12063] loop2: detected capacity change from 0 to 16
15:41:05 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7ffffffffffff, 0xa198)

15:41:05 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000058c400000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x8847}, 0x0)

[ 3099.615494][T12069] loop4: detected capacity change from 0 to 16
15:41:06 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000015be01000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1d5ad, 0xa198)

[ 3099.698238][T12075] loop1: detected capacity change from 0 to 16
[ 3099.755231][T12063] syz-executor.2: attempt to access beyond end of device
[ 3099.755231][T12063] loop2: rw=2049, want=17, limit=16
[ 3099.814122][T12141] loop4: detected capacity change from 0 to 16
15:41:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000d00)="88117e3253c0809349d1efb8b7f00132d44efa8531b798f77c8e1135215bab16862ada3e5b426bcc69f71f4a23b3b8eafc3ef18567b54b42317ecd452cb6cbfae57004537e8e5e36cfddd597d23d13cc22bc38add95897afe1ce890bf3647b0922186e80d83bf8c45f09afdede9ba52fece52eef1bcfe1d65f652a42188733d61b446d9f071fa5d6b1702b7e4af9111015d1dd2e687443c93d12e1da11330f69d425c4fb77f43ff1734fc83d187ba03c8dd7e9cfef729715f744893bd2e6b4572ad6c7a435fe6888f9f1d06972e0884e5500c3acb7d7fc781dee165003e0ab1932c9aa66bf430ef5be694663bdd7d8ee429e", 0xf2}, {&(0x7f0000000780)="22eb2792283b4dedf3f0", 0xa}, {&(0x7f0000000600)="0f8df07ef56a0570e4b32881455a9c6472cc1582e82d1e3c0786d45e73658baa100fd208ddd0454100694437a23def662482", 0x32}, {&(0x7f00000008c0)="6a5500e8dc4c0902070dfe6161bcac09efd086cb0df607a9a6cac4e8c42cc5aa1f0b1e0f0a10524660b9776eee1d90aadc9f2a44c2e1c4f9cbe50f3bc813700d0f05fa9ce95dff7c1c711553efdc8e08", 0x50}, {&(0x7f0000000700)="71cab6d2698e770b48", 0x9}, {&(0x7f0000000940)="1e3fc49274c36f808b943916f078b8ac171a5b049a02e259a3c93a3d6e77d26ae2a3b70ab97e69f55e310634050abde3caa18c2f2a02a92a0cff98f6e2f5c3a9b34200457ab70cfeef6bb7d27f8cfe047917e4e4c864650de0f10640605dd3794c091c216eeaf0a7d0e39d91f5056d617aa55afcd41af18b542fa198e7f20fa07f4c0e0f3fe4a3816f2fbf3527fb0fd37a6cfa0a04", 0x95}, {&(0x7f0000000a80)="bc0d56859c5d98319a82a0c20d999730b33f5680235c98a6fb4eb5126f99182d28c0c738f56f334e264089bb3bd074aec7f3e8e6b5f11127789b4f288c2d7305a16d1c2391ba29a04dba87286b1a82df87af97f6ec4e12346576f950f8a2dd979445860c2e56e2ec07745532d6a4d78fb94372b8add4846f17f31e769dbe10a940bd0267059d8e04aeb333136db77857aaeeb9b66ff25b13b2bf0445e0f194ead6a8552bfbe1744a674bddd4bcbcb6a6033dc7fb292c87f0fbb499f70f115f4a22", 0xc1}, {&(0x7f0000000b80)="1b865f0bde452ecedc412fb656fd2044238114114ca806216d82a5704e917e01c713f84151d3e4b132ad429955284061db5eed3dbd362439ecfe1428de5dee44cb589d3ef82243d2be7444b8be0ae6bce4622c27c6f0a1df74dccc0bda40bde584b6a101ddd4fd0fa5d872fc213806a06eac087c4c5ecec37f7eda5bc5151163822e5d4d78e3f05010687a7d07a97a1b85f277d5aa3d8b0df3791189882d795cdfb17ad7de8481176003b22fdef5fefe7b1c737296e4147f7799869b88842882f475e8f57c26f81913871b0f265c2f18baf57a1c", 0xd4}], 0x8, 0x0, 0x0, 0x20000000}, 0x20040804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x830000a8)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
clone3(&(0x7f00000004c0)={0x1000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180), {0xb}, &(0x7f0000000300)=""/166, 0xa6, &(0x7f00000003c0)=""/200, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={<r1=>0x0}, &(0x7f0000000840)=0xc)
prlimit64(r1, 0x8, &(0x7f0000000280)={0xffff}, &(0x7f0000000540))
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:06 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10001, 0x5, &(0x7f0000001440)=[{&(0x7f0000000240)="53a0f5ae56aba0a6f1edaf3ec2e9ea0e1010c91acd4bcafe19aa4fcf4f20994087b5b575638c5dca86119190fb3bf26187d3fd671fd792badf59b6024d2bca33b66c78565dafb4b1c28fac8d2abe8a471db73890853d46bbd4a5c59ba1e22e026ac6183acf5a4187cf76bb8b0ce53ea89a6f", 0x72, 0x7fffffff}, {&(0x7f0000000180)="c0a87d56c995898798b873eac3ca808d601fe9b6af7fd8a4", 0x18, 0xfffffffffffffffd}, {&(0x7f0000000300)="bc3cada962ea6eeae7ee0987e6f304c0c10f487e94d7f99514004aeae6b3923b8393ebd705a56bb2c4d43d16861a58ae7a560fb23479870a2bd35704accfb1ff898a7202b70f8386bad88f1b369bbcba7468cdcd87364f16cd09de2df363d0bfe7365a6768395b148391eb16d3db8c0a1ea564a816e5a2ea8e4a0b0d6e40ada41c2810ad68ec7e3c5bbc4089c6842bdff3aefd508856349473bb9d20abfede7c295fed9312900daa18bab5d0d0ce73ecb50d61281752b343187e0c691e5d", 0xbe, 0xbf1}, {&(0x7f00000003c0)="3e51c402cac4ef83ddadbad54c6f624559a4089cdd60ae60357c4206a20d77c9fe7f4561dba64a11fa19c041b3b76d7662478caefc0da5f4b1d1f385e27d8377e244e459323be905b655b315936093639d5b98617afb4be6ffc9114ae000d834b53e2314bae5c5342e2521de1c511c8673f8914dbe9cf7caacdf9b272fc5a93150158f2b78eea5fa39f28edb00bff8abb58d19019794861e79e5830565b271b8438aeae39c3df3f9798d51128fb3c7990f7f038b7c9437d7f84d8d0aa3f625b2e0cac688d0b9c03298ed7091336623899235f19c95a44438f6c6f65f555ad666173a35101f87513c91f51cce97b5c7cc7ce4520e107e8dcea0a831d47cb748629ac41eb35a0b0dabc7597e6bfbe36d150e8a1bc21c7514bed2fd47fa5d0224d7a9e502d322eef23e5b716ea38e750adfe8d5110041355d4d5f26e3f3f71f30c3d412fb3d718bba321e6f5b3ba39ab613fc208a9f2ed70184a69984b6805a79ce32f79c1f31f0b7d7f3e507bae54f08293677c409ef6dfd85ddac7beb73a6d9b53ee6e355183f2957ea96964ba708690a98764fcd8da7ac6237e69cf0c66ea9e099bf15fff59b54472dc26318dc5f4885b88e74d1972f78768d646556b7fb668b6e4c968aa6d542b12e0800c1842a00508638cf725782b94abc0bef28a0b6ecde6121512738515eb9a1c4937e95a471a370f6672974f0463873eb5c8508f3ca4a5e68fb26ea9d89ac73055147b91ea2d7ada6d18df408b029d4d707e7577a20c8d14f14e2464854076cd04ecf50929698934606add1016a1c9e490581339b2022999ea6e2ceb521135bc04efa46aa634841e07b1a9bdd902bc77c5a2fdf9edcf564c02355641d5ade32616ed126e29fd2733b947980df50ed5435eba9c75d1806a87cd8a0b0397ff89f9ded2fa3e01c3cfdcb95df63bd33da28de1b79c82a7f4c4f7dcf810876ad63b8ebfc2f515ad2463b322190fa418253113e0c4318b593fdc4dca32fb65d63a79caf4381a8d481d984009a55269ea0ef91c92f2f862d5c516516634860fd7df23c4be6efe79962a26c7a23e8bcbe6fd79e24c9f831075db52e5ad9046667e9bfc5c4fdec38cf8cdaca62f478ba217582f9000ff43eded183a1732ea247b53b491644693a4d7b03b3fec3eba9868b804bcd632fa32927f8aed2c9572634233dfc11ba189d37fa679c06ebacb7605c83c2bc8c95cbb28e0cfe0d6094d626a889578546e755124db3ea7f80833fca78db2ddb7a5bccd34bba48b8750eb668721eac5ec3d8791ed13c01dbba7c1ad50e87de1e8291e44ed3a4f04ef909066b1df0524a8419bf137f3d7c6dd91cfd5909fb54fc3ca17c89cb29043dd7525280b118753818f9f19320deca7489e6929db3e34153189ab727818ac0c06755b2944ff58a852814d738f038f5c7b4e3f0ef0d5fb4d9d83cad5e9079fc61817a188410059d99023da558798c1643a22c7133dfde77242a1ab5e79e5bfb2760ec9a4dfcd3a48af9c2931f3e2e58bb71e5852401fff754066c0af03a5964d550eb23fbe445220f61e1c5489bcb69a43af2cb167b5bb0e86d4020900145c50502119755ea08f7c70dd44ee95565b9a4deee89dfd6d15d2f8c2d3fcf3316853a9462c9881e7f47fe2a49ac5e6ae34e8fbe22e0b8d38ebcf663440c153ef4d69f829c4bcff621e29f6d7dd78eb21ce5d1ca13a4e4fb49b7cea4b4f85def74a23d902f801bb4e72eb56b0dc75f299e9c3fd151d231d19e6caa24c2c04eab2687464c2996cc1cac82de40473d9744bd878b5647b870c82a1e68a1a1dd01b83d87729636eb679c7117a0d5078e0730d6b42f82117459076417dca646555aeb7651f3e6d2e2ce97867b2668acc38a6978dffbc1b61339edec656dba2949c17b90936e1fb94682a2f33c423bf653a353ddc5dff839a7e16abce447d95a12cca550f9c47e3e5833003b2175e65a79f01cdb1028f97accb8ca6c01f8d702122cbbd8072dd280353e1a20e8a198c67bbad2e61449253ee855096a4daa2dcd73d35718b617e6e45703f6d09f770e007b077cdbfac24c39fda752b9de6e353830659bb0294666a0394d6d52cefdb6f9c64610daf423c0d0f9f8f6e2c3a81038e012197156124e88b945507dfd2f839ee1928bac0242c266fea553fbca046f2595113c340b80945db2d6601a74a38260b55d3f35aa618e9490f563f06d54415191593135148c81d59226727c9d2fd598d97639b6eadad9796f96b1d8da93c11fd344142a394650744a632e78728d82916239fa7157485110a854e157cc157fe855e31d4f3e475911beb7e70756e7847eb28c59bc949cf0ef72371177604c909b41184b1702711494c7c88c6ef7fbba6b21515b1394781257a5363e1174ee0da2b7b51437bb65344939cd9a2b7aae8cf2150e9ec1bcf009b2fbd35fa7b80db72e907c4d42e0fdd4e38ee7af4a80eb42832285cb55540834ef80101fcb815a2bf6c8fa5c961489858a5818783ee0edf1bd974af6670115352e408dd40c73617390b32086614c84de0d36f5c7359b378246b3482d2206d6933941ad1f18e918577abda5d2e2723a900eb044dc91a5d96109b0baf7ce74e5dd540763c5df27c1f296e7859dc1fc370470458c4234b71bdaffb717029cb58f8d09e5128d4de0132e60921a7682e3ee7e3d7845c5f9f7a21d0df085bad17ec159ce6bc51bfee3fc2ddad99e02aaaf7a6ed3be09be8d9ec8f85325ab902a13c42727cdb5b5f1dcb125032c9de1ee81b33259d9482a7a54afe561450a92d917b49edb2ba3897f7253099fbfbb5f98853a2f61e5fb0e801c9e67301ead585d6ada77a09c5954b14257ee54b0dd5ed28226896a2d9a30076c1a20a6b09be171df3ac76ee06182c5e90ebb6590ef63ac7ee8fa8d32375d73848262ee9730fb812398bedbb589afa5a3d070b2ac4ff857686c76cd86af00ed16a0121ec1ce7fc605330b8a07a627a039b611421cca2c4de0c36e979957e1c30eab60d32872319f03bf9e021599870d3826407010f34c0e1c4aec40df462d02f06374e3bed24f21e471830f32db36324d38f3ae6721bbce5e0096ebf5dd42b92eb99407501354ed8588f4dd6970e298205fe7cb983ad5ca706339718afc2d277f5f43873d270e3836d3c4daadbb9ff78fd4983a45625ad12070c55d9312abdf66f7d1bb2b1877f334752aa299f6736ecdac39a94869c55ace7f6e3f6829c84badfdc20fa50bf1f24b957e2ea06caca5f67abcd75cc5d29cd61383003b7b8dfd747601d0742fb01f9d889af56091de15813cb0f36be473dc7ef77c4cc364d32f91e654933877a44d5f9d5bf7dda57a82484196db181d65944f8bbd64a27fe5088d2b73a88c12312e6316f2af256e645524823b14f3afd47e24e1cdd4f8dcce2345bb6df4b83e1552e4b0832eedff5e171b47de328890b4c25b748033530f6cdb0bae42a4695ef030b43c549d4ebbbc6a7b204f7c8cedd4502589f83a69aca49ab3fb5e9ee29ad68b59fe6c1e8418490e3badc0d6a2b4a9f226b5103c2073b59699ace188c0ff34d993793f3022af118fdc93d1ab592ec3266ea248e9ac57831137c5005f55d994d81ff5a63cf51e1aa5fdd201efad86f972a67dee5877cbe60154dbdb02e2ee9eea5175efaea4c5fa00507d15c08cd3c7355acdea7ff16f12fbb3e96dcfa0c342ddb6f69719a5171615877f3b0470964a2674e80789910eade79c68e84776f98e45ce17f99dc62545cf1648900497efbfb0165da324e682e2e8d78771d344ef31f817e2bd825da78172f3b56e1a43b1957ebf5b7e0adeeeed75b82d669f010857b9f567ff88da7bafa6921df05e6e95acd0f322d3eef5307ecb15dbf478eebd8dd710c38c0dd3f1b9ddc1f46b6f922fa9f3d6463f4c64b21a3971b0917ea8f2d58e63a9c4421756a602cf8d5b49aa7bce93d92a65340e64683f48709a22bead1c48af627fb25a8fefa4711e90989a2ba3053c5867313822469904405a3e16bcbf30466a589c1416c276d6ed1520643cc0bf5a16d282c14fa460f7223941d803c7fcaa8570837664dedfa8ed92b639661e105c253600426e63c313498fe10f628896bbf217a8f53eb3a4615840440c49966558511735185322b94517190434470f5d39b05204b6c5986325877addb8b8cbafef932f80e730d712584849a691e8fef41b1b525bb0587035b74e087ebc669ca745b3cba107bf833cd106c57d71a0c40fe7e5d2f85d5985a34d51f0e727c33cb2b9dd9885e9a114ff992ee824ada8828ea35a742d4bc3ca35814fe31a0e5db43102e4dd18518432b2b11231c4a79aab83cf2ec8b4efcacee36097ed271093fe41d1a89ce95eff29a39fcfbd733370b6fd04a977ec4a82318247c516fcf2c0aee6e656a77810c9ad5b23b775d61f991553399947f531d2de80f4c9cd92709b2a359ef36f1cdafa7615a4a84de890cd3e3e0603622c1f5d13609614393c6809d42f14aa4b8e73dc40087f3c5a2333ab33e7da4800bbfb135472375bd7a5d8fc7d6a2a23304474c9c04c4c92571ba0fa9582a687add597fd465e91934cba3cdc0e72dc23a4e4695e3f0c9e9f967f784aab6abe3f5191c64c8e9985620a5d6d3151da6d8a0ab87b3f425c2abf2435d759bb5394765ff52c6b1308b407492cd5422641e92164521b38398263e7eee4226517a998016cb794012ac4cfa271a05a546b9ea5a21dbde46d96e4be5510dce49d6a0e055db570da18dcea970a3f50a2dd638c4343f5db9e64bba332d943bfeec84e128fab99becfb6cc7de87e002051ee2cef7d9ece5559991226f18feb8b408ce4da981ea5c9abca9ee8343540e71333d27a966e359a4f65f718a1f05250f9273a1b9a6c475fa5365316f5955dbf60f36a8efeadcbc10ba0744b94709db0a99ff827ef9ba6a6a953a9683adf499081bf0bf2a7dd88ef43fac059a820745c1cc573ca65f3cb9a231d02a165dfe3a3c80eb004bcd5746ae5e906d4b19f663fa47d8e8a8bc08fc17d14a267e4a59cddeda208abe7c4f74626047e6b50feadda14d437425d3c7d15ab8b6df0d16b66ab4bbf0d5c5d63a37476173dfcca9420e2401e645284779b7a166911e435af3d389f215024ec9de39f11ef177619802fecf8256b07e6b870409f689a3df215f3521ca3f951f76dc3eb4301687d8f1a43a8bafc71fc1e4552bd20287d73bedeb6fb1e3fceb682350703c9d56d3db7f2a97458ca31d6230e5a7f1c80e73fddb8ed4510a70d207141e55728529176ce6b6b7d597647a32745a2fd94e921681562030d4cd4d5961a5fb780a01f694d1087c8d95ec0fd12f60909a74d575b576ee15ddc65f1f58774b0813f77632582ddbf02164efcf68a4dbd91707d395b3e2f89453f3b22e7b9aebb04048a3d60effa3cc03dd88324af3394998e446d620fff9cb8eab7234613660221e773eb980b9068ebdef6f729cb9baef56ac105b1c35ed5f28d1392f8d1dd8f3017b959c63ba35ae414915b74e59b4b930f0b25f7cc7d62ad052f1f6655294b0b8b79d8ebfd24e1fa15b8334d9153632458ec6dc5371f00ba9dfd269b179e3b03362bb70c3bc8cebb9b99894ed31438a5e21ba6bf0548f7424c51bc57751919e9f8e4d8231a182177dc0d5fba9dcb0bffb40df5cf7af5cf8bbd6b8665c542f59bfc96a61012f800ed449a30af6eb4bf28634a3f079e83516fdb0c303a94802ca4580d446ffd47c13256039f0c8ff4bc0f2675ca791a183b7f620ab98af438187e9c10f185f0afcc39efdf3349d7545461ad5733a69bcf43cc42fde375cc8d", 0x1000, 0x5c}, {&(0x7f00000013c0)="f9d4b02aedac07329c4404758cfdeb730bb3eda6fce6a11018da53c8d96262c514970aa21c83916d50ae2b5cc0abe14037d1b69a065ba99292ba14899147ca2b3dc2d96661c491a760b717e7c8bd698b8c45d5c590aaf5f7d89a6f2a6990cc40e3fbbb61791f8f3ab61aa03c9b42eb05075abce9", 0x74, 0x1}], 0xb2000, &(0x7f00000014c0)={[{}, {'vfat\x00'}, {']%/][}['}, {'vfat\x00'}]})
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa000000000000, 0xa198)

[ 3099.932215][T12053] syz-executor.5: attempt to access beyond end of device
[ 3099.932215][T12053] loop5: rw=2049, want=17, limit=16
[ 3099.941223][T12188] loop2: detected capacity change from 0 to 16
15:41:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1d5ae, 0xa198)

15:41:06 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000004003000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x0)

[ 3099.976854][T12192] loop1: detected capacity change from 0 to 16
[ 3099.992880][T12198] loop4: detected capacity change from 0 to 16
15:41:06 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000340000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1d5af, 0xa198)

[ 3100.046773][T12201] loop5: detected capacity change from 0 to 16
15:41:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x10000000000000, 0xa198)

15:41:06 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x9e05}, 0x0)

[ 3100.146686][T12210] loop1: detected capacity change from 0 to 16
[ 3100.147633][T12211] loop4: detected capacity change from 0 to 16
15:41:06 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3100.522897][T12188] syz-executor.2: attempt to access beyond end of device
[ 3100.522897][T12188] loop2: rw=2049, want=17, limit=16
15:41:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1d5b0, 0xa198)

15:41:06 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)
clone3(&(0x7f0000000500)={0x1000000, &(0x7f0000000240), &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300), {0x25}, &(0x7f0000000340)=""/237, 0xed, &(0x7f0000000440)=""/94, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58)
sched_setattr(r2, &(0x7f0000000580)={0x38, 0x3, 0x10, 0x10000, 0x7fffffff, 0x40, 0x5, 0x6, 0x2, 0x4}, 0x0)
openat(r0, &(0x7f00000000c0)='./file0\x00', 0x42000, 0x1c0)
rmdir(&(0x7f0000000180)='./file0\x00')
open(&(0x7f0000000080)='./file0\x00', 0x102, 0x0)

15:41:06 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x100000000000000, 0xa198)

15:41:06 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000030000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:06 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
write$P9_RREADDIR(r0, &(0x7f0000000300)={0x122, 0x29, 0x2, {0x6, [{{0xa11c1cacab5ddf25, 0x2, 0x2}, 0x5, 0x1, 0x7, './file0'}, {{0x8, 0x2, 0x8}, 0x1ff, 0xe6, 0x7, './file1'}, {{0x10, 0x2, 0x6}, 0x8, 0xff, 0x7, './file0'}, {{0x1, 0x1, 0x8}, 0x6, 0xfb, 0x7, './file0'}, {{0x0, 0x4, 0x4}, 0x6, 0x2, 0x7, './file0'}, {{0x40, 0x2, 0x7}, 0x9, 0x7, 0x7, './file0'}, {{0x10, 0x3, 0x6}, 0x4, 0xdf, 0x7, './file0'}, {{0x96, 0x1, 0x5}, 0x1, 0xff, 0x7, './file0'}, {{0x8, 0x0, 0x5}, 0x9, 0xff, 0x7, './file0'}]}}, 0x122)
sched_setattr(0xffffffffffffffff, &(0x7f00000000c0)={0x38, 0x1, 0x40, 0xfffffc00, 0xc, 0x100000001, 0x101, 0x1, 0x5, 0x9d}, 0x0)
setrlimit(0x3, &(0x7f0000000080)={0x27f, 0x34})

15:41:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xa400}, 0x0)

[ 3100.572268][T12201] syz-executor.5: attempt to access beyond end of device
[ 3100.572268][T12201] loop5: rw=2049, want=17, limit=16
[ 3100.597056][T12325] loop4: detected capacity change from 0 to 16
15:41:06 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x20000, 0xa198)

[ 3100.636089][T12332] loop1: detected capacity change from 0 to 16
[ 3100.657817][T12334] loop2: detected capacity change from 0 to 16
15:41:07 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x200000000000000, 0xa198)

[ 3100.686791][T12339] loop5: detected capacity change from 0 to 16
[ 3100.697210][T12341] loop4: detected capacity change from 0 to 16
15:41:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x80000, 0xa198)

15:41:07 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000050000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3100.816682][T12413] loop1: detected capacity change from 0 to 16
15:41:07 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x8, 0x6}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
fallocate(r0, 0x20, 0x0, 0x8001)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3100.893728][T12456] loop4: detected capacity change from 0 to 16
15:41:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xad41}, 0x0)

[ 3100.935222][T12459] loop2: detected capacity change from 0 to 16
15:41:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x204000000000000, 0xa198)

15:41:07 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000060000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xc305}, 0x0)

15:41:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa0000, 0xa198)

[ 3101.201528][T12339] syz-executor.5: attempt to access beyond end of device
[ 3101.201528][T12339] loop5: rw=2049, want=17, limit=16
15:41:07 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000070000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3101.258872][T12466] loop4: detected capacity change from 0 to 16
[ 3101.266894][T12467] loop1: detected capacity change from 0 to 16
15:41:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x100000, 0xa198)

15:41:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x300000000000000, 0xa198)

[ 3101.347583][T12475] loop5: detected capacity change from 0 to 16
15:41:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
setrlimit(0xf, &(0x7f0000000080)={0x7, 0x80000001})
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
setrlimit(0xa, &(0x7f0000000040)={0x1, 0x8})

15:41:07 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000080000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3101.422893][T12484] loop4: detected capacity change from 0 to 16
[ 3101.451697][T12459] syz-executor.2: attempt to access beyond end of device
[ 3101.451697][T12459] loop2: rw=2049, want=17, limit=16
[ 3101.464873][T12488] loop1: detected capacity change from 0 to 16
[ 3101.492919][T12492] loop5: detected capacity change from 0 to 16
15:41:07 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000090000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:07 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1000000, 0xa198)

15:41:07 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x400000000000000, 0xa198)

15:41:07 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)={'0000000000000000000000000000000', 0x31}, 0x20, 0x2)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:07 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000010046)
inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x20)
mkdirat(r1, &(0x7f0000000740)='./file0\x00', 0x166)
mkdirat(r0, &(0x7f0000000700)='./file0\x00', 0x0)
setrlimit(0x7, &(0x7f0000000780)={0x6, 0x1})
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440), &(0x7f00000006c0)=[&(0x7f00000004c0)='vfat\x00', &(0x7f0000000500)='vfat\x00', &(0x7f0000000540)='*(!\x00', &(0x7f0000000580)='/)-,(.|{#-w(\x00', &(0x7f00000005c0)='(+\x00', &(0x7f0000000600)='X\x00', &(0x7f0000000300)=']\x04&\x00Q\xaf\x1d<N\xa1\x97\x02\x96[Nq\\\xcd3\xaf\x9d \x8dv\xb6Q\xfe\x02R\x1e\a\xfa\xdb\x8a,}\x98&h\x95\x9f\x82F<\xe4\x00\x17n\xad\xb7\xb0n\xff\xf2\x7f|\x94Dj+\x1f\x9b\v\xc1\x1f\xed\xe3\x91*0)\x8fnu\"\xf5\x1b\xd8g>\xd3\xba\xb6TZ\xd5q\x03y\xcf\x1ejN\xdc\x14=\xf3u!\xa77\x01\xa0(\xb4\xdfnm~\x82\xb8\x94L\x15\xbds\xae\xa5\xd5\xdd2\xa3\xa5&*\xc1\xe2OTZ', &(0x7f0000000680)='}@$%\xf4\x00'])
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xc405}, 0x0)

[ 3101.616453][T12601] loop4: detected capacity change from 0 to 16
[ 3101.616778][T12603] loop1: detected capacity change from 0 to 16
[ 3101.640496][T12606] loop5: detected capacity change from 0 to 16
[ 3101.642453][T12607] loop2: detected capacity change from 0 to 16
15:41:08 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000a0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2000000, 0xa198)

15:41:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x500000000000000, 0xa198)

15:41:08 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000b0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:08 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000c0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3101.809366][T12617] loop4: detected capacity change from 0 to 16
[ 3101.816007][T12620] loop1: detected capacity change from 0 to 16
15:41:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x16fa8}, 0x0)

15:41:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x600000000000000, 0xa198)

15:41:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2040000, 0xa198)

15:41:08 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000d0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3102.018660][T12607] syz-executor.2: attempt to access beyond end of device
[ 3102.018660][T12607] loop2: rw=2049, want=17, limit=16
[ 3102.021997][T12637] loop4: detected capacity change from 0 to 16
[ 3102.030836][T12607] Buffer I/O error on dev loop2, logical block 16, lost async page write
[ 3102.038223][T12636] loop1: detected capacity change from 0 to 16
15:41:08 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0xfffffffffdffffff, 0x0, &(0x7f0000000000), 0x2008014, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x3ff}, 0x0)
setrlimit(0xe, &(0x7f00000000c0)={0x1, 0x697bcfae})
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
setrlimit(0x5, &(0x7f0000000180)={0x1f, 0x1f})
chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000002c0)=<r2=>0x0)
mount$cgroup(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000300)={[{@clone_children}, {}, {@name={'name', 0x3d, 'vfat\x00'}}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '@^&[{[\''}}, {@uid_eq={'uid', 0x3d, r2}}, {@measure}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]})
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:08 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000e0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:08 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
sendfile(r0, r1, &(0x7f00000000c0)=0x9, 0x7)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
open(&(0x7f0000000080)='./file0\x00', 0x24541, 0xc0)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

15:41:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3000000, 0xa198)

15:41:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x604000000000000, 0xa198)

15:41:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x16fa9}, 0x0)

[ 3102.252218][T12606] syz-executor.5: attempt to access beyond end of device
[ 3102.252218][T12606] loop5: rw=2049, want=17, limit=16
[ 3102.291370][T12745] loop1: detected capacity change from 0 to 16
[ 3102.295424][T12747] loop2: detected capacity change from 0 to 16
[ 3102.307001][T12752] __nla_validate_parse: 83 callbacks suppressed
[ 3102.307015][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3102.307568][T12753] loop4: detected capacity change from 0 to 16
15:41:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x4000000, 0xa198)

[ 3102.350349][T12750] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3102.368491][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 3102.378668][T12755] loop5: detected capacity change from 0 to 264192
[ 3102.382248][T12747] validate_nla: 7 callbacks suppressed
[ 3102.382259][T12747] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
15:41:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x700000000000000, 0xa198)

[ 3102.415002][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3102.442450][T12760] loop4: detected capacity change from 0 to 16
15:41:08 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000000f0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:08 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5000000, 0xa198)

[ 3102.527494][T12762] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3102.539056][T12764] loop1: detected capacity change from 0 to 16
[ 3102.561243][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:41:08 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000110000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:08 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x800000000000000, 0xa198)

[ 3102.587528][T12769] loop4: detected capacity change from 0 to 16
[ 3102.674184][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3102.683953][T12773] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3102.697488][T12775] loop1: detected capacity change from 0 to 16
[ 3102.742571][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3102.862444][T12747] syz-executor.2: attempt to access beyond end of device
[ 3102.862444][T12747] loop2: rw=2049, want=17, limit=16
15:41:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
creat(&(0x7f0000000080)='./file0\x00', 0x14)
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7fffffff, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)

15:41:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x6000000, 0xa198)

15:41:09 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000120000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x900000000000000, 0xa198)

15:41:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

15:41:09 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
lsetxattr$security_evm(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), &(0x7f0000000300)=@v2={0xbca9c60af4194b3e, 0x2, 0xc, 0x5, 0xc6, "a6782f4592ad32c4acadf19897e475233edc771026933541e7ac40d79e775d06b68989e14cb151326d32e72368eb6e53c297a34bc519fd482313b6231a4ec5f6fb0e11d1593c518e20a6c35d28fc2a7d06b4690a7c7c0ca37261273707316ae77d8d4569f2c5a3e43938625c38323738415ee16bfe076075d14f2c55cf86f6fb079012d80db3c240ef5b0a19fddd814570a55a5eb84b779ff2b2ce613010fc1d3d0895ebcabfbcbd8e8bbe697243b0ac7fac28c32c1c2470044744b52ee96b3b4e6e8db41bd8"}, 0xcf, 0x1)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x5, 0x4, 0x3144, 0x2, 0x3, 0xfffffffffffffffd, 0xffffffff80000000, 0xffff, 0x6}, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3102.954979][T12755] loop5: detected capacity change from 0 to 264192
[ 3102.999118][T12884] loop4: detected capacity change from 0 to 16
[ 3103.007693][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3103.007779][T12888] loop1: detected capacity change from 0 to 16
[ 3103.024990][T12883] loop2: detected capacity change from 0 to 16
[ 3103.041597][T12892] loop5: detected capacity change from 0 to 16
15:41:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x6040000, 0xa198)

15:41:09 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000140000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa00000000000000, 0xa198)

15:41:09 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x400)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$chown(0x4, r5, r3, r4)
mount$9p_tcp(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0xc0, &(0x7f0000000380)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_L}], [{@dont_appraise}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@dont_measure}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@euid_lt={'euid<', r1}}, {@euid_gt={'euid>', 0xee01}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@euid_eq={'euid', 0x3d, r3}}]}})
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:09 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000001be150000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3103.146582][T12901] loop4: detected capacity change from 0 to 16
15:41:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7000000, 0xa198)

15:41:09 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000160000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3103.206081][T12903] loop1: detected capacity change from 0 to 16
[ 3103.228531][T12905] loop5: detected capacity change from 0 to 16
15:41:09 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb00000000000000, 0xa198)

[ 3103.294820][T12912] loop4: detected capacity change from 0 to 16
[ 3103.298708][T12905] 9pnet: p9_fd_create_tcp (12905): problem connecting socket to 127.0.0.1
15:41:09 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x8000000, 0xa198)

15:41:09 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000180000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

[ 3103.374729][T12918] loop1: detected capacity change from 0 to 16
[ 3103.427653][T12925] loop4: detected capacity change from 0 to 16
15:41:10 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r1 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x1000000}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB="4b08cd19ac73cb3f491213941f4b338698d0eb1ad43ef2fe828e4e609298d10addeaadbb3973fff7791279fcd158fd002fbf37d1692532c7cb242dfc6e653580946bc08abd579f16061f84cfc7e5afbd400ac83557daaee642b4fe17c482a22d85cebd2108eabe71f21707c0048d9d0385692eb0d3cb99908d417334e24412cf0bcbb29df3c2c0e0a8c475909ac3478490f7be0d16bba8011fb64d500fb45f585cf3cedb53673de6a2cd044370cfba4a67675540763e9c6fb5288b3185f000fa18da7b8989336144f431047116", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES16])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
move_mount(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

15:41:10 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000190000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3103.658091][T12883] syz-executor.2: attempt to access beyond end of device
[ 3103.658091][T12883] loop2: rw=2049, want=17, limit=16
15:41:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x8010000, 0xa198)

15:41:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc00000000000000, 0xa198)

[ 3103.732846][T13034] loop4: detected capacity change from 0 to 16
[ 3103.733989][T13035] loop1: detected capacity change from 0 to 16
[ 3103.785772][T13038] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 3103.801838][T13038] loop2: detected capacity change from 0 to 65536
15:41:10 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
truncate(&(0x7f0000000080)='./file0\x00', 0x4)

15:41:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x100000}, 0x0)

15:41:10 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000250000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x9000000, 0xa198)

15:41:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd00000000000000, 0xa198)

[ 3103.858206][T12905] syz-executor.5: attempt to access beyond end of device
[ 3103.858206][T12905] loop5: rw=2049, want=17, limit=16
[ 3103.892741][T12916] 9pnet: p9_fd_create_tcp (12916): problem connecting socket to 127.0.0.1
[ 3103.930704][T13045] loop4: detected capacity change from 0 to 16
[ 3103.943677][T13049] loop1: detected capacity change from 0 to 16
15:41:10 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000600000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa000000, 0xa198)

15:41:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe00000000000000, 0xa198)

[ 3104.012981][T13054] loop5: detected capacity change from 0 to 16
[ 3104.096892][T13060] loop4: detected capacity change from 0 to 16
[ 3104.114786][T13062] loop1: detected capacity change from 0 to 16
15:41:10 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x14040, 0x18e)
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00')
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}})
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:10 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000680000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb000000, 0xa198)

15:41:10 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file1\x00', &(0x7f0000000240), 0x20000, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)
renameat2(r0, &(0x7f0000000280)='\x00', r0, &(0x7f0000000300)='./file1\x00', 0x2)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000080)=0x2)

15:41:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf00000000000000, 0xa198)

15:41:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

[ 3104.264309][T13038] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 3104.313485][T13171] loop4: detected capacity change from 0 to 16
[ 3104.320647][T13173] loop5: detected capacity change from 0 to 16
[ 3104.326484][T13174] loop1: detected capacity change from 0 to 16
15:41:10 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc000000, 0xa198)

[ 3104.373917][T13179] loop2: detected capacity change from 0 to 16
15:41:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1000000000000000, 0xa198)

15:41:10 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100000000009c0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:10 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
openat(r0, &(0x7f0000000240)='./file0\x00', 0x8000, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0/../file0\x00', 0xa, 0x1, &(0x7f0000000180)=[{&(0x7f0000000300)="3823a0d71eee4817dd488f97c9453e68646ce1ad002e3cf174dc56813d65308f07f08914db5fb34dd087c0fa288488a44a04e685229b9a3b5c4ddf19af20bbad0d3892925b4e4096d157a8163e703f26658a0be6d55fc2c4e85e82a392799fa5d4e848e2fff00590b3b20a58ac603e3f0b90319dcc78e4cd57f40a3267615f4d0edffc47dcec98c609d37e64c97aa3e2b140fd18a85fe443c0bbb662612a8acdb5a818ae4363e618a11140e09d5c91f1e1bf2acec03f260871ced209e42ba8116ac5ef2add8e0affdef86d23a77189724c494ce2489376c3f61cebeb6063a9f2d1622655fe4f67fd76e7cfff8c83dfd77e316f23c2093571cb", 0xf9, 0x8001}], 0x2000000, &(0x7f0000000400)={[{'\xab'}, {'vfat\x00'}, {'},'}], [{@appraise_type}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '@'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@appraise}, {@obj_type={'obj_type', 0x3d, '('}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

[ 3104.476576][T13269] loop4: detected capacity change from 0 to 16
[ 3104.515093][T13290] loop1: detected capacity change from 0 to 16
15:41:10 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd000000, 0xa198)

15:41:10 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1100000000000000, 0xa198)

15:41:10 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000ffffff9e0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3104.582528][T13299] loop2: detected capacity change from 0 to 16
15:41:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

[ 3104.649076][T13303] loop4: detected capacity change from 0 to 16
[ 3104.718331][T13308] loop1: detected capacity change from 0 to 16
15:41:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = eventfd(0x7fff)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x8)
creat(&(0x7f00000000c0)='./file0\x00', 0x2)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
setrlimit(0x9, &(0x7f0000000080)={0x2eec, 0x9})

15:41:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe000000, 0xa198)

15:41:11 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000058c40000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1200000000000000, 0xa198)

[ 3104.889464][T13173] syz-executor.5: attempt to access beyond end of device
[ 3104.889464][T13173] loop5: rw=2049, want=17, limit=16
15:41:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

[ 3104.936057][T13316] loop4: detected capacity change from 0 to 16
[ 3104.938414][T13318] loop1: detected capacity change from 0 to 16
15:41:11 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000ffffffef0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1400000000000000, 0xa198)

[ 3105.020933][T13325] loop5: detected capacity change from 0 to 16
[ 3105.111842][T13332] loop1: detected capacity change from 0 to 16
15:41:11 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000fffffff00000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:11 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x10a)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:11 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10)
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
setrlimit(0xf, &(0x7f0000000080)={0x401, 0x9})
getrlimit(0x4, &(0x7f00000000c0))
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1800000000000000, 0xa198)

15:41:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf000000, 0xa198)

[ 3105.173943][T13299] syz-executor.2: attempt to access beyond end of device
[ 3105.173943][T13299] loop2: rw=2049, want=17, limit=16
15:41:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

15:41:11 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000fffffff50000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3105.240365][T13437] loop4: detected capacity change from 0 to 16
[ 3105.252881][T13439] loop5: detected capacity change from 0 to 16
[ 3105.262409][T13441] loop1: detected capacity change from 0 to 16
15:41:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x10000000, 0xa198)

15:41:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2000000000000000, 0xa198)

[ 3105.310341][T13447] loop2: detected capacity change from 0 to 16
15:41:11 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r1 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
setrlimit(0xb, &(0x7f0000000080)={0x6, 0x7})
dup3(r0, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r3], 0x8)
open(&(0x7f00000000c0)='./file0/file0\x00', 0x400, 0x90)
lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@random={'trusted.', '\x00'}, &(0x7f0000000280)=""/39, 0x27)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x1, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3149}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4045)
r4 = signalfd(r2, &(0x7f0000000480)={[0x20]}, 0x8)
inotify_rm_watch(r4, r1)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

15:41:11 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000fffffffe0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3105.394246][T13530] loop1: detected capacity change from 0 to 16
[ 3105.402045][T13532] loop4: detected capacity change from 0 to 16
15:41:11 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2500000000000000, 0xa198)

15:41:11 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x10010000, 0xa198)

15:41:11 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100007fffffff0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3105.524989][T13564] loop1: detected capacity change from 0 to 16
[ 3105.525387][T13565] loop2: detected capacity change from 0 to 16
[ 3105.552844][T13569] loop4: detected capacity change from 0 to 16
[ 3105.627159][T13565] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
15:41:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2800000000000000, 0xa198)

15:41:12 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010000100009effffff0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x11000000, 0xa198)

15:41:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

15:41:12 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x801000}], 0x8010, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="b5bd52e1ff71140c2a18b51ec78d13bfdf471b62b07dd52128f10aabf728edcde9446762efcdbcfd94a1ab25a3c737621cbeccef545d854fe6fa31624d3bd51ceadcafb375bb0437176bfa6eb29da6e0dc1e295c82dd9d4e97e26d63cffc0a4819b6b2ac77676aece6ebf8de8cb98d8b021a548c4640c6accb7b78c6b5e320477fef8fde5f5f7c6fa00cf9c2daad0b5c6a90488061209a085eb7d80a887689d15fac15ed1006d8bebaeabd1b606c4bd2340720c9996c07761b461d10cf7d99d91c4a9c9e5b1713003f383654d75ae9d2a37aa451629d922ece1a28c55b650fe092c06962", @ANYRES64=r0, @ANYRES32=r0])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1101001f00000000000028000000060006000000000005002b000000060000000000000000000000fc362a2d0200", @ANYRES32=r5, @ANYBLOB], 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x7c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1000}, 0x4004080)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r7 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x240000, &(0x7f0000000300)={'trans=unix,', {[{@privport}, {@cache_fscache}, {@access_any}]}})
sched_setattr(0x0, 0x0, 0x0)
write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r7, r7, &(0x7f00000001c0), 0xa198)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8000000020101010000000000000000030000060600124000040000280016400000001000090000000008007fffffff00001000000000010aff6ceb00000400000000001c00170000000005000000800000003f0000000600000200000000031c0018800800014000010001080001400000000708000240000006a406001240000000001800028006000340000100000c00028005000100060000003c001080080001408000000108000340000000050800014000000004080002400001000008000240000000800800034000000400080002400000025010001640000002000000000800000009"], 0xe8}, 0x1, 0x0, 0x0, 0x840}, 0x41)

15:41:12 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{r0}, "084c93112290ecbf841c82573fb74fc11595032f08891dbf13e37dcb9c81c84afaa43723ed2849168d7926f1a8e4df2cd2a47626cba12ea877cda08654318f0b24ea4847b9963bc4a43b81130c2f1be9f2cfac450742f4689066984f973f3ac9227d29df6cd09a6c9fd058d50ad9ec4d4b8b8cc1441ae8dda422678e4437dd9882aaeded378e0b5c5c8c435860738138fa34d4117f5b6059bde98cbf098ba8ee465e589aaad15ca7355d95c5964694c9caf19a8fd3ea249d5ea33fff2192cba12692666723e0fc98c8a475f5185730720b46c12a0239466600de60c90fd886830b9920463f74df3fce003980f9c58ab8001d2d8931b2a736449f52783553d323eeb0c4926709ac944d9297ff51e8b7a311cfc5ee196f5d97ffe370fe73cb80fd67818db8a0cb8069a7c06a5f97d22712374e2b280b90c2b654be359ea4df427858cc98fc23dec0d6fa881f61889243f73ab3a1f110a516fc160294d3269410f5c0f965d4401bbc3c9aded41b65e28355e6769d2d77ea00eb281f9a90fd41cf67d6dc945ffef61093705164cb97c3f7e5fcc5eb5fb40e7e42d4c32c2320804a415b5c85070bfe0059b0701abb4ba59d34a3889b50586ff660520f21427cb6b8eb8e3166faa6b7995d27b957379b5f62e6812c5b532f3da9ae749d53ff69acf16191b887aa126940314adcfacf18d7187ee5ac50a4d54901071d6542a4b0db8c99df932a83c7eb2d9ff65353a98dcb0e1ac0a180829aac48883e6423d49cde7e8226a6824866d0dd16be46c1f81b164f4d2194265e7686ab842fad0e1e2723af7a83ee9de057e6f4d699ecf8ac3b1dc5c77c82c153bb374712ab234fe193cab84c44cdc4c482fd659a199959d48b7555258bc4296d5d5edad01f17aa709c2e2c7ef91e998a55c0018e654e104275dc6ea10c4d035f012d9e876011d8b8fc26cf1bd0450da5f5f0d2237e56d639533c6a3d1108a18c49006691c049c0b1fb856fc0b2cc670821f2dc9630abe42c1c680403771af2ab158f943e808e479c6e79f8e4916e1992e13b9a053bb7f5b472ebe4ec9566c9060672c2fd1ad69b035bc0c65edc3e47fa7531f13664b32bd9eb44a4578a7922fe6eeb898b433553753b596d35ad2708a3639745102db3593b2bcd5189c8e8d18582ac37def41e10d0d0a1995be741db65d256c67a84692e08e4b1dbb097b077ce93ff1d3876eb652dff0e40b4784014295d67cb95a54223a1ca4b6ec91c09bcde34e094647d8997cd9f0c73bda6187dc938ddc781908a764243c44064cc2546a51b1877564c9aecb522b755c66ea549263dc20399108072604b401e09ce72361e4a0bece925122afccd63312a3777dce2a7063c006f946526937eda55364ffadff321de04b5cb3ce26debd0dbe00c79f1a12522058fe459df60655ef4aa7ccdcda1607e6fc968db1634bd2d40481b6dd50506cc736d3491e6a9f9f569e6788e9f6a6c91444685f6a890a4303288f174c9b50749b0449b6ceed49e3fee62087a38e00c46baad81b2c3e81d2fe3425092e3eec2dd81baefee29a8e8207f0737e6b0afd45de3e0c70edee3704bba43c2343fbac09f138cc995f3f90e290056f8c3afd6a5f00af9c817bf8048ce95709f5222af11f653ab3f81b2e3ef5a9551cd76f350e461f72f9fa89e65f33ec3526a059e8c10ee1142454627d2e87fd14830f8045e85d5aebc5f62062b038d63d79336b81bb0a606827fe7b6722389bdef61e53a4082d65c181a050254c0fcd374d0da50a0f4af4352c50eb1bfdb8ddd28e46c7b1e40ad8316689c56062f812e39b721c3be7483fcc59fa12f529efb3f49e9a7b6d56b988dbd2ee68c6c18b9a7354e80b0924602c2ef2bb2121195a7a84c7b9d89584a46c93f8c37db67cc83d05d7b9b5b737a118172a33525afcc0ac5490b579856b1bff85756f34ae96e46fdbd4e315ce2a10bc1960ba0fa2288c7d53466c0a22a434ce249df3ed14c6643d7275f9b26471bb51ebd5304438dd1d2977d4124d5cee6f0ea72bc1051547d4a41d62c33494a165fe5605da78d5041a3d574ca38989da94864fda8734636129df7115d5a566c2a1a7bf1df012c529acdaa6d93726b98b01424901a4c87c2e6e130d56c2a1e17070367e68f5c49c69524c9f8bb76f668174afcde3f7a316914a2fc83720baa3e21d9bd0489c9e797243950a070d56ccfaa5ea90ff09c6e9284c932b626cc4fbc126c07212255790b466ef0f6302e73d1714ab78e2c0e1ffee27088b4c66c3faf7b4fd6ad996b9841c6c02d4d2b493cbbf1eadbe94db969e2dc0d52e0b6e05c9f22252d2de93d9c43ded82d754cee9bc874e552478cb3319e53bb50c7a82f76aa73f4907db5ce136f8c55a5e0a1977c328dd6639f6f17ec60bcb414e70f251397ac68aad960e5b83a74fc5278bddde21ea7fa3fac6f3b8bfd9bfbe798a809f3593cbdd52e929b6c546013f3efd50d30fb5d341443089f8174202f3d49bfb5217d8e03c06312cc30761c7b32fd4c607b0279fe32068f2dc23c05587633fe59020657298d4225664d19e8e6eb2c7c76692f13d0961d668ff4eb248810e3d728f11c76b1e028f6a60f921c41b8949c600cd1936e84222725aa3a081ae2c1d180ce6881b59c7d9cddcdfb8bbf996c21428a7f5cff653e4af071c7c2f4fae56eef07b13feeaf7a8a7c0b08dd1b573c886db6c837b0e35c1476a9b5fd860e7cf6fc81e1cb36d57ef99fc4c645fb08cc643288c0f03d341cb59136dff35db2217bfd0bf7440e4806d494c6b96a81fd1f3fa87bc557a5c001cdabcf278071baa1aa19bf832969904b4d695e13c570304d584a3337a51f06b46d63e7d397373a528bfb544cb17bf167474b2c5247b8ac7e6d9583086d79757d736420adc15e525f3095aa92615f5f90ad1c7d03e0dbcd406c96f7ac4fbc2635b56c9d60b6dff84886d2e3944a8ec1751e92e28eb8cff5a35542c1a1319a41fa747d69f5734c1625bfba7814d5fa55137f71eb3f5ed1129d37c7e9e6b37e93dbf8cd47e29e88420b77cb80ac591a03ee073187960013956abbdbbfb20fe8fd9f17f90f8fd210d27d08d72ac8353fd206b18e81ef23ed7c3eaa69cef22c83c4018c199da637ceb0cf38a3e2030fc6eacd884dd3fca021aade6bb8b9fde11ff896bf3e77a2c6bd61b4009c479eea84d2aa3e69efaeffaee7079045e234697cb01dff7f08b1cf1638d97dcff4a72b369dbc8280d374283d17dcea082de122151a617e33ace9075b9fbca4802c30701853d6632c9e95aa13d60f3c13b4528ca10ccfcb381a18ffc873764960f0346a25eab9d022c0fd73aacfcd55b7ce40c95ed2c915a00702bef618b55977bf50a5f1fe53c7a4f48670a64963863abdf2130701e54141adf198d50511f73ace401040c0b94245e730c889b5be82e1fb937cf037697efc1dac1e11f66c93adf73563f010f446268c2bd08aa46edd14a9bd37ba61f92b5bc8890906af4ebf79d14fa8c80161df59152966d03ad111c3233e02750534bdfa1596f19a0619ce7269f8eb919a8213cb4655be1ef9ea22b6647f4ecee1e620e71eec340e2bdd041127ae6b3efaaabdc4464eadd7e29c0b0590e5e46053534db95fc6d1db5e92daf5ff71f06b1beff544ed176b057bdf641f4583d53119208132541e0765b48029fc97ddbb1dec5a392a4ce0893016ccc07d97955370d9571db8f65834aefd5bc8aa037fbcbac5191442f24eba6a75854add7f2cc91b6f71b7e852b5e4c20579f930cc1e517397ae01be458ecc661672a7efe71efd36767625dfa59d10c0d23c91657645223d6555fc608bd57b14b54caf554e28cfa4eb8472af1bff77e7b0632856297eb88dcde16a179b265b1ca4e616a86085cd3ca4f92f263bb4b1a9dcb29d916f7d5806640c66459016a98605c2f48d2579e0e931b17c235b1965919b01c24c7f9abe20d49274a1d742dab14cd547d2045332303f86c45a6b7d1c5da71b40ed08a0accf2ddba121b5ffe77cbac94b93f2e191e801db2d6ce7b4d4ccba7c7bacbe3008a8db578970e054cdee6c44c60c30005a6c3aebd941dc1bf6c109939bb525c3ccf12d5cd7f02c1e954c8be763f58b2694d71b444dc12bfaa95a261906770df0441df1d29e557dfdc9bad2418dad8358c05e4263e71cd7455640dc60d298235143e7f04798e6dd1948df8d27f35fa63fa3f4067bf5036349cb93c90ec36ea5f41acdf8b22966368ca5c14a369ee5483c86b9720f22180833fc602d9c21e5e970c58ef5e73f1657043d66685e939825eb6d8f70e30983f1af279ff3996febc28969f1dd77d7084e2ca40aff79166b0ab754201a00ee3d2be04989ff0c4f1922ac1c33911edfd984d14e562fb8de642c0b15b104ebd5b6b7a79aee95883cb58bdd732b6b15a674c1a6d2cdb7dc33e02b0dffe98ffb3fa85d1562f8cc7056edba9b3e5417f7b01f8f89f3d95e15982c9b0a231f447b1537b7fefaf4de65dc63677c92b0c611883bd896ff253a8b394cfae3225e3d7304f37484627d3bfb3e248b3e76adb87b8d34fc60756c0c9cdd692d77c21d3f0dff8e3e11c7453a56d1f7df62fa690e1bbde8511eb3401913eb439b6f0f893faf9a7b1c1a4fab3b43676b049aaf1e6874cd68a7d59a12d2d58b0803e7a63b041bc7e4b467c40fa2f9c30add4729d3e56c4494596dc4dceca2eebe14922e54764f27f308c613546e28cf3feac24421028517896486fdee7015b4af9ef0e8c12cc0451b8d357a2a08cc4a4ee185127abe6a3166cc602da0b18a15612e6cc6a4dce738028d27376dcf7929b27aea2ed37c049d16eb38c6afce13435a41eccb7edadb521b9dabe79af49f02a0cc47d951fbe59ccb379f7ab4be2af8cf44f864948bf47e70efac63b9a1b537f77d038bfdb6c7e4e5474273cfc201076e24e5abb09991bd6a50f2227effa852032cfa68ef7a17fe2cadd35d522d9e4c5d1e743916ad5cdde9e2fb79da5a1f8af934e08c015bde051878e5d521ecc8f0eac3c5f8f1814f90a4adfd157672a56dae5947ce97839d01a4fefc47523796586a49813c304edb70a7dd25018debb01194b32e6026069fb65d7fae885e8b0c0e177b707cb630249e20bd60e72a8a91fb9e1f637edea86bd69d20cb9ce2889c656f3a4e15825dc7ee2316f400213a2176d8eb975da41cb3ef872e313137e6e5e43369ce0b49d46a41c9f734c1c6bb1d2d65075d1f5d9dbab5d6eceb011753d3032face2f8de3cd19c5372d18d0f3dfadf84adb724d0a932683f16c17a1a96d59563057ced1bf9f57041fbaa3a3f4018eec10a6339c2a849b14cf343cb819397d4ed0d4f19ad6a904eb52aa8c83cb80a01b3dab024ff273697b580e221b365936c85dc563eca7560d17a9cdb62101c2aec7b293972b06d0f838d05226a2213500e9b261b650ea4832c3fb6c54282a8098e37cc43eb4a4c0cc4c2c691661aa1d7f4ac03c2b8a0d6a11bd278ce59c3a2f27713b22a8ee42afe8d45f65772ba001699fe85c69f82f96f508a04e5db3fdc4ca642b76422fbefa15b4790dad1edc428df8a6a19ebd3f343a7f74d4186a05fb524cff6aef00dceebf4a550f52332dc70cccb55f01e4c1de2d6430c67160ae49d22e4b5be5cb7486e3869b4a0723f99535c0df1735c00b7e134f6674d2e4994bf87104e3350691f970c5b79c159085383732faed6e1139efa644ef8dbdec0209638a035e7a11493065b8554a45d8667b1d946ac3f44b0f4a5a68662e49cc3699d8be9896854f492594519bc10aa251124991061d4ea0b42"})
r2 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x4000000000010046)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)=ANY=[@ANYBLOB="36f4dbb994f346545d234c3713d5b77600220000001a0000000000000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
creat(&(0x7f0000000180)='./file0\x00', 0x62)
setrlimit(0x0, &(0x7f00000000c0)={0x3, 0x1ff})

[ 3105.783943][T13439] syz-executor.5: attempt to access beyond end of device
[ 3105.783943][T13439] loop5: rw=2049, want=17, limit=16
[ 3105.822751][T13677] loop4: detected capacity change from 0 to 16
[ 3105.831810][T13679] loop1: detected capacity change from 0 to 16
[ 3105.838813][T13678] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 3105.870905][T13685] loop5: detected capacity change from 0 to 16
15:41:12 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000efffffff0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x12000000, 0xa198)

[ 3105.882920][T13678] loop2: detected capacity change from 0 to 32784
15:41:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3000000000000000, 0xa198)

[ 3105.971922][T13692] loop4: detected capacity change from 0 to 16
15:41:12 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000f0ffffff0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x18000000, 0xa198)

15:41:12 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x3fd}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3106.037899][T13749] loop1: detected capacity change from 0 to 16
15:41:12 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
mkdir(&(0x7f0000000080)='./file0\x00', 0x2d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:12 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000f5ffffff0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x37797c0300000000, 0xa198)

15:41:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x45cfeff}, 0x0)

[ 3106.126704][T13805] loop4: detected capacity change from 0 to 16
[ 3106.134848][T13807] loop5: detected capacity change from 0 to 16
[ 3106.155483][T13813] loop2: detected capacity change from 0 to 16
15:41:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x20000000, 0xa198)

15:41:12 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000feffffff0000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3106.194778][T13816] loop1: detected capacity change from 0 to 16
15:41:12 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:12 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x25000000, 0xa198)

15:41:12 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3800000000000000, 0xa198)

[ 3106.266099][T13865] loop4: detected capacity change from 0 to 16
15:41:12 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0xb0}}, 0x54)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r0])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

[ 3106.379018][T13930] loop4: detected capacity change from 0 to 16
[ 3106.384609][T13933] loop1: detected capacity change from 0 to 16
15:41:12 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000003400000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3106.422198][T13937] loop2: detected capacity change from 0 to 16
15:41:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)

15:41:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x38a6ad0400000000, 0xa198)

15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x28000000, 0xa198)

[ 3106.683619][T13807] syz-executor.5: attempt to access beyond end of device
[ 3106.683619][T13807] loop5: rw=2049, want=17, limit=16
15:41:13 executing program 5:
prctl$PR_SVE_SET_VL(0x32, 0x3348d)
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000400)={0xc5, 0x29, 0x1, {0xffffffff, [{{0x80, 0x3}, 0x7, 0x4, 0x7, './file0'}, {{0x1, 0x1, 0x1}, 0xaf9, 0x80, 0x7, './file1'}, {{0x20, 0x2, 0x4}, 0x0, 0x1, 0x7, './file1'}, {{0x2, 0x2, 0x5}, 0x1, 0xc9, 0x7, './file0'}, {{0x80, 0x1, 0x7}, 0x8001, 0x0, 0x7, './file0'}, {{0x10, 0x0, 0x1}, 0x8, 0x59, 0x7, './file0'}]}}, 0xc5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x4000000000010046)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file1\x00'})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$chown(0x4, r5, r3, r4)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$chown(0x4, r6, 0x0, 0x0)
chown(&(0x7f0000000080)='./file1\x00', r3, 0x0)
r7 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r7, &(0x7f0000000300)=ANY=[], 0x0)
sendfile(r7, r7, &(0x7f00000001c0), 0xa198)

15:41:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x4000000000000000, 0xa198)

[ 3106.751608][T13950] loop1: detected capacity change from 0 to 16
[ 3106.761430][T13951] loop4: detected capacity change from 0 to 16
[ 3106.782810][T13937] syz-executor.2: attempt to access beyond end of device
[ 3106.782810][T13937] loop2: rw=2049, want=17, limit=16
15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2eff645f, 0xa198)

15:41:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x2}, {0x0, 0x0, 0x1000}], 0x9012, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3106.839137][T13964] loop5: detected capacity change from 0 to 16
[ 3106.865415][T13993] loop1: detected capacity change from 0 to 16
15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=@ethtool_per_queue_op={0x4b, 0x16}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r2, 0x2, 0x70bd2a, 0x3ff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4801)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000000), 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r3 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r3, r3, &(0x7f00000001c0), 0xa198)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

15:41:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

15:41:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x4800000000000000, 0xa198)

[ 3106.969883][T14072] loop5: detected capacity change from 0 to 16
[ 3106.989165][T14074] loop4: detected capacity change from 0 to 16
15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x30000000, 0xa198)

[ 3107.045310][T14083] loop1: detected capacity change from 0 to 16
15:41:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5000000000000000, 0xa198)

15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3107.125758][T14091] loop4: detected capacity change from 0 to 16
15:41:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3030915f, 0xa198)

15:41:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3e8f070020002e6641dcd62a4e0ae966400001", 0x14}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = creat(&(0x7f0000000180)='./file0\x00', 0x1d5)
r1 = getpgrp(0x0)
prlimit64(r1, 0x2, &(0x7f0000000240)={0x80000001, 0x6}, &(0x7f0000000280))
perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x1e, 0x5, 0x1, 0x1f, 0x0, 0x81, 0x404, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000300), 0xd}, 0x8804, 0x6, 0x3ff, 0x931f0641f4dd8044, 0xffffffffffffffff, 0xfffffffc, 0x40, 0x0, 0x401, 0x0, 0xa}, 0x0, 0x7, r0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00')
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

[ 3107.205351][T14197] loop1: detected capacity change from 0 to 16
[ 3107.260815][T14200] loop2: detected capacity change from 0 to 16
[ 3107.292322][T14204] loop4: detected capacity change from 0 to 16
[ 3107.365307][T14136] __nla_validate_parse: 88 callbacks suppressed
[ 3107.365323][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3107.404645][T14305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
15:41:13 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffffffffffffc, 0xa198)

15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5800000000000000, 0xa198)

15:41:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x30c927df, 0xa198)

15:41:13 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
r4 = accept$inet(r0, &(0x7f0000000400)={0x2, 0x0, @dev}, &(0x7f0000000440)=0x10)
ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000580)=@get={0x1, &(0x7f0000000480)=""/244, 0xfff})
keyctl$chown(0x4, r3, r1, r2)
mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x40004, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=unix,debug=0x0000000000000081,cachetag=,uname=\'--+\\+,posixacl,cache=none,noextend,cache=mmap,fscontext=sysadm_u,smackfsroot=vfat\x00,smackfshat=vfat\x00,fowner=', @ANYRESDEC, @ANYBLOB="0000005a6621d9a927e74475dfff6d00000a0000", @ANYRESDEC=r1, @ANYBLOB=',\x00'])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000005c0), 0x2080)
sendfile(r5, r0, &(0x7f0000000600)=0x4c9, 0x7)

15:41:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

[ 3107.504388][T14072] loop5: detected capacity change from 0 to 16
[ 3107.540034][T14313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3107.544444][T14316] loop4: detected capacity change from 0 to 16
[ 3107.549806][T14314] loop2: detected capacity change from 0 to 16
[ 3107.556474][T14315] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3107.569697][T14312] loop1: detected capacity change from 0 to 16
15:41:13 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3161be5f, 0xa198)

15:41:13 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x6000000000000000, 0xa198)

15:41:13 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:14 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r4 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f090000732e66617400000000000240008080f801", 0x17, 0x9}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES16=r1, @ANYRESHEX=r2, @ANYRES32=r3])
chdir(&(0x7f0000000040)='./file0\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6d73697a653d3078303030303030303030303030303030342c70726976706f7274ccec50b46a9a3738c42c706ffa547eec8149d65c657273696f6e3d3970323030302e752c6c6f6f73652c616669643d307830303008dc76000000000030303030312c00000000653d6c6f6f73652c63616368653d6c6f6f73652c00014cfab708dedfe13d124de581d6e61ea3412e6c05de5cd47494e3ee950a41d8a0469d8cd7f3b6607519c3da705ce96be35168b0fde8e36ec51b267e74b1d28bfefd64c32c2dfeca8d781b047217930d1915ea911cf46fcfb85b1e99158415aea3e777f359409b39326627ca5dd3ef3df31fef6c87daab04f82baa4bac"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r5 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x8)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$unix(r6, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x8010, r5, 0x8000000)

[ 3107.689164][T14367] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3107.700133][T14420] loop4: detected capacity change from 0 to 16
[ 3107.717049][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3107.727518][T14429] loop1: detected capacity change from 0 to 16
15:41:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1c1040, 0x8)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)=@v2={0x2000000, [{0xfffffffc, 0x6}, {0xffffffff, 0xa649}]}, 0x14, 0x2)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x10000001, 0x9, 0x2, 0xffffffffffffffc1, 0x6c4, 0x660, 0x6143, 0x2}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x31fa54df, 0xa198)

15:41:14 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000900000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3107.738233][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3107.754966][T14431] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3107.772409][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
15:41:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x66cf010000000000, 0xa198)

[ 3107.794064][T14431] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3107.807582][T14436] loop2: detected capacity change from 0 to 16
[ 3107.815500][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3107.825050][T14431] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3107.830350][T14438] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3107.868497][T14445] loop1: detected capacity change from 0 to 16
[ 3107.877291][T14448] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3107.881914][T14472] loop4: detected capacity change from 0 to 16
15:41:14 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3107.922711][T14431] loop5: detected capacity change from 0 to 16
15:41:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x38000000, 0xa198)

15:41:14 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)
r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$chown(0x4, r2, 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000003080), 0x800, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r5 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000030c0)=<r7=>0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
getresgid(&(0x7f00000043c0), &(0x7f0000005600), &(0x7f0000005640)=<r9=>0x0)
sendmmsg$unix(r1, &(0x7f0000005700)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000300)="4c3741e41a7eb24abc8d0245d2380b2087124a400e7b0543ff9ff9669111b53e5c02a4b1f8e4edba2d114221ca7a23e2af358cf594f7a23342c2762993d96e99d859cfcd23703b64ebeb1fa36f8fc3928eca9a9a5101d18aa0839602b92f265a90e1d159148ef49aa2ce5abe47f064a4e9008d00d410f62f13a23df786e9eb566a27c3cdb05ce65f3d787380e7c0", 0x8e}, {&(0x7f00000003c0)="962259867bc831fd2a719e30c7860170dcf4086d13f689b91a83bf2a52390561ed9ce837d6c27ec7289db14b5b593c7182a8ae096424d7eacf6a2036858468f6196fcb10be6014c81a1abdf21eeadb57c40e6c0690ff5a5068b1cb113536b8e5e4a18b66cf4047c2e4c533c877841a0066b07118fb8c4a82d12db166c1e6268d97effd55994f30c441b350aa9be15d92bc3e8278572d7493072a7b3fe76a52", 0x9f}, {&(0x7f0000000240)="3df11dcfb543b2c127309cded92622ab2c0098435dbc81443d26ec9eb551f123c62b26caa186c595478bb305a392fcebcba451c2cf3b1fc1ace7e7554fe4f88ff543b8", 0x43}, {&(0x7f0000000480)="ff44fa3015a55e46e47be5967a6a4371235a6c1a10db5b6369063fb17deb0f37b6e11a9300093144586d01f697a7e89f2d274037db950d562c62338e9dba698bcda9c4c9624f692adbf7adcc7f0b7531357f0eeaffc2bee9ebba65cad55c034d4ffd2b3f55aeab81d63c28f2bd0a3c90e60f18e45d1b01e402bb7e2176e6ebd64682c7ab7db52f247217c28cbff026ae3726849a2524d008e8460405bd23259ed75b60976972c5dd3ae231aeef0598bd025a7f8bc5cb06aff0485643224f7add909f1e982810a9d784092a721762b9910ef377d6", 0xd4}], 0x4, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0x40, 0x20008002}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001b00)=[{&(0x7f00000007c0)}, {&(0x7f0000000800)="41a32fc2a4bbee0767018440e06a5f8bddd80b299218009f065906ac1ae583161cc15b4f984e3eb74e4be972dff3619653b196506829940df409f892e51cd169df4d06f2f00e03cdb3d8c04d9e", 0x4d}, {&(0x7f0000000880)="cbbe5c4ee6437d9fe28e5bb153cfe0f68d790f6ffab35e259e5641bbef5baeed9f9f", 0x22}, {&(0x7f00000008c0)="71b0ba27407a3ad3edfd0981dd902bd8940e36c9e2dab50261f36648f35fb450751e27c998b0c53b28ef47d894c79ba6a8e5b60b3a3e51ab532c1e763f00daa82096692e4a2673dbe43efba5d8f8624f7a8e699b909fe505aff92594e7ab9610c5975c682de317c8c5ac1a1e7f1cc82fefeb0c5c7ce0bc065a8c4d1de59d72462806204272dc4616d431b896ecec6ae9adc06c505eda63e6f5640ea5afa526594ca38e358f42bc1b7678b5b740", 0xad}, {&(0x7f0000000980)="4d818b6daf1dd00f6a4eadf1146e28cfa4c46fecce5ad371a2b24b820e166126c42de25df23437e794c7523f1b76f8b0fa4b94b4c2f0a4aab9768425873c7ec5cc2e53e66556072f08fe0568a53b9c2febd90c5cc4dadbe0142cb6d5e6a335ffd0964f9282a111a345b3db43640e3f1bdd2dcc382461657acd67a356914aa2d79feffbb768b749ed4bd2c7cbe1bf39b3096176c5ffb214e5988d1cdda0f1e440e076a932025c2d4957cf2b8e7b173c41c102bdf2a6f71f7bd83baf02d1e0f340a4870691ed80", 0xc6}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="6cc3d754cb6d7b4d33a66395d0e05268baff76716b02377dce640c2810c6c21a83cf046b7e21011b286fa2ee42c6555f33de", 0x32}, {&(0x7f0000001ac0)="ecf77c7d89b5", 0x6}], 0x8, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001bc0)="c0875ad4234b78170e41e4cca87f46a06e8ebe79361bf9d5596ab3c959ab2409437e41162cc7808a23e4133db432900b327fda0b3cf38066df5fdb08d4401a3cd4a250f7e9d7b535a040ef46387b5f56ef7a4d595003490897b5c3c5951123fd96dee5ec7749b407c566f0f2035fc5a139c2a426f97da410961e383de42630a8f0dd92d3bac360e1c7a943f1df59d706bd31ab86cdcb5c4519ef2384f39fe8c1c2b206a65bbecd5de9b060389e95b4ce5224bd31169817046d45d7c017", 0xbd}, {&(0x7f0000001c80)="e987fa44d5a8585b215f8109fe65fce3db7812633a9b901c425a8c8787de01a4140df9ae09e697fe590fdbdd812b67692a9d045b3c015efde31f7350db4501d0160b40b7dfac5e753befff82a28e0f79b3c1be2a56c293869bd8ca110a62864546a448a048dfe0c147eac4f8eca93d8f134fba1e1538e340dad8b7bbdae183051e55ac994809488317bae580039075f625745163c3775286c019a4c0ca3dea80e2011cdad9412dea9a2fad24e14577138633a6af55cfc467f2321c49f628f888259d05ebe2ad43324e64f0baa43be789bd0ece6f60c382cb97011d479f9a3045dda3fb3dd0d3acf770b588786954ec660a7056d81f87fa6be5c33353d335e83ed93f92735f1d208eefa5e2554bebf57c7ce92ef1fe6ea09007150b187a7a66bf62e6be5d10361b8f00fd1d560a5bba37f4f8f7e63e28fec09a49cd494236525a59858f6d01a4642be1111ec78ac0bea80e0c59e65320c0ae16caaeadae90fd95e1607ca89d67bf79065014c1275470a0005361cc810d506fbd6a0b888ed558f62baf13b04eeb739a685c44f26c57c75374aa3db42cc1bf44573a9ebac2804e367e7f4875af3b8e60c7a4e64d3f11dd580ea07b53f6d21686544ef907cf064ebb92c74ad376d659e74c066fd17c87332a0800a942de631423912a6cc5fbbf78bb2b0e06b84615f8230c864755c2fff020c02bfd4b4119db44ad347a1d898d518244f05dcd22d48ec0d1d5b636b398d722017e668cf1032eb6ac27e2c67c7b93e5590ebde9b55e5067394b06ea72528124f10d6d8c286c7b357f238110f6f31d7ceafa9e53a40b86e771fa816cdef604a57f16b7a50518a8d271b8d2365c62c2a73008512f8eac7ce20e98d4ac13aa73d80ef3c3b7432e8302d492d79ca029f884adf9016bb2180baa7e98488cb3f53f83932f0a4fb1ace957b9dbac1f386e28de5fb4621d608b37fa3457bc4049d1f901f73daa9f3842c22a3892b6f0afc65723fd5741c432d7935e711946e5b00c95620b4ce5600c5a1634bf03c149b2008c5280b499f24b27e62bde77aa705670b69d307d72c930989cb83cb0471192ac7fd322dc06d78d6e0376745a585c6301a0d7b6eb9fb39de63c81f2ee1fac5eab20fcc00769483a34367c1a9de28602630451f4287d1eac382ae7685692a685a3985fc8ec4b3d5fd564ecea079ceb65e35a27ed41d3bdda9e776baaa44e54a1c735dee4118916c325a79777540e1d2151de3f915efa4f9d2e3c84f719b14e277969d5becc51d3ed5fbd8300f1e9e2f85a60ed7da5df4094b1d9a5f34ce18bc305509808229d0cf316d8ca68d8a336dff61637eab89ab63e213a4ec5e2046ad04667db6274e54706f8bcc87a4d54dd451f6657775f23c2d1834651c97ca1d4bb0803c0111efc344c7ff57e9004f62da17a5301fdbd69c6b30a6b3e657c316cf0a4a7341d78f32105bff9645d22fd872370048d739e30fca9a3f558c46d612862b2bd339e01bf1689f7ce888762c09b3392d628fc694948ab4f57c7a78762dd457b1f3060fae1c433a55b376eb0ac54a575c4588ac6388c573b1a112064242678b6659e184a0ff592685e494161db01ed78e9375c4a9e7b1af1dc53bf591b8a99b537384d4e48b0aeee9575cffe0424a1a99e5ae32c587a3f69943ca78202e0d615d74be71bf8844c1b984aa074b8c082c7aacfaec0c8a3259ce94a833a0fff98a29e46403be72862ba0348e6998f1814431e75cf252b297689fa905b52e9f4063da4135179cad6dadd2dc5ea120954cafa8c96f01c6daee135d6af5a3d232e9bca59b3b560dbca52eb059f9522bd7a3eeaa69e71c8182b64c7e931f61413ad4d7a9401e5b46363d43d0166710a531135f714c87f8462cb709f2b8e8c48ab739cc0e457dd965b946f927a353f51f8b94efb194faed2c3115dd05e98e8b5c13f002448e634919dc5fa5bb18e6b78c18827198e1c8ab8feacdbceea5138610d39ad0d75aa3ec693d8af506ef7f0a1e01ded9e072b60cb6cf4e8d9d5fecc61a489c7390966472e6ab850a4557f43436d68c3303dc48cbad9d222c48643efefc95a87b7a68fe038d68bc8cc34609e9258315177e12fa53a8b85579e3efb6298e8b6917d19dd4121f91988330dfb814535e24e672b21b831ba5f87b4832011cc9dcc5a1a9395b88e2861c5ba003f88fd730325b201436c501619eb8c39cb819a8c8dc0a5c6081357101e23208f647e4af258ccb3d10b60087635e61a8fcbe312df0e1a38b826e67cb8ae4a661ebb9282764dedf0c1e215465d0f9fdad0e0b270bee95df53037c7a1f3c9d05634bcbbe53ce5af05b2bc85658d4769f0b375fccca1233ae44c2c1e49ce87a3aa5771b3f8fd41cc84367214880e3f270718157f537e25980cce6725418fa09a431044ae79b549ff8c91942d80bac1f36ab575e46869e61e29ce550f9bb06b3b800dc8a4caf1b6d371ef03da7eb3f17ca41ff3bab91cf1e788af2f7eedea3a74ec140df967bc896030d8fc099a9c38831d70b57d84250bf726b3123db1b5067a20ff2495ca8c1f9404e9425581314efeae04847997fd0ca6c3f8417f547978d4efd4206511b2a1d1de1a962e3f8086a81eb0eab7683ef99671c723852bdf511214e079dded67a909a6cea943542b9ae4211578f8b6b1121746a37742f010affba57965026febfcd40494a1ffe0cd5790ba882bd0ce93895f44079770e8c862846b5625804fded61b4facccb180143f27ce38e3ba5e6b9902b0db1409701d7dd1a23d5766780ccd21b25b7d3ae953ed70f8dbf8f970b8b66e4872c625ca46b51ca5f921eea5f191ffac46590e0d478c3a25d14529b2049ec4491c2ec96e576341ea9c10959ad70a8feeb310faebe2d3144aebe06e9df184c26997202b7353ecddd99cb4f8eaece93c35ea3fcd1683d8ca0164ee135f2414d73b93c97a2b0cf91a320fa316d2c84f8387f39d7c0bdad01712ea37b84dc8441eebbb5cb8275809bab619322fec4a8d61c19380553f8a67069634f1457ab9c1c39c3b87376cb5f154e5609d766cbad6c4198a10c85809fc3c3470fb008ffdaca29b0da7f80ffef1781f1e0776c227603d314f67a0e71dae7d14363a375f5ef90ed37693486a2e5fa5458acb6630ac5989c492f05a667fbc57a183efc824616ac252e9231f2db32443a5b496de355568bc2005f72bb311afa6d01bf5ee8fc82c764cd964a2dd95eb369296843e26f3d123fbbb30b6d7ad7f6a5aff1b6314c070175e56d9528a8b7c16248e995a24e7f01053fdc4a0e5354657934e801d62d00b130a8afadb7d82be58d8ca08b90415f886c63e6d482e1d889e3926c95c33c3b0d733b7718b67454fbd2b20e49e75d62874f7e7c5f75460dc262a6b97b655f842b314d4d0310a45058805bbcabbd2994ec6acdf910868bab4a05869da3474786099bd5b0a6541d1ddeb1155d50cb230ce8bbd313be67995a70f280ad56fb4bbbdd10554d5937f3930c25d8d13279f0868a0dd7cb9e774041380bbbe83811743c4a02d3bd5e16b167a61d107865eb421366e56f4e803ec8543decbd0846571bfb4acc3b876e0f415961afdf59c45cd66e47b22188be5b71dbcba6e7651e3a9c0f681fe0fc4a0d3547f21a7b266936fe1e22272dc90c3a578fc74f21d870912db5639831a228ee69b52ec51b43d250ef3d0b85a6499072309bde32a1ef3bbbea3da41a2f408dba0915e733b49bc64343d539e8b44b25d6d3a5a99a80c8f818ffa99910c1712384a413db5c3df6482a33f34779e53a1e6b5e21006ecf4ce29e0e7718959765abd1561d4e6affb80acfdc3fce88d5bd7154012e9f0d6480d23d4f74fb94719e9633f824f5d295a3ac2ba421c7f6485a9141ee73fc7f74ed38de161cc05dc65b4259d6558f8e15835ef3bed08de2a3d032eea6853afd2cd07155b60c3d17bfeecf702ddfd63fdd347478cd1fce5fc2b585dfda292aa51372dfba4c675b7f2b660f51316c2024439dd82900349ba14ef6a2b2090ac21a4967a8af5d9a3340b96fbbe76cabba22988fbbd5f7a97773e7b46d5a09641220847a2cdee3a691c92be06769d0e404f7aaf5c1aaf8fc6d5fcd2abdf891ffcb97256add024a454b2f565963ce8ea517e274266b369800aed8fd0b7f86e9198d00443fcc653af533f02982e1f68733be9d0f5add33fd86d37c8c7bf88da9e000e0d7958b470ae9b309fffe63e5b8fcf1510bae683fafd6c46a10c103ec31ba87ac9c01190bafdf5305335b7b45a236f4482c20aa527302778e46d6e1ce05105b162bc8daa689b87c53934a34500c8536404a8d9ba462aeb8003b7e5668daaed266ed343fb0349a3013ad1bed8972e65ef38645ecc040c675234ac9ed4f927977dc1c7bbf4c555a376f6e9d0d5429bf27e292bf52fac2b48fa28f49ae844baa88773aeed6d7c13265a2fb45b3aea37b03e17a48c7033d2b68c341da3bd9359c8afc6cb9306daa511c5e4c1737e340941a46bd8ea1cb106c7c78e86293cb4e55f439baf4c798fbfb98e07b15f9e94c07dea8541690bba2367ada39ca0522926576607c4b06c771a190f2cd0a35f1a39113b58c9dd8cf1c44c2774515c5479b52878219f3c757d948f785eb4455b7f01d16c592d42b5d0ef759484f51b6c976a2a5c3951eceb8c98b980ef3e2a837eb438b5ace3688b6e65841421104ae357e9b82aac12ccaeb195e4339aed1a24e8dd071680a896fe3e1fc90787e4e5ddc0d7f55d3e0bf2402ed01144b8e8d23b3a521f78d6f6b7f7e2ce33cdb4fa18bb3d964ac44b304051906ffdc3f915eb9dc6421da65abaf6793e79f92286881259dc7de10276459f3137a98aa9439512b7d4565c0de9a34e2409235f26b54eed930ee12ae63be663dff6553ad25e8a45a006708788cc976cabf32636f8094d870034d5e28531280f58452440fa6caa123d606975d21664df60fc3def16e2d8b02d7f17f28492059a01314676428d0b8e453eca3450bb8853a5f688811e4916acb3ec18d1d5b056f49564232e772cb31584dfd354fa51e6242bc3f9d08248aec705217ec3462e0597d93909952313084fa57226fec9e59295c6ab1ddc863fab2bde409157d1d7923950fb34501c3c3e993f00301b781f49b019705549f5b22605b28d3f03813463a11f936a936c02573f188391fa4f6d24eb877c7cf0007bde7b7947b3688b7a9db5f9c3e27b34f34461aa87426d1966d411a43d9efcbf55e16a0cde6bd41dd4a4981379ad9a56108524302f015f53113015100b3e5063c6f873895baff8fa37ba04e9bf1a8166ad64877237e514fa2abd98432afcb174171067a69729183c9daa6bb9050e03d4d85556e536c0bb5d5d7c224c08f80e05c8b747432a9d0dcfff0701e365b01689d0a8b44173690257171961afb9ccd1d214cc053faa373a5bbf02539b45dd09fd53ec0de23e33ba1b0f0c92899d86310a74705cc85b9b9f20692108135a3a963b3a8406abdf12fdb1fe1a47094070c8d51258aa31aa2a8c54c90b353db22ad63834ddaa8366c6f4b0659dee0f85177eb57d4d3a96013cbca66139d39c1d61af8bee960364564fcae834109cf4198ce90318d92121817ca0ac25581540744ee3b4a8271da45efee4ab148c9b7ae1ac7b4e50284162c679c5aa845282a58008024a78b29639cb785553b42d334363b93d07eec0bd64ef18e78a3fc9eecfecb4a5f40a2ac83cfdf33601dfecce74dd6534b823c6e965c661a7f644c05c18a243cb6c8f0d584eb3b226da676cb2f50a9ba81fd757a8e81656ef337f2772a7d3f9c63d7c270a", 0x1000}, {&(0x7f0000002c80)="0950c09e6250d935f4ecd503198df930b74d21aa0ec3d013c8bf1503b59b938f", 0x20}, {&(0x7f0000002cc0)="bdc7fe9bdc59df51e738f2c3b0e7ad07f3b0ab2d6ee8f48928dd8a04fe25de3bee37f83783ac1ee6fbe2cb022a0c23b5fc7727191a3a92bdccf3adbd0006a139f7007fbafae7ee36197444f5ad20a27a6e6197286aa92641b21822519df4c0f5d5728595be4495daadd9aae46180190eb5ac2fe575197da58f40c5f3c1c933cf6fd9fe2170097d28f42bdded3304d0f16a26f725dfed304c4f6a44a75d324e5f516e2c6ee874fad575", 0xa9}, {&(0x7f0000002d80)="d2100ba678ff482277bb453e48f7186625b5b82759d06856f2a691650297b3fdabac5d946c56720f8c0156845fc9dfce2b5119f1176a9ca3856ede4ee4cda18fc15ca7fb2b58685edd0acd412ce8504eb48e14c943f616bbde1991775d46e039a15feb61aaa12cafb26629870528ac5cc508ffc769a26977ff40fdc18f6787c13e5ae5e08f8a7dd64180000bf4dd20ffbd451c30478514ad4b25af031a954e495d2070c3420b5b", 0xa7}, {&(0x7f0000002e40)="22733cc45356f35f1fbcc278a108f03fbc7fece3c34ddef2becb2a1325af6bf6787285304070d911e5b7fdc43146642b96cbe02641", 0x35}, {&(0x7f0000002e80)="2b6ca30cf660d1fbf8132c58822db81c39e08d5f3f840fe2060a6e71ebc1470957a77491e37b519d1c22f21995a58c7d259742f3e1f59dc60c6d80aabd922cd0390aa9ff5070593c1f44fb3c622b53ff618bc8afb92b4c94f01641c4b9f8b5b690e3e0e6575149", 0x67}, {&(0x7f0000002f00)="1620cb94c5c33c93", 0x8}, {&(0x7f0000002f40)="ce93962e932b92afb1f5abd2d5265c9859864ba99fcfabf992607bc75814a0abc857d23d8030ee3f034cf98726391075633e3dbc24", 0x35}, {&(0x7f0000002f80)="a8cb8f1a8343df63b3cb2d56032581", 0xf}], 0xa, &(0x7f0000003100)=[@rights={{0x28, 0x1, 0x1, [r1, r3, r4, r5, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}], 0x48, 0x4000000}}, {{&(0x7f0000003180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005580)=[{&(0x7f0000003200)="7bfd939e8fe93231d8d0811ead7f34bcd20f798ae68394ff5cc64e0935aac16eb50e31f4604c688bc7b4f55b871d556c8fb7e7849e77afa001c3e373067a93935bfb9715a41d73f6bf88cfdc47a8ebe594853fef0d03de4784fbd4bf963a8dda94b70626db4d6a467223b186afe0b29001a0f8b3ef53bd1a36e42b1467917c6193772a5411e2ee68ccad41bbf6dbb83d4d0252dca279ea3f72aaab9eff77261ab3b0c9311d63d011d54a7cfe58ef72420070821325f582fbe135f9c94f7d405c685e793d8286db3580221af65893c23bb0309ea63bbdacca67ca2721e6cfc75ed3259c8116ee5794f9dc27d65282ca280c218a9f642cb9e0ec31", 0xfa}, {&(0x7f0000003300)="08570f", 0x3}, {&(0x7f0000003340)="8813daa00cfda3e7dfa215bbc3fe6ffbd34e251ba9d5f501b81f6fdb1d121d1a6cacefe002a253532f044feec8ef681d3800a6483ff87c9c888ae7cf8bee0acb37792b303bb29af8e357b1bb3faef486827b8cbfedc50c41643575f9bc74778480", 0x61}, {&(0x7f00000033c0)="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", 0x1000}, {&(0x7f0000004440)="c24975b880806ff6bf601128b0e47455f2f20192b1a6a3c8a8d59c52696bfa9eef80674ddb42f413ff2c9d25136771638855fc3ec9bce9aa29abc2ba752931743c97061ec796870a3040be5f721558f531026c6433f034da692207a677022148460c55a49e4577a341481f43108290184194c360eda545ae100bf34db976eed56245915d4e3f5747bbe875b286d007", 0x8f}, {&(0x7f0000004500)="1176ac49b2cf7362228b59236b4b0d6cf96e5020283678ffc83b7572292a119dd0249d928510d841de5687eab17ce8c1555a572bbe6b2a261900a9023a55473f1d47fbb792c2f48c25db04897ae188a1e873b2db", 0x54}, {&(0x7f0000004580)="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", 0x1000}], 0x7, &(0x7f0000005680)=[@rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r9}}}], 0x60, 0x20000010}}], 0x4, 0x40000000)

15:41:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

15:41:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x67cf010000000000, 0xa198)

[ 3107.969015][T14448] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3107.986401][T14431] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3107.999200][T14550] loop5: detected capacity change from 0 to 16
15:41:14 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000b00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3108.020261][T14547] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3108.035187][T14556] loop1: detected capacity change from 0 to 16
[ 3108.054688][T14557] loop4: detected capacity change from 0 to 16
[ 3108.064417][T14559] loop2: detected capacity change from 0 to 16
15:41:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x3f000000, 0xa198)

[ 3108.093264][T14549] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:41:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x6800000000000000, 0xa198)

15:41:14 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x88)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x6, 0xb, 0x0, 0x1ff, "64e97809923a7301014c58d4e241b3919228a0f7c9332e6614b27277aeee483c"})
setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000300)={0x0, 0xfb, 0xb0, 0x1, 0x4, "ce10e9298ac960ed40977656ccdec1ae", "3800efa748a66a7480c11421838b2d78491deab21c169d25d53879382076c7b575ca01e7b885d5070dd91e4df6ca076ecb9cd70d7555ff3f98e9eac1bf7eb5e6ab1de1ed35b0f37c120aefc401d67462fc694b3794aecd67fd799a2e076a4aa9707210a37c2169120e687a8ae62cf09f10318117542d87f8244df9ad33e0ef9640768bf58bbb423d0757205da2be5aeb9a7d47d99c9ba8629672fa"}, 0xb0, 0x2)

15:41:14 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000c00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3108.198137][T14636] loop4: detected capacity change from 0 to 16
[ 3108.220935][T14666] loop1: detected capacity change from 0 to 16
15:41:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x40000000, 0xa198)

15:41:14 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f0400000000000000"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='ecryptfs\x00', 0x40020, &(0x7f0000000280)='vfat\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000410)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x64, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}}, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
creat(&(0x7f0000000080)='./file0\x00', 0x20)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3108.247792][T14675] loop5: detected capacity change from 0 to 16
15:41:14 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000d00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)

15:41:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x68cf010000000000, 0xa198)

[ 3108.314087][T14680] loop4: detected capacity change from 0 to 16
[ 3108.324413][T14682] loop2: detected capacity change from 0 to 16
15:41:14 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000e00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:14 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x48000000, 0xa198)

[ 3108.393693][T14690] loop1: detected capacity change from 0 to 16
15:41:14 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x69cf010000000000, 0xa198)

15:41:14 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000f00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:14 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x1d10, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1cc4, 0x3, 0x0, 0x1, [{0x1294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1288, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x23, 0x1, "1d5c1f8b45410c0c14e32b9ea631a99a5a6ed3488fbe8b76229b1cad200264"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "982dbf077f9979bd76a32a846884bcefcd02d7073655f2b7fd363d1969de6bd6126ed572b1185239726c23e4c833292b267c746c0e90c3987d7fb4aefdddb2463e40d00faea2db25ac88c4e8266938bce77cee3c2a2eec2aca282db6ac08ad8533c8d47f434042d075ea011482704eacb74b0789f2719839e722e4a61fb36c8464a8bbb02018d509328adea7ff7126be7f00da78d005eaf4a21f94a35c0aacf2e63c52f328af4388a4fc7d2343b33e868632"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1fe7}]}, {0x7e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc3f4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x3a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "ce965ae9b31289ce69abb096e8d166cde9010c6e5f88fc6748016c6cb3a165d29349167548bbaefad1e6b2add60af13ab4c2052631bfc633951c143cd5f8ed99338a33264c82652ed0c916587900fae0532e75f5d6160a6872f210578945c4f142f2e51177e75328f894babd5d7a46e7c91c2d40053e77d3aed452656283de3be7a6658b4ef82cd04420417d39352b387d806ab08f81e3a5c05fd23fb9bb88a862c551aba51e7f9eee"}, @NFTA_DATA_VALUE={0xbb, 0x1, "a67fafe72572a14d85e5bc258b147f05f94fb1ea5dbbf8989b27cca283fb029248c1c186cff15af04fc7d9b5c3658d504fe86ff901185e520f6fb9e5546b903dee2bd2c2d8e96290ffbb26e3fda42b5d1eabd1f73325dd0bbe11e65c69d916aab8c23775c5bfc5815f401bc402cf5a3e89b2b2353599850571d45692300431211a809027c9bc86fc7e0a7f898dd28293b522db2b3de3183bb570bf4b00669f211b50df92e0ab804b39ae130a5929efeafbf5d59fc3a18d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xdc, 0x1, "18ac8fc68f05258fc98e54ff843e524c7fda3d5a04a372df43b0127e35357ec46dd08506dd32a95cc033a83616b3bee1145d3899d597b26b0bbc716070e0f6e52c8cec78a3eaedee48b736862729f22fac2991a1f51b7b7f2c780dbc36eda55be3c06ecc3a9147d4b617cbcb06c9ffe7e29fd9de13bec23fa0eabe2bc2a742717b4f66213ef2da82510e9870c6f52395ca1a4b433fc880b2f46072cdb54d6539bd9da423376c823dd34634340430122dc868753c21e3c41e76905d354e26ec799071704a91c379e214c7f12bfc3aa3c88e663d47c6a9fc28"}, @NFTA_DATA_VALUE={0x26, 0x1, "ebbce7e16375e149efb1abc945f3344eb5e55ea9f32b8fbdd4fd0143fe4c9ef5aa13"}, @NFTA_DATA_VALUE={0x47, 0x1, "fbf2aed7ee0d45d661f58ac5839ab7cab9e794f0c013c5b8d36e60bbb035479ed6fc1269fc95e3630548dac6498500be85d7d1b60abf417e25b1f16be77e5dc7daa550"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY_END={0x390, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "ab895eba21589566bb2087914b8fdcaa60961fed731c0ad8e4718a6a76803abe4cdadfba552ecb483818319c521c6a66517531dc4198a6b6802d44c4a3378e2554f7ebe28cce028c71cb331877a8bc875e96a55ee5dd018880ef4ca5edb154bcfbf5caab8b0b68a5e555cd1fcd3618528933d11951bb7a209a0b262771880b74948ed0a961784d69196f863237dd83510fc901a58fd6486b12c48c1977937509c3e1e17f1898052d6dec9513d2d3"}, @NFTA_DATA_VALUE={0xbe, 0x1, "6021505663eeb68ff2157de01c12195233ef3970fcb45b769558972253708b149afd57e6065f3c4ba2b310e8c272f0382eb0796de31a7d996f8841b3504756a2bf6d90b8f21046d2f736fc3b68cb9f952366d7d5a1cfcffbe79dbcff6d8c9dbcf3ba2e2c19262c4302ab00bca045c3acdaecbff4c6d2ba41a1fca863b17c87094cf723e6c4b844aaaa0e52570bad58f24a0ed337fd54e35b8f6e3e57243bd98abb6ae2c04eb06c1ed6a26a63cacf11f4c4071bf36202405a3e5d"}, @NFTA_DATA_VALUE={0xe8, 0x1, "f6ce4b3025984a2e919bec66b7c2f06ebd75f3e6a2d8df6c5ba58d3b86c156391e9d9a312e38e516906c2baa3d885a7216d9680be4f4d9530aa38fb0ad8c6f47bc5f5faf299586a64e189efa3a3610741ed5039946159a7fd5e54acb950271c2455e7ef644fab69f75e1f68dcc67cf5c2ce4f59be1f90d143ab0f8e74ab8fdb6bbc9684326cbae6e59834dfa87bfa71253f5b42e8fee22b0ce8c196040b0a566dfa866955b79a18505a6df3b251e7e09a37118f507bf7749775b5f9a952ce4ad9642aa4aa8d1ee43fe16faa33b78fe9a94627654e9e69efc71b0f7598ad04bb9ebed0647"}, @NFTA_DATA_VALUE={0xe0, 0x1, "1deae183f6fbe351d09de1d642b7aeb34ccafaeabd8410cfdf0065ed6db6db781bc424bf4b1612c117844856349c4afb013ddce99e3107642b7313e79c83a4e9cbe13371a4e307212a0cfd61505cbe4df48a40e3e7404f1762e8fb309ac6045f5f8ba57738fa5324044405f6b454dd676a272e0c50623098f59ea56c3c0b07e05ade5a66abd33b93c89865cb2dee7cf9330657ce0d5e337450075f6d1285a7b0babcc82b37154fc1f6d530bcde814132d2c7231b790834a34c171d457e14c54c6d36735903d9551819634ab7ef36dd9dc833acb0331906fb571f5443"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY_END={0x98, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb, 0x1, "85a93b5691a0c2"}, @NFTA_DATA_VALUE={0x30, 0x1, "da1b1b6c78c1642e24ad2716463e465dfb838b91c2da89728fa3f7dddd36edc7d74622e2ee5c4246080fcc22"}, @NFTA_DATA_VALUE={0x22, 0x1, "87c44fff202eda4cf3aaa916d6e87c276b71b258f266513f40cdfe687c6e"}]}]}, {0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x6c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x36, 0x1, "e45376f2903b9a847b6596ffc57c88c306df8033c6187af37617200b3f9504075b194e96c030d4d5e3fe69c3cc3454ee7269"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "d5f6b3e15e6c829bd712ffd471f0d69ba5d39082428514a5e55d30e9a3d611ee7a64e9fba6b1dc0f8edeb2ed5cc8b4565319e4e5558b7d07c83c89aa8093e21f306feef812a861fc4e8216ecefc07a70bbe17a031c0743a40d8a9bee39f9afd62a05e49943a1b2fdbef22f084cd1694384dd4a39036840ae47b940ce3f91e266a5e92d0c8179c70189a599bc602b81f0980d94fef3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "2bd848a7c9bb0e8b352b223afc465f6fb6f06f234225c8e06c3baffc656ea4cfc63c66fb096327f27a945c6ee3af6d4c68d800746150358e2308ae282ea2f83dc00b48497a01bc6934a4cb12dc5482ff2f6748113757ecf96f2c06943a51f3073bf4652fb523c0e093fc1a790f4f910129b52a96b5eb92bb26a15eddba6b8e47a32c76074e8f7f9522be3c0d8b75ea06bf20f920478872c05fc79de38e8f60"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14}}, 0x1d58}, 0x1, 0x0, 0x0, 0x40800}, 0x4000810)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0)
splice(r0, &(0x7f0000000500)=0x7, r0, &(0x7f0000000580)=0x1, 0x5, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRES64=r0])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x2f3}}, {@mode}, {@size={'size', 0x3d, [0x30, 0x65]}}, {}, {@huge_always}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', 0xee01}}, {@appraise_type}, {@euid_gt={'euid>', r1}}]})
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x4)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

[ 3108.496995][T14800] loop4: detected capacity change from 0 to 16
[ 3108.531996][T14805] loop1: detected capacity change from 0 to 16
[ 3108.599501][T14808] loop2: detected capacity change from 0 to 16
15:41:15 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "7eeb4d31422d495669b6c668995ee60764fde1026ddec2d0b64b3ae5f1203c40e6ab93c0d87f27aa4dc61212d121d2360cfbc197ce334958b747617baf7326b6", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$chown(0x4, r6, r4, r5)
mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000300)={'trans=virtio,', {[{@cache_loose}, {@cache_mmap}, {@access_any}, {@cachetag={'cachetag', 0x3d, 'vfat\x00'}}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@access_any}, {@access_any}], [{@uid_eq={'uid', 0x3d, r2}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsdef}, {@fowner_gt={'fowner>', r4}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}]}})
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:15 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000001100000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xa000000}, 0x0)

15:41:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x50000000, 0xa198)

15:41:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x6acf010000000000, 0xa198)

15:41:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
creat(&(0x7f0000000080)='./file0\x00', 0x50)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3108.792050][T14675] syz-executor.5: attempt to access beyond end of device
[ 3108.792050][T14675] loop5: rw=2049, want=17, limit=16
[ 3108.850072][T14915] loop4: detected capacity change from 0 to 16
[ 3108.856742][T14918] loop1: detected capacity change from 0 to 16
[ 3108.858855][T14919] loop2: detected capacity change from 0 to 16
15:41:15 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000001200000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x58000000, 0xa198)

[ 3108.909257][T14923] loop5: detected capacity change from 0 to 16
15:41:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7000000000000000, 0xa198)

15:41:15 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000001400000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:15 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg$unix(r0, &(0x7f0000004180)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000440)=""/235, 0xeb}, {&(0x7f0000000540)=""/252, 0xfc}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000000740)=""/39, 0x27}], 0x8, &(0x7f0000006440)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0087af0710750fa7381b3c026131a3a432c8a000"], 0xd0}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000980)=""/49, 0x31}, {&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/192, 0xc0}, {&(0x7f0000000b80)=""/126, 0x7e}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x5, &(0x7f0000001c80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001d00)=""/36, 0x24}, {&(0x7f0000001d40)=""/222, 0xde}, {&(0x7f0000001e40)=""/26, 0x1a}, {&(0x7f0000001e80)=""/213, 0xd5}, {&(0x7f0000001f80)=""/242, 0xf2}, {&(0x7f0000002080)=""/140, 0x8c}, {&(0x7f0000002140)=""/235, 0xeb}, {&(0x7f0000002240)=""/145, 0x91}, {&(0x7f0000002300)=""/15, 0xf}], 0x9, &(0x7f0000002400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002480), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002500)=""/101, 0x65}, {&(0x7f0000002580)=""/20, 0x14}, {&(0x7f00000025c0)=""/123, 0x7b}, {&(0x7f0000002640)=""/255, 0xff}], 0x4}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002800)=""/38, 0x26}, {&(0x7f0000002840)=""/75, 0x4b}, {&(0x7f00000028c0)=""/180, 0xb4}, {&(0x7f0000002980)=""/166, 0xa6}, {&(0x7f0000002a40)=""/32, 0x20}], 0x5}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b80)=""/120, 0x78}], 0x1}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002cc0)=""/203, 0xcb}, {&(0x7f0000002dc0)=""/15, 0xf}, {&(0x7f0000002e00)=""/112, 0x70}, {&(0x7f0000002e80)=""/164, 0xa4}, {&(0x7f0000002f40)=""/134, 0x86}, {&(0x7f0000003000)=""/99, 0x63}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/4096, 0x1000}, {&(0x7f0000004080)}], 0xa}}], 0x7, 0x100, &(0x7f0000004340))
mknodat$null(r1, &(0x7f0000004380)='./file1\x00', 0x8000, 0x103)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3109.004925][T15032] loop4: detected capacity change from 0 to 16
15:41:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5f64ff2e, 0xa198)

[ 3109.057735][T15034] loop1: detected capacity change from 0 to 16
[ 3109.066632][T15036] loop2: detected capacity change from 0 to 16
[ 3109.155261][T15043] loop4: detected capacity change from 0 to 16
15:41:15 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
open(&(0x7f00000000c0)='./file0/file0\x00', 0x80803, 0x11e)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x106)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:15 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000001be1500000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7800000000000000, 0xa198)

15:41:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5f913030, 0xa198)

15:41:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xb000000}, 0x0)

[ 3109.397163][T14923] syz-executor.5: attempt to access beyond end of device
[ 3109.397163][T14923] loop5: rw=2049, want=17, limit=16
15:41:15 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000001600000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3109.445808][T15051] loop1: detected capacity change from 0 to 16
[ 3109.452153][T15052] loop4: detected capacity change from 0 to 16
15:41:15 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x5fbe6131, 0xa198)

15:41:15 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7f51010000000000, 0xa198)

[ 3109.514882][T15058] loop5: detected capacity change from 0 to 16
15:41:15 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000001800000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3109.562312][T15036] syz-executor.2: attempt to access beyond end of device
[ 3109.562312][T15036] loop2: rw=2049, want=17, limit=16
[ 3109.593944][T15064] loop4: detected capacity change from 0 to 16
[ 3109.617084][T15082] loop1: detected capacity change from 0 to 16
15:41:16 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000001900000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
setrlimit(0xf, &(0x7f0000000080)={0x80000001, 0x2})
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x60000000, 0xa198)

[ 3109.750290][T15176] loop2: detected capacity change from 0 to 16
[ 3109.780508][T15178] loop4: detected capacity change from 0 to 16
15:41:16 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x401, 0x40)
fstat(r2, &(0x7f0000000240))
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)
r3 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r6}}, 0x0)
r7 = syz_io_uring_setup(0x2de7, &(0x7f0000000000), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000080)=<r9=>0x0)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, {0x0, r10}}, 0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x2, 0x0, r0, &(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x1, 0x400, 0x1, {0x0, r10}}, 0x10d2)

15:41:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7fffffffffffffff, 0xa198)

15:41:16 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000002500000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x0)

15:41:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x68000000, 0xa198)

[ 3110.013808][T15058] syz-executor.5: attempt to access beyond end of device
[ 3110.013808][T15058] loop5: rw=2049, want=17, limit=16
15:41:16 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000006000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3110.062806][T15182] loop1: detected capacity change from 0 to 16
[ 3110.079228][T15186] loop4: detected capacity change from 0 to 16
15:41:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x70000000, 0xa198)

15:41:16 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000006800000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x8000000000000000, 0xa198)

[ 3110.138999][T15194] loop5: detected capacity change from 0 to 16
15:41:16 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000007c00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3110.213949][T15201] loop4: detected capacity change from 0 to 16
[ 3110.229291][T15176] syz-executor.2: attempt to access beyond end of device
[ 3110.229291][T15176] loop2: rw=2049, want=17, limit=16
[ 3110.251780][T15203] loop1: detected capacity change from 0 to 16
15:41:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x78000000, 0xa198)

15:41:16 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8f)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x4800)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRES16=r0], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

[ 3110.393771][T15312] loop4: detected capacity change from 0 to 16
[ 3110.414237][T15314] loop2: detected capacity change from 0 to 16
[ 3110.463092][T15314] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[ 3110.473436][T15314] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
15:41:16 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f00000000c0)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x15d)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:16 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x8001000000000000, 0xa198)

[ 3110.620934][T15194] syz-executor.5: attempt to access beyond end of device
[ 3110.620934][T15194] loop5: rw=2049, want=17, limit=16
15:41:16 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7f510100, 0xa198)

15:41:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xd000000}, 0x0)

15:41:16 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000008000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3110.671637][T15319] loop1: detected capacity change from 0 to 16
[ 3110.680951][T15322] loop4: detected capacity change from 0 to 16
15:41:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x8800000000000000, 0xa198)

15:41:17 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000009c00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x88000000, 0xa198)

[ 3110.745141][T15329] loop5: detected capacity change from 0 to 16
15:41:17 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000ffffff9e00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3110.845176][T15334] loop1: detected capacity change from 0 to 16
[ 3110.856686][T15338] loop4: detected capacity change from 0 to 16
15:41:17 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000000058c400000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x9000000000000000, 0xa198)

[ 3110.969486][T15314] syz-executor.2: attempt to access beyond end of device
[ 3110.969486][T15314] loop2: rw=2049, want=17, limit=16
15:41:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xe000000}, 0x0)

[ 3111.014479][T15402] loop1: detected capacity change from 0 to 16
15:41:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
sched_setattr(0xffffffffffffffff, &(0x7f0000000280)={0x38, 0x3, 0x10, 0xffff, 0xf46, 0x8000000000000000, 0x7fffffff, 0x198, 0x5}, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4080090, r1, 0xa2d2b000)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
syz_open_dev$sg(&(0x7f0000000180), 0x100000000, 0x240400)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

15:41:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x90000000, 0xa198)

15:41:17 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000ffffffef00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:17 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x3001034, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@cache_loose}, {@cache_mmap}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_type}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]}})
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000890)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
dup3(r2, r3, 0x0)
setrlimit(0xa, &(0x7f0000000440)={0x40, 0x8001})
r4 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
openat(r4, &(0x7f0000000080)='./file0\x00', 0x450800, 0x12)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)

15:41:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x9800000000000000, 0xa198)

[ 3111.096580][T15329] syz-executor.5: attempt to access beyond end of device
[ 3111.096580][T15329] loop5: rw=2049, want=17, limit=16
[ 3111.108740][T15329] Buffer I/O error on dev loop5, logical block 16, lost async page write
[ 3111.150318][T15459] loop2: detected capacity change from 0 to 16
[ 3111.152474][T15461] loop1: detected capacity change from 0 to 16
[ 3111.167603][T15462] loop4: detected capacity change from 0 to 16
15:41:17 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000fffffff000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x90010000, 0xa198)

15:41:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa000000000000000, 0xa198)

[ 3111.213983][   T24] audit: type=1400 audit(1638027677.528:548): avc:  denied  { remount } for  pid=15458 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[ 3111.228162][T15467] loop5: detected capacity change from 0 to 16
15:41:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

15:41:17 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000fffffff500000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3111.304552][T15473] loop4: detected capacity change from 0 to 16
[ 3111.326693][T15475] loop1: detected capacity change from 0 to 16
15:41:17 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0x4, &(0x7f0000000080)={0x0, 0x9}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:17 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x98000000, 0xa198)

15:41:17 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa800000000000000, 0xa198)

15:41:17 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000fffffffe00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3111.467156][T15489] loop4: detected capacity change from 0 to 16
[ 3111.475359][T15488] loop5: detected capacity change from 0 to 16
15:41:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x0)

[ 3111.523408][T15495] loop1: detected capacity change from 0 to 16
[ 3111.810314][T15459] syz-executor.2: attempt to access beyond end of device
[ 3111.810314][T15459] loop2: rw=2049, want=17, limit=16
15:41:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa0000000, 0xa198)

15:41:18 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000007fffffff00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:18 executing program 2:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r1 = dup2(r0, r0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}}}, &(0x7f0000000240)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@cache_mmap}, {@version_L}, {@debug={'debug', 0x3d, 0x1f}}, {@noextend}, {@cache_fscache}, {@posixacl}], [{@uid_lt={'uid<', r3}}, {@uid_lt={'uid<', 0xee00}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}]}})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r4 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x4000000000010046)
inotify_add_watch(r6, &(0x7f0000000280)='./file0\x00', 0x2000100)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r4, r4, &(0x7f00000001c0), 0xa198)

15:41:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb000000000000000, 0xa198)

15:41:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x11000000}, 0x0)

[ 3111.889026][T15607] loop4: detected capacity change from 0 to 16
[ 3111.894917][T15606] loop1: detected capacity change from 0 to 16
15:41:18 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000ffffffff00000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xa8000000, 0xa198)

[ 3111.965261][T15614] loop2: detected capacity change from 0 to 16
[ 3111.981973][T15488] syz-executor.5: attempt to access beyond end of device
[ 3111.981973][T15488] loop5: rw=2049, want=17, limit=16
15:41:18 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x8}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb7e2e30200000000, 0xa198)

15:41:18 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3112.048797][T15621] loop4: detected capacity change from 0 to 16
15:41:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xabd50100, 0xa198)

[ 3112.095038][T15626] loop1: detected capacity change from 0 to 16
15:41:18 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000300000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb800000000000000, 0xa198)

15:41:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x12000000}, 0x0)

[ 3112.204875][T15637] loop4: detected capacity change from 0 to 16
[ 3112.227001][T15639] loop1: detected capacity change from 0 to 16
[ 3112.322102][T15614] syz-executor.2: attempt to access beyond end of device
[ 3112.322102][T15614] loop2: rw=2049, want=17, limit=16
[ 3112.334266][T15614] Buffer I/O error on dev loop2, logical block 16, lost async page write
15:41:18 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000080)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:18 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000400000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xacd50100, 0xa198)

15:41:18 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb80f150400000000, 0xa198)

[ 3112.399211][T15641] __nla_validate_parse: 93 callbacks suppressed
[ 3112.399228][T15641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3112.437630][T15749] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
15:41:18 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xadd50100, 0xa198)

[ 3112.440718][T15752] loop4: detected capacity change from 0 to 16
[ 3112.447657][T15751] loop1: detected capacity change from 0 to 16
[ 3112.488850][T15754] loop2: detected capacity change from 0 to 16
[ 3112.515672][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3112.595021][T15758] loop4: detected capacity change from 0 to 16
15:41:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x94)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x3daa, 0x1b50, 0x7, 0x0, 0x1, [{0x1000, 0x3, 0x3, '\x00', 0x208}]})

15:41:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb83c460500000000, 0xa198)

15:41:19 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000500000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x18000000}, 0x0)

15:41:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xaed50100, 0xa198)

[ 3112.827629][T15761] loop1: detected capacity change from 0 to 16
[ 3112.839404][T15765] loop4: detected capacity change from 0 to 16
[ 3112.846683][T15767] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3112.868083][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
15:41:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xafd50100, 0xa198)

[ 3112.882505][T15769] loop5: detected capacity change from 0 to 16
[ 3112.903434][T15754] syz-executor.2: attempt to access beyond end of device
[ 3112.903434][T15754] loop2: rw=2049, want=17, limit=16
15:41:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc000000000000000, 0xa198)

[ 3112.938843][T15769] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3112.962808][T15769] validate_nla: 1 callbacks suppressed
[ 3112.962820][T15769] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3112.963173][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
15:41:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
inotify_add_watch(r0, 0x0, 0x8)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

15:41:19 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000600000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:19 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x68004, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3113.014648][T15877] loop4: detected capacity change from 0 to 16
[ 3113.032076][T15766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3113.033282][T15879] loop1: detected capacity change from 0 to 16
15:41:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb0000000, 0xa198)

[ 3113.084368][T15881] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3113.106644][T15885] loop2: detected capacity change from 0 to 16
[ 3113.107660][T15886] loop5: detected capacity change from 0 to 16
15:41:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc3ffffff00000000, 0xa198)

15:41:19 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3113.159135][T15888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3113.177517][T15891] loop4: detected capacity change from 0 to 16
[ 3113.221916][T15893] loop1: detected capacity change from 0 to 16
15:41:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb0d50100, 0xa198)

15:41:19 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000800000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3113.334971][T15901] loop4: detected capacity change from 0 to 16
15:41:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x185cfeff}, 0x0)

15:41:19 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc800000000000000, 0xa198)

15:41:19 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:19 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xb8000000, 0xa198)

[ 3113.431584][T15906] loop1: detected capacity change from 0 to 16
[ 3113.440347][T15885] syz-executor.2: attempt to access beyond end of device
[ 3113.440347][T15885] loop2: rw=2049, want=17, limit=16
[ 3113.452597][T15885] Buffer I/O error on dev loop2, logical block 16, lost async page write
[ 3113.471952][T15911] loop4: detected capacity change from 0 to 16
15:41:19 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000080)='./file0\x00')
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
umount2(&(0x7f00000000c0)='\x00', 0x1)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:19 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000a00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3113.648474][T16020] loop2: detected capacity change from 0 to 16
15:41:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000300)=@v2={0x5, 0x0, 0xd, 0xfffffbff, 0xe5, "dbc09fae5aabc885598d4424cb0c63f6153bc419c883a7df8425ea8a6bffa47ba9ca0957889521ad9a6c81a855f17916307a80010b1f0f82b8786899e9d8dbabc3006e580158b0cb5316d5c0d4cd585dea00eb87b780a4b6f855e411f8febd08a7cf64bdd85d2948801dc728bc75ba24ddd0a0e03b5537de381345b7fcf13660ed9422e35de4a4189aebf599b17b0f3fa05e8b34a1a3486d3117fe3579109f6a02e82ab6020f51df5d1bd2d9e881880dbea5aeaa887579bf7be01f3ef7727e1bc13b88aa4016162d5dee48a1e9c0381523d95ec4a8bf216534337e9b3b50305029f1cd1b9c"}, 0xee, 0x2)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x382a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@access_any}, {@access_client}, {@cache_mmap}, {@access_client}, {@version_9p2000}, {@nodevmap}, {@aname={'aname', 0x3d, '\xc0@*'}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '^%'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&+\x91%:@{'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}]}})
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc0000000, 0xa198)

15:41:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd000000000000000, 0xa198)

15:41:20 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000b00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

[ 3113.745986][T15886] loop5: detected capacity change from 0 to 16
[ 3113.785381][T16024] loop4: detected capacity change from 0 to 16
[ 3113.793685][T16030] loop1: detected capacity change from 0 to 16
15:41:20 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000c00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3113.833442][T16033] loop5: detected capacity change from 0 to 16
15:41:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd800000000000000, 0xa198)

15:41:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc3ffffff, 0xa198)

15:41:20 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000d00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3113.974738][T16042] loop1: detected capacity change from 0 to 16
[ 3114.001624][T16045] loop4: detected capacity change from 0 to 16
15:41:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x21000000}, 0x0)

[ 3114.073013][T16020] syz-executor.2: attempt to access beyond end of device
[ 3114.073013][T16020] loop2: rw=2049, want=17, limit=16
15:41:20 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c0000001600000000000a0000000911128e27993741ea02f6e4313acb1c84fc8cf41987e61f988a00020073797a3000000000340003800800014000000000000003801400010073797a6b216c6c657230000000000032"], 0xb0}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x8c, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb21f867b5a161740002010100e7576c3780f801000000ff", 0x18}, {0x0, 0x0, 0x1000}], 0x94c0b8, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
setrlimit(0x8, &(0x7f0000000180)={0x4cd, 0x101})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe000000000000000, 0xa198)

15:41:20 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000e00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xc8000000, 0xa198)

[ 3114.185106][T16033] syz-executor.5: attempt to access beyond end of device
[ 3114.185106][T16033] loop5: rw=2049, want=17, limit=16
[ 3114.185717][T16155] loop1: detected capacity change from 0 to 16
[ 3114.197267][T16033] Buffer I/O error on dev loop5, logical block 16, lost async page write
15:41:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe800000000000000, 0xa198)

15:41:20 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="70000000008000002e2f66696c653000"])
mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x60)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = open(&(0x7f0000000180)='./file1\x00', 0xd2881, 0x85)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r2 = creat(&(0x7f0000000c00)='./file1/file0\x00', 0x19c)
renameat2(r1, &(0x7f0000000c80)='./file1/file0/file0\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0)
r3 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40), &(0x7f0000000b80)={0x0, 0xfb, 0x54, 0x3, 0x7, "88b141eb0f1db49f7e6b0f781541893f", "aa10691612edfc86e9a789098a2151212b047316df6cb855006a2ade01ecc780d4c582864c5956599641fb20aa41e6c21970184cc9aaa37ddde630da3f92cc"}, 0x54, 0x2)
write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r3, r3, &(0x7f00000001c0), 0xa198)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0801010119000000970200000008000089010000f9ffffff0000000000000000212cafc4a09c16cd05823c474f1562cad52ffa2a208f99a3a5971f58c652cebdf2c1980ca8d0f2f4b8e1e9418f15be8a851e7597a9d615205c4753506638f0b0d6f25d47572cb0de62f02d7c3f843c3c9bc587285c8e4efd325501ea94916a5acb1d2167e7dfbdd6673f5ac3475bb2dd1ed4392162755823f390b77204f035e1a3240c2ce4ce3b61fa37474089efdc7fdfb8a18465bdaf1002b633250e606ad18c7cfc0154609d215dd3faaefae3e911b9e170b64df4437d971e3ececf6bb477497f29f9cf8ddb37dd632d81eb0c0b3889145c2d92308d91b94e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/2042], 0x7fa)

15:41:20 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3114.273700][T16165] loop4: detected capacity change from 0 to 16
[ 3114.285067][T16166] loop2: detected capacity change from 0 to 16
[ 3114.295367][T16169] loop1: detected capacity change from 0 to 16
15:41:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x25000000}, 0x0)

15:41:20 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf000000000000000, 0xa198)

[ 3114.349708][T16171] loop5: detected capacity change from 0 to 16
15:41:20 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:20 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd0000000, 0xa198)

15:41:20 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001200000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3114.459469][T16181] loop1: detected capacity change from 0 to 16
[ 3114.471677][T16183] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3114.493602][T16185] loop4: detected capacity change from 0 to 16
15:41:21 executing program 2:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, &(0x7f0000000780)=[{{&(0x7f0000000240), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f0000000440)=""/158, 0x9e}], 0x3, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f0000000640)=""/242, 0xf2}], 0x2}}], 0x2, 0x10080, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xd8000000, 0xa198)

15:41:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf4ffffff00000000, 0xa198)

15:41:21 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001400000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x305cfeff}, 0x0)

15:41:21 executing program 5:
r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = syz_mount_image$nfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x4, 0x4, &(0x7f0000000540)=[{&(0x7f0000000300)="5a226ea59406906a7c2f2c1258a6cc1e021266c859c8d3c7858aad8211bb86900cfd633e4cafc8888b70398319e8cd7eabee2578ff15d752deb509e82ac644ee05b416f081390d6af00099671aa10741ab066f04c723dae55121885184b7d094c350d8061bdfc2e60abc6c3b8a86b723cef873b696ec77c54dee0efbaebcc0cb7f15122a3a8019817c8400c946b267c06f52903342993c2acf7ec1dceadb8e7f215ce2ae1bfbddbe8e1b6b6fe5bf731dfb075a953b4733782633967d8545d41991984fbafcf0e8961e", 0xc9, 0x9}, {&(0x7f0000000400)="838e5ff206838154e9f1a2c862587544726dc74b2867969f5bc386e32a99278704d10299c8458458e62c98c7ff952966d17ee46ff24be14025bc3cdd12f79be60137869c267f129ba3", 0x49, 0x6}, {&(0x7f0000000480)="b0bc6005cb0be77c3f9f52162df7b68f7ee8d18bffec6162ad0761e4f04901c36480d8d5877c897a66f566005db13de375ceb4e2b264ffb1b941fa8c2d854cbe6a925214a9715111a23b89511585797f384b021af12afd7786", 0x59, 0x2}, {&(0x7f0000000500)="6301381ec7ff0289b24974f8a337c64becd1363e2eae96f9ee35d90134719068ad37d264f8c51f888326d7571de6fb39c1071ffb1e3347a769319949561699b3", 0x40}], 0x4040, &(0x7f00000005c0)={[{'/dev/vcs\x00'}, {'vfat\x00'}, {'/:'}, {')&#^'}, {'vfat\x00'}], [{@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcs\x00'}}, {@seclabel}]})
renameat(r1, &(0x7f0000000640)='./file1\x00', r0, &(0x7f0000000680)='./file1/file0\x00')
open(&(0x7f00000006c0)='./file2\x00', 0x686001, 0x100)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x200c2, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x80, 0x80)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

[ 3114.811165][T16171] syz-executor.5: attempt to access beyond end of device
[ 3114.811165][T16171] loop5: rw=2049, want=17, limit=16
[ 3114.831166][T16183] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3114.881026][T16299] loop1: detected capacity change from 0 to 16
[ 3114.889499][T16300] loop4: detected capacity change from 0 to 16
15:41:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xdf27c930, 0xa198)

15:41:21 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001600000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf800000000000000, 0xa198)

[ 3114.925916][T16305] loop5: detected capacity change from 0 to 16
[ 3114.933357][T16306] loop2: detected capacity change from 0 to 16
15:41:21 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001800000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3115.062102][T16316] loop4: detected capacity change from 0 to 16
[ 3115.070253][T16315] loop1: detected capacity change from 0 to 16
15:41:21 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000001900000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xdf54fa31, 0xa198)

[ 3115.230814][T16326] loop4: detected capacity change from 0 to 16
15:41:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0)

15:41:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfbffffff00000000, 0xa198)

15:41:21 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v1={0x1000000, [{0x2, 0xff}]}, 0xc, 0x2)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:21 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000002500000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe0000000, 0xa198)

[ 3115.414186][T16306] syz-executor.2: attempt to access beyond end of device
[ 3115.414186][T16306] loop2: rw=2049, want=17, limit=16
[ 3115.431139][T16305] syz-executor.5: attempt to access beyond end of device
[ 3115.431139][T16305] loop5: rw=2049, want=17, limit=16
[ 3115.481219][T16432] loop1: detected capacity change from 0 to 16
[ 3115.494655][T16436] loop4: detected capacity change from 0 to 16
[ 3115.521344][T16440] loop2: detected capacity change from 0 to 16
15:41:21 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
sendmmsg(r2, &(0x7f0000001f40)=[{{&(0x7f0000000240)=@sco={0x1f, @none}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)="f7848f5a661352410966bc02c7c8fb282ce03c3eb7ff5fa103dc3512e0f9e215c2a9dae94c22eeb88af5dd4f37eead2adfcfcadc3b123becd7ce4b989227c263297e1ebe6a155bed8ad7ac79ddf74f37334eb1b345b4bc00884aa67a3999b64cafa2b83528d7aa5a9a26a91512af78f1d5b25b6879e57c3795fa1ac941de195427d2ff389ec0642b01a8177e094938", 0x8f}, {&(0x7f00000003c0)="6a9fd4949c33d19c2cb22f26", 0xc}, {&(0x7f0000000400)="846d624cc474cd8fd242a24b8974c9", 0xf}, {&(0x7f0000000580)="5d350a67ccb51db624c5dd7775f50c90961c68e8233cfbb5dbc821685fb772a01497975ef57136a64cb52d51c1ef8d3dbb59dd822cc25766415c8b4ae88c0ea5189b161c950c8ed914fa8d9ed1e4a0d515dd44be81799d9e29f9e6db86cbacdd74e49805d58cbd90babf5aea63739facddbb2f00a204dc1c5a94c0efed2c6731a5", 0x81}], 0x4, &(0x7f0000000640)=[{0x110, 0x10d, 0x8, "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"}, {0x60, 0x10e, 0x7, "7555129e076aacab4d0e4b791dd84b7ccfd889a99ce010ec5f4c85ea921351faa2b57851a462ef88e4587add52ff83e58b3c22598dee2f0b4a92cff3c60962a829ca18761a4b0bb57fd73838b4"}, {0xc0, 0x101, 0x0, "af6c9448a1a95d584854bdc20926d7dcdee9706c9f7fe88a0569998ca2e13c331292dc2405cb26edd8d598bf6c40289fead1f83757479b829aa9822febc21c076c093cb64bba4f04d7bea2f4fab443cb94cf879ead31640299d785c5a85c0707778e832c2c3b5859375df2e81a24ebfcd24d07fcfc6b45749cbb5d3248e408f77016e3508cb5dfc588add157de0187e84f16419431c029770f913f21c261e22f96c17949e1fde69b90bf"}, {0x10, 0x88}], 0x240}}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x0, 0x4, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000900)="e8411a2a025bcb3e902062557cacfb0aeb4752f6902204e6528ce7fe46f9aa38f818717d7c59672169462f61e52ee010b928119d79bf97eaa372960080029e882ba82bcc3a10cdc0d381d137eb75a215f71853ca319f50f98acc5729e4a277919888e179f74bb2", 0x67}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="4d981a2e0fd277ae47148bb32d1b1ee6cb35b7b0a74d6c9a53d9dfc1579dcfcdf245456db0c66a9c7e5ebb7836474b32d9de53b64ce017df274a4a21034dbba313b23314c62c415602795179dd5b2d999d1b705be045d8f8bfd3d6f1632e60aeb6794d45749a4ee422f4c957a90b47b010b307651aa69ade54543bc7f5bf9f47d75d0aaf4b78ace7da96d07fbe93cff49d8e45ea9a7e083484b698ec31b4ea", 0x9f}, {&(0x7f0000000480)="c1fb823bdf86d1cb0cfdbf81f31fefa95364aca4dae5e2263b24bb7dc9eca916", 0x20}, {&(0x7f0000001a40)="d1f664dd60ed38ee0debf53bba192a9ad09a8fdfef68d3c2c7ac746b8df904fee84fdff2a168fb94008dd6d0ec867fac3c34a3d3c20a59ac2c744360ea5e561c6ec63415a417c22c7742fe48048edf6cec1789f414dc8d4804b40b866b09cbbe93901df7f75d771f894b393d3a92a6df4848c871b2ab6ad440c89775ff4f94bbf2503c2ad1be3fc666c10c96105fb1f03b2f68149d58b01d8536f151ee98fc5aa96bf11dbef9e76fc66b5c3d1520432809c0b20f00f073ee5a50f17d15d395ea8e", 0xc1}, {&(0x7f0000001b40)="4febf2ed70a988802f4a921913beba5f3bc492bb0617da817efed920f72af009a84f49faa637ed72c5761853463155132482c2592394ab782bfda11b7e0ad8656673311423deffc90f1ae80d60b64db1e369a8177ac8e47810d81381050008ad20e06919a71ac3379e1d", 0x6a}, {&(0x7f0000001bc0)="7b534e20c100880e4ef6ff99f954bc", 0xf}, {&(0x7f0000001c00)="8e01ca7cf47d582b6ec68c0a5d5e728b98936d89baa158258559be3ddf02625a88a913516d0d50231665e9319dd6b4d58265308caf4cc9b6ce6a3e21d885b5b7c14005aae43336a4db9055b8747da049aa693e6d574d050ea4b03e6f8467ea767c9f5185cc3c6b0126099e3f49c644bfcbfc7f50853f945ea18282d00a93a63f10ca7827ba3a8d29cfd1cc1f75016eecb5b571ee40a813bd3ab34410bf5a6ac034b1b5a1ede9a0b5f5f1dade1ff8f0e9c3df99b2775a54ed66bf0bebb2a12a", 0xbf}, {&(0x7f0000001cc0)="7c2ccda1d3a55e80901747b65d5e2ca12e69f1b36ab65dd3bf6561ba4791e38263283be66f6572bdfb72928a3985be460c111d037525e3f99aa06e90954c1f5a1e81827b2d3da053fea6f897257be5c92586fabd6901414fa44edb53c350ec86cc5b97a69693e09e84590d7992414af07dd5181982bbb10f6ae71aecb6a777eb60c48d3d2299a254e9eb5d0d298879cc9ab1d75877978e3ae772273bb1b6eec22c6ae4994c4e133390aa5c9cf1df8b582c9a898047f26c2fd55dd3d9e33bb629749fd9d079d19934296119525b17f1bb354d6883d103281f668711c6", 0xdc}, {&(0x7f0000001dc0)="73f4375501b4a9cd9a65344ceec27f5d8c61d22624daf2a38ded34888aea0da8bdc70979e3b79102860333f572533a533a4f6b871d9251ba31157aa60d21c8ae17931cd99a3beae6a765d8791f75a7cda7141f2e53c1f0e470971b6abd7a422d0d8f07b755f0e8eb5a11ede69fe6a871a21c78a51726a6689df41925026f8ae259fb39a9d8bd32115b38b2ae92a07434552ee3d6608a0ea4b8b2065e0d8140612a5a977c32ddba5ace421bf6954004c838ebe8d3db3422339ca8a62af6cc", 0xbe}], 0xa}}], 0x2, 0x80d0)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
open(&(0x7f0000000080)='./file0\x00', 0x82, 0x100)

15:41:21 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfeffffff00000000, 0xa198)

15:41:21 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000006000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:21 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xe8000000, 0xa198)

15:41:22 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000006800000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3115.627790][T16449] loop5: detected capacity change from 0 to 16
[ 3115.650177][T16451] loop4: detected capacity change from 0 to 16
[ 3115.652137][T16452] loop1: detected capacity change from 0 to 16
[ 3115.670393][T16449] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:41:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffdffff00000000, 0xa198)

[ 3115.698462][T16449] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:41:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf0000000, 0xa198)

[ 3115.798373][T16460] loop1: detected capacity change from 0 to 16
[ 3115.808897][ T1896] ==================================================================
[ 3115.816983][ T1896] BUG: KCSAN: data-race in copy_page_to_iter / fat_set_state
[ 3115.824354][ T1896] 
[ 3115.826667][ T1896] write to 0xffff888150ead025 of 1 bytes by task 16460 on cpu 0:
[ 3115.834371][ T1896]  fat_set_state+0x16c/0x1d0
[ 3115.838969][ T1896]  fat_fill_super+0x26a4/0x2af0
[ 3115.843811][ T1896]  vfat_fill_super+0x2c/0x40
[ 3115.848398][ T1896]  mount_bdev+0x1e8/0x290
[ 3115.852720][ T1896]  vfat_mount+0x2d/0x40
[ 3115.856874][ T1896]  legacy_get_tree+0x70/0xc0
[ 3115.861454][ T1896]  vfs_get_tree+0x4a/0x1a0
[ 3115.865863][ T1896]  path_mount+0x11cf/0x1c40
[ 3115.870360][ T1896]  __se_sys_mount+0x24b/0x2f0
[ 3115.875028][ T1896]  __x64_sys_mount+0x63/0x70
[ 3115.879611][ T1896]  do_syscall_64+0x44/0xd0
[ 3115.884078][ T1896]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3115.889973][ T1896] 
[ 3115.892309][ T1896] read to 0xffff888150ead000 of 1024 bytes by task 1896 on cpu 1:
[ 3115.900105][ T1896]  copy_page_to_iter+0x2cb/0x950
[ 3115.905130][ T1896]  filemap_read+0x138b/0x16d0
[ 3115.909892][ T1896]  generic_file_read_iter+0x72/0x2a0
[ 3115.915290][ T1896]  blkdev_read_iter+0x96/0x140
[ 3115.920048][ T1896]  vfs_read+0x66c/0x750
[ 3115.924224][ T1896]  ksys_read+0xd9/0x190
[ 3115.928394][ T1896]  __x64_sys_read+0x3e/0x50
[ 3115.932897][ T1896]  do_syscall_64+0x44/0xd0
[ 3115.937306][ T1896]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 3115.943212][ T1896] 
[ 3115.945528][ T1896] Reported by Kernel Concurrency Sanitizer on:
[ 3115.951665][ T1896] CPU: 1 PID: 1896 Comm: udevd Not tainted 5.16.0-rc2-syzkaller #0
[ 3115.959571][ T1896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 3115.969618][ T1896] ==================================================================
15:41:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)

15:41:22 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000007c00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xffffffff00000000, 0xa198)

15:41:22 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
inotify_add_watch(r0, 0x0, 0x84000408)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

[ 3116.025952][T16546] loop4: detected capacity change from 0 to 16
15:41:22 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000009c00000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3116.121050][T16577] loop2: detected capacity change from 0 to 16
[ 3116.127091][T16578] loop1: detected capacity change from 0 to 16
15:41:22 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000040)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
ioctl$SNAPSHOT_UNFREEZE(r2, 0x3302)
fallocate(r0, 0x4, 0x0, 0x2)

15:41:22 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000003000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf4ffffff, 0xa198)

15:41:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xffffffffffff0700, 0xa198)

15:41:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x445cfeff}, 0x0)

[ 3116.383148][T16461] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3116.391773][T16449] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3116.436050][T16590] loop4: detected capacity change from 0 to 16
[ 3116.447848][T16588] loop1: detected capacity change from 0 to 16
15:41:22 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000005000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:22 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xffffffffffffff7f, 0xa198)

15:41:22 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xf8000000, 0xa198)

15:41:22 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000006000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3116.521816][T16597] loop5: detected capacity change from 0 to 16
[ 3116.591149][T16615] loop1: detected capacity change from 0 to 16
[ 3116.598952][T16597] loop5: detected capacity change from 0 to 16
[ 3116.607493][T16636] loop4: detected capacity change from 0 to 16
15:41:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfbffffff, 0xa198)

15:41:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xffffffffffffffff, 0xa198)

15:41:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240), 0x0, 0x7}], 0x2, &(0x7f0000000300)={[{@dots}, {@fat=@dmask={'dmask', 0x3d, 0x5}}], [{@audit}, {@fsname={'fsname', 0x3d, '$'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x24}}]})
sendfile(r0, r1, 0x0, 0x4000000000010046)
openat$incfs(r1, &(0x7f0000000080)='.log\x00', 0x400, 0x4)
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198)

15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
r1 = getpgid(0x0)
setpgid(0xffffffffffffffff, r1)
sched_setattr(r1, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x4, 0x7fff, 0x1, 0x0, 0x52f, 0x4, 0x2}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)
openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x60041, 0x4, 0x1}, 0x18)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}], 0xa0}, 0x41)
sched_setattr(r2, &(0x7f0000000400)={0x38, 0x6, 0x10, 0x7fffffff, 0xce9f, 0x0, 0xfffffffffffffffd, 0x2, 0xc0f, 0x8001}, 0x0)

15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000009000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3116.734774][T16720] loop4: detected capacity change from 0 to 16
[ 3116.739510][T16717] loop5: detected capacity change from 0 to 16
15:41:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x48000000}, 0x0)

15:41:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfeffffff, 0xa198)

[ 3116.775283][T16724] loop1: detected capacity change from 0 to 16
[ 3116.789121][T16725] loop2: detected capacity change from 0 to 16
15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000a000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:23 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17, 0x7}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000b000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x8)

[ 3116.900351][T16775] loop4: detected capacity change from 0 to 16
15:41:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffdffff, 0xa198)

[ 3116.942648][T16829] loop5: detected capacity change from 0 to 264192
15:41:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
open(&(0x7f0000000080)='./file0\x00', 0x40, 0x108)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000c000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3116.997551][T16848] loop1: detected capacity change from 0 to 16
[ 3117.040595][T16850] loop4: detected capacity change from 0 to 16
15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000d000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x10)

15:41:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffdff, 0xa198)

[ 3117.098304][T16858] loop2: detected capacity change from 0 to 16
15:41:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0)

15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000e000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3117.185517][T16863] loop1: detected capacity change from 0 to 16
[ 3117.198659][T16866] loop4: detected capacity change from 0 to 16
15:41:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x18)

[ 3117.353041][T16874] loop1: detected capacity change from 0 to 16
[ 3117.471569][T16875] __nla_validate_parse: 86 callbacks suppressed
[ 3117.471585][T16875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3117.487413][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3117.535451][T16858] handle_bad_sector: 3 callbacks suppressed
[ 3117.535466][T16858] syz-executor.2: attempt to access beyond end of device
[ 3117.535466][T16858] loop2: rw=2049, want=17, limit=16
15:41:23 executing program 5:
chdir(&(0x7f0000000080)='./file0\x00')
creat(&(0x7f0000000000)='./file0\x00', 0x96)
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x0, 0x10001}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0000000900020073797a300000000034000380080001400000000028000240ffffff800800014000000000180003801400010073797a6b616c6c6572300000000000000900010073797a31"], 0xb0}}, 0x0)
fcntl$setstatus(r2, 0x4, 0x2c00)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a0001000900020073797a300000000034000380080001400000000028000240ffffff80080001400000000018000380140000000000000900010073797a31"], 0xb0}}, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:23 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000f000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:23 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xffffffc3, 0xa198)

15:41:23 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x28)

15:41:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

15:41:23 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010046)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x8)
sched_setattr(0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

[ 3117.594699][T16829] loop5: detected capacity change from 0 to 264192
[ 3117.632561][T16982] loop4: detected capacity change from 0 to 16
[ 3117.647313][T16985] loop1: detected capacity change from 0 to 16
[ 3117.658096][T16987] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3117.670696][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3117.674285][T16991] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3117.688691][T16990] loop2: detected capacity change from 0 to 16
15:41:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffff4, 0xa198)

15:41:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x30)

15:41:24 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000011000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3117.744877][T16991] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3117.760146][T16995] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3117.769647][T16995] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[ 3117.807262][T16999] loop4: detected capacity change from 0 to 16
[ 3117.818698][T17000] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3117.834824][T17002] loop1: detected capacity change from 0 to 16
[ 3117.844825][T16991] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
15:41:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000080)=0x7)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:24 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000012000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3117.847812][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3117.858805][T16991] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
15:41:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffffb, 0xa198)

15:41:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x38)

[ 3117.931197][T16986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3117.946990][T17008] loop5: detected capacity change from 0 to 16
15:41:24 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000014000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3118.003290][T17013] loop4: detected capacity change from 0 to 16
[ 3118.022296][T17016] loop1: detected capacity change from 0 to 16
15:41:24 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000016000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3118.052828][T16990] syz-executor.2: attempt to access beyond end of device
[ 3118.052828][T16990] loop2: rw=2049, want=17, limit=16
[ 3118.065066][T16990] Buffer I/O error on dev loop2, logical block 16, lost async page write
15:41:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0xfffffffe, 0xa198)

15:41:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x65580000}, 0x0)

15:41:24 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x48)

15:41:24 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000018000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3118.199597][T17126] loop4: detected capacity change from 0 to 16
[ 3118.238951][T17133] loop1: detected capacity change from 0 to 16
15:41:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x10000000000, 0xa198)

[ 3118.265224][T17135] loop2: detected capacity change from 0 to 16
[ 3118.370212][T17138] loop4: detected capacity change from 0 to 16
15:41:24 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
symlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='./bus\x00')
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001440)={{'\x00', 0x3}, {0x5}, 0x80, 0x0, 0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)="503af789578a2134b8ed1289cfb1bbae2a881d57fc74d47b6585c7e41711ba8f2528c5d5a7b6c1727e87769d0a7b1866684a3b0501e1be06117b4a6dacce0b93a10b5cd1465d6e0428a36ab60f0c0af7560842d761f949364ddc2c127cdf4c8752011bd6a655767f4f39130635ebae31d7", 0x71, 0x0, &(0x7f0000000380)={0x2, 0x8f, {0x1, 0xc, 0x77, "a990526874e3ba0abb04e8f19d2eb1844792c3e2b3db67b6d99a3db82e7e4ccf4c98e2e73e4f8a3a00a7b78366560684daa3687c07c015a18f37ccb9f8dcae4abc2fb6c49211ed247d1b749ee5e08169ed341acf190e4045bf443cfdee021e472787d46ea7d5bf594ee127ecf67bce38650b8e505acb2f", 0xb, "ec983889f36ab58dc6929b"}, 0x1000, "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"}, 0x109b})
sendfile(r1, r2, 0x0, 0x4000000000010046)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>r0, {0x4}}, './file0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000001680)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)=@deltaction={0x120, 0x31, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6007}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40080}, 0x101)
sendfile(r0, r0, &(0x7f00000001c0), 0xa198)

15:41:24 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x50)

15:41:24 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000019000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x80000000000, 0xa198)

15:41:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x68000000}, 0x0)

[ 3118.524201][T17008] syz-executor.5: attempt to access beyond end of device
[ 3118.524201][T17008] loop5: rw=2049, want=17, limit=16
[ 3118.576453][T17145] loop1: detected capacity change from 0 to 16
[ 3118.579969][T17147] loop4: detected capacity change from 0 to 16
15:41:24 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x1000000000000, 0xa198)

15:41:24 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000025000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

[ 3118.663735][T17154] loop5: detected capacity change from 0 to 16
15:41:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x58)

[ 3118.710124][T17161] loop4: detected capacity change from 0 to 16
[ 3118.764245][T17164] loop1: detected capacity change from 0 to 16
15:41:25 executing program 2:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = getpgid(0x0)
setpgid(0xffffffffffffffff, r0)
prlimit64(r0, 0xc, &(0x7f0000000140)={0xe, 0x3fe}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x20, 0x99, 0x2, 0x3a, 0x0, 0x2, 0xe0a82, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x24f}, 0x80, 0x9, 0x1, 0x5, 0x65b4, 0x4, 0x7, 0x0, 0xd9f8, 0x0, 0x7}, r1, 0x5, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
setrlimit(0x6, &(0x7f0000000080)={0x8001, 0x4})
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r2, r2, &(0x7f00000001c0), 0xa198)

[ 3118.830361][T17135] syz-executor.2: attempt to access beyond end of device
[ 3118.830361][T17135] loop2: rw=2049, want=17, limit=16
15:41:25 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000c458000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x2000000000000, 0xa198)

15:41:25 executing program 5:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'vfat\x00'}, {0x20, '@(]:'}, {0x20, 'vfat\x00'}], 0xa, "a1e11fbc8dfae468008c0330aa4633e744892639359969509e3c5eaee0d3c59056b3b5b03e5ef1dcef71fcd0c9ed8d158080"}, 0x4e)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x401}, 0x0)
r1 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x8)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

15:41:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x3, 0xb9df, 0x0, 0x5, 0x36, 0x0, 0x5}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x60)

15:41:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="49d1e3e5000000000400f1ff0c0001007463696e64657800040002"], 0x34}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0xf0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0)

[ 3118.906029][T17269] loop5: detected capacity change from 0 to 16
[ 3118.917810][T17274] loop1: detected capacity change from 0 to 16
[ 3118.920056][T17273] loop4: detected capacity change from 0 to 16
[ 3118.940563][T17278] loop2: detected capacity change from 0 to 16
15:41:25 executing program 0:
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_submit(0x0, 0x0, 0x0)
r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write(0xffffffffffffffff, &(0x7f0000000100)="82aff78761a3e5e114af402e636c84122294f599dabd1f77f3b6c484d3cbcfef53eeeb7139e836a57e157bf9", 0x2c)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x1, [], 0x0, "2156816c73038c"})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000640)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x1, "2156816c73038c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053540)={{0x0, 0x223a77ab, 0x9, 0x10000, 0x3a6, 0x100000000, 0x0, 0x6, 0xa1, 0x80, 0xfffffffa, 0xfffffffffffff800, 0x2, 0x9}, 0x18, [0x0, 0x0, 0x0]})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000060000000000000000a20000000000a050000000000000000000a0000010900010073797a31000000007c000000160a010300000000000000000a000000"], 0xb0}}, 0x0)

15:41:25 executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x401}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0)
r0 = open(&(0x7f0000004400)='./file0\x00', 0x200c2, 0x0)
sched_setattr(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x72, 0x0, 0xb9df, 0x1, 0x5, 0x36}, 0x0)
sendfile(r0, r0, &(0x7f00000001c0)=0x7ffffffffffff, 0xa198)

15:41:25 executing program 1:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8010, &(0x7f0000000180)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0)
ino